[Declude.JunkMail] No one at Declude?
Last Wednesday (3/27/2013), I renewed my Declude and Messaage Sniffer service agreements. A full week later, they both still come up as expired. All phone calls and emails have gone unanswered. I left voice mails for Tech support, Sales and the phone number previously listed on this list for John. I emailed both support at declude and jprovost at declude.com. I don't know where to go from here. A very sad time for Declude. Don Sent via the WebMail system at net1media.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Solid State Drives
Hi All, Has anyone attempted to place the \IMail\Spool directory on a solid state hard drive? What are your experiences? Are there any reason not to do this? Thanks for the input, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] AVG Files
What files should be in my Declude\scanners\avg\db directory? What are the current dates? Here is the directory I have: 07/29/2011 11:44 AM 0 avi7.avg 09/11/2011 11:03 PM85,824,663 incavi.avm 07/29/2011 11:44 AM 0 microavi.avg 07/29/2011 11:44 AM 0 miniavi.avg I am concerned that the file sizes are zero and that they are not all being updated. Thanks, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude 4.9.39 Interim Release Notes
David, Thanks for adding the HiJack email. I had performed the same function through a background task that would monitor the hold2 directory. I had previously sent a suggestion to add a variable to Declude that would contain the user authentication email address. Is this anywhere on the suggestion list? Any possibility of seeing this down the road or anytime soon? Thanks, Don Winsauer Net1 Media - Original Message - From: David Barker To: declude.vi...@declude.com ; declude.junkmail@declude.com Sent: Wednesday, November 04, 2009 11:11 AM Subject: [Declude.JunkMail] Declude 4.9.39 Interim Release Notes Please note these releases are interim and still considered beta. Any test feedback would be appreciated. 4.9.39 Added a function to send a notify e-mail when hijack is triggered and e-mails are being held in the Hold2 folder To turn the Hijack e-mail notify on add the following directive to the hijack.cfg. HIJNOTIFY ON Add the include HijackNotify.eml into the \Declude directory. The recipient of the email can be modified. 4.8.39 IPBYPASS can be configured with CIDR 4.8.38 Add the Recipient, mailfrom and subject information to the blklst.txt file. the format blklst.txt file is Date|time|spool#|IP|TotalWeight|LastAction|RecpList|mailfrom|subject|testsfailed Example: Multiple Recipients: 10/14/2009|11:40:06.109|53|24.177.234.76|18|s...@hcss.net,s...@hcss.net,test...@yahoo,beg...@yahoo.com,donotl...@gmail, |owner-nolist-30960_*bigm**ridgewoodcable*-...@soar.soulfulbliss.com|[59]Guaranteed*-payment-center|CATCHALLMAILS=0,NOL EGITCONTENT=0,IPNOTINMX=0,SORBS-DUL=5,FIVETEN-SRC=2,ZEN=7,SORBS=7,DYNHELO=5,FROMNOMATCH=2,WEIGHT10=10,WEIGHT14=14,| One Recipient: 10/14/2009|11:40:06.296|15|218.16.123.185|37|s...@hcss.net,|info_claimsprocessgabjgfu...@gmx.net|CONTACT AGENT FOR CONFIRMATION|CATCHALLMAILS=0,NOLEGITCONTENT=0,IPNOTINMX=0,FIVETEN-SRC=2,NJABL=4,BASE64=4,CMDSPACE=8,DYNHELO=5,HELOBOGUS =5,REVDNS=10,SPFFAIL=10,WEIGHT10=10,WEIGHT14=14,WEIGHT20=20,WEIGHT30=30,| 4.8.37 PostiniFix, Add a new directive POSTINIFIX ON/OFF goes in the declude.cfg file Configuration: In declude.cfg file: POSTINIFIXON in order for the Posting Fix to work 4.8.36 Fix for Virus test was not catching the EICAR test due to e-mail formatting 4.7.35 Added support for IMail SQL Database for AUTOWHITELIST. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] User Authentication enhancement suggestion
I have noticed that Junkmail puts the user authentication email address in the log files. This had been very helpful. I would like to ask that Declude provide this information in a variable. That way, I might use this information in a filter or even put it in the headers of outgoing emails. Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Global.cfg cleanup
David, Thanks for the info!! I was aware of Hijack but being a long time Declude user, I thought it was still a product that need to be purchased separately. I turned it on and will track how it does. Thanks again, Don - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Tuesday, April 28, 2009 2:19 PM Subject: RE: [Declude.JunkMail] Global.cfg cleanup This is exactly why delude Hijack is designed to prevent and resolve. If you have a file hijack.cfg.off in your \declude directory just rename it to hijack.cfg to turn it on. Further information about hijack can be found here. http://www.declude.com/searchresults.asp?Cat=125 David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of decl...@mail.net1media.com Sent: Tuesday, April 28, 2009 3:18 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Global.cfg cleanup Serge, We had a similar situation happen about a week ago. For us, it turned out that one of our clients was infected with a virus/spyware/malware and was sending hundreds of thousands of spam messages. We had WHITELIST AUTH in the global.cfg. Once he authenticated, he was whitelisted. The system just could not keep up with the load. Once we figured out what was happening it took us a while to identify which account it was. I found that with LOGLEVEL MID, there is a line in the DECmmdd.LOG file that has the text [Authenticated:email address]. By searching the file and finding an unusually large volume of them from one user showed me which account to disable. Hope this helps, Don - Original Message - From: nick To: declude.junkmail@declude.com Sent: Tuesday, April 28, 2009 12:31 PM Subject: Re: [Declude.JunkMail] Global.cfg cleanup Serge, Are you getting a lot of invalids? In other words maybe too much traffic for some reason. Also are you scanning for virii after junkmail runs? -Nick From: Serge se...@cefib.com Sent: Tuesday, April 28, 2009 1:04 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Global.cfg cleanup first thing i did tested the DNS and looked at declude logs no problem there my cpus were not able to handle the traffic, as simple as that - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Tuesday, April 28, 2009 4:00 PM Subject: RE: [Declude.JunkMail] Global.cfg cleanup Serge, have you checked to make sure you not having DNS issues. DNS causes 80% of the issues with delays. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Serge Sent: Tuesday, April 28, 2009 11:51 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Global.cfg cleanup Importance: High For about a week my server (2xP3xeon 2.8GHz) was beiing saturated by an increase of traffic 100% CPU for hours and ten of thousands of messages in \proc the servers was working fine for several years something had to be done, decided to clean global.cfg, and need help optimizing AVafterJM was on Cleaned global.cfg left only Sniffer, Zerohour, some builtin tests, and a couple of filters the server is now stable, but i need some answers to decide what to do next 1- loglevel and logOK have any effects on CPU ? 2- Any DNS tests that are realy important ? (for now, I removed all) 3- Any of the following external tests / Filters are important, or are they outdated ? TIA #HELOISIP external nonzero E:\imail\filters\heloisip\heloisip.exe 3 0 #HELOISIPX external nonzero E:\imail\filters\heloisip\heloisipx.exe 3 0 #SIZE-S external11CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 100000 #SIZE-M external12CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 1000-100 #SIZE-L external13CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 1000-200 #SIZE-XL external14CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 1000-300 #SPAMCHK external weight E:\spamchk\spamchk.exe #INV-URIBL external weight E:\INVURIBL\INVURIBL.exe %WEIGHT% %REMOTEIP
Re: [Declude.JunkMail] Global.cfg cleanup
Serge, We had a similar situation happen about a week ago. For us, it turned out that one of our clients was infected with a virus/spyware/malware and was sending hundreds of thousands of spam messages. We had WHITELIST AUTH in the global.cfg. Once he authenticated, he was whitelisted. The system just could not keep up with the load. Once we figured out what was happening it took us a while to identify which account it was. I found that with LOGLEVEL MID, there is a line in the DECmmdd.LOG file that has the text [Authenticated:email address]. By searching the file and finding an unusually large volume of them from one user showed me which account to disable. Hope this helps, Don - Original Message - From: nick To: declude.junkmail@declude.com Sent: Tuesday, April 28, 2009 12:31 PM Subject: Re: [Declude.JunkMail] Global.cfg cleanup Serge, Are you getting a lot of invalids? In other words maybe too much traffic for some reason. Also are you scanning for virii after junkmail runs? -Nick -- From: Serge se...@cefib.com Sent: Tuesday, April 28, 2009 1:04 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Global.cfg cleanup first thing i did tested the DNS and looked at declude logs no problem there my cpus were not able to handle the traffic, as simple as that - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Tuesday, April 28, 2009 4:00 PM Subject: RE: [Declude.JunkMail] Global.cfg cleanup Serge, have you checked to make sure you not having DNS issues. DNS causes 80% of the issues with delays. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Serge Sent: Tuesday, April 28, 2009 11:51 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Global.cfg cleanup Importance: High For about a week my server (2xP3xeon 2.8GHz) was beiing saturated by an increase of traffic 100% CPU for hours and ten of thousands of messages in \proc the servers was working fine for several years something had to be done, decided to clean global.cfg, and need help optimizing AVafterJM was on Cleaned global.cfg left only Sniffer, Zerohour, some builtin tests, and a couple of filters the server is now stable, but i need some answers to decide what to do next 1- loglevel and logOK have any effects on CPU ? 2- Any DNS tests that are realy important ? (for now, I removed all) 3- Any of the following external tests / Filters are important, or are they outdated ? TIA #HELOISIP external nonzero E:\imail\filters\heloisip\heloisip.exe 3 0 #HELOISIPX external nonzero E:\imail\filters\heloisip\heloisipx.exe 3 0 #SIZE-S external11CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 100000 #SIZE-M external12CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 1000-100 #SIZE-L external13CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 1000-200 #SIZE-XL external14CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 1000-300 #SPAMCHK external weight E:\spamchk\spamchk.exe #INV-URIBL external weight E:\INVURIBL\INVURIBL.exe %WEIGHT% %REMOTEIP% 0 0 ## #GIBBERISH filter E:\IMail\Filters\Gibberish.txt x 0 0 #GIBBERISHSUB filter E:\IMail\Filters\GibberishSub.txtx 0 0 #DYNAMIC filter E:\IMail\Filters\Dynamic.txt x -1 0 #SURBLfilter E:\IMail\Filters\Surbl\surbl.txt x 1 0 #OFFENSIVE filter E:\IMail\Filters\offensive.txt x 0 0 ## # Good attribute Checks, KM00 #FALSE-AOL filter E:\Imail\KM00\False_AOL.txt x 0 0 #FALSE-YAHOO filter E:\Imail\KM00\False_Yahoo.txt x 0 0 #FALSE-HOTMAIL filter E:\Imail\KM00\False_Hotmail.txt x 0 0 #FALSE-TELEFONICA filter E:\Imail\KM00\False_telefonica.txt x 0 0 #GOOD-TELEFONICA filter E:\Imail\KM00\good_telefonica.txt x 0 0 #GOOD_HOTMAIL filter E:\Imail\KM00\Good_Hotmail.txt x 0 0 #GOOD_AOL filter E:\Imail\KM00\Good_Aol.txt x 0 0 #GOOD_Yahoo filter E:\Imail\KM00\Good_Yahoo.txt x 0 0 ## #FILTER-BODYURL filter E:\Imail\KM00\IMail_Filter_URLinBody.txt x 0
[Declude.JunkMail]
IMail Version 9.2. (We have the latest but just haven't installed it yet) It works great and helped me catch one false positive just this AM, but I had to create the mailbox (folder)manually from the web interface. Does it make a difference if that's a space or a tab between MAILBOX and spam? I used a tab. MAILBOX spam MAILBOX spam Can Mailbox be used multiple times such a one folder used for an IP blacklist filter and another used for PDFs? Such as: IPBLACKLIst MAILBOX BADIPs FILTERPDF MAILBOX PDF ~Joe - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Wednesday, November 12, 2008 8:07 AM Subject: RE: [Declude.JunkMail] Wish List: Related to Anyone know a tool... This is how the Mailbox action should work. The MAILBOX action will send an E-mail to a specific mailbox (folder) for the recipient. For example, you can have E-mail moved to a "spam" mailbox that the user can check via web messaging or IMAP (or POP3, by setting up a special account in the format "user-mailbox"). To use it, just include the name of the mailbox to use -- for example, "WEIGHT10 MAILBOX spam". Are you using SM or IM ? David BarkerVP Operations DecludeYour Email security is our business978.499.2933 office978.988.1311 fax[EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Declude JunkmailSent: Wednesday, November 12, 2008 1:21 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Wish List: Related to Anyone know a tool... It would certainly be nice if the Mailbox command would create a new folder in a user's account. Such asweight22mailboxjunkmailwhere thefolder named junkmailwould automatically be created. Or maybe I'm missing something? When I attempted to use this directive in a username.junkmail file, it wouldn't work until I manually created the folder for email to go to. Maybe someone can point me to a good way to do this. ~Joe ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] BINGO!!!
Yep... you hit the nail on the head... That certainly did the trick. It works now... :)) THANK YOU.. case closed ~Joe-Original Message-From: "David Barker" [EMAIL PROTECTED]Sent 11/12/2008 4:29:33 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] I think you may be correct, this could well be a setting in IMail. David Barker From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ncl AdminSent: Wednesday, November 12, 2008 5:23 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] It wouldn't create a folder if Imail is set in the domain control panel to not allow that I believe.Message Mailbox Options Default Maximum Mailbox Size: byte(s) KB MB GB Max. Outbound Message Size: byte(s) KB MB GB Single Message Maximum Size: byte(s) KB MB GB Full Mailbox Notify (percentage): Default Maximum Messages: Full Mailbox Notify Address: Maximum User Count: Current User Count: Sub-mailbox Creation: Create Send to Inbox Bounce Minimum POP Frequency (minutes): At 04:32 PM 11/12/2008 -0500, David Barker wrote: Not sure why it is not creating the folder as it should do. It should not matter if there is a space or tab used. I would suggest opening a ticket with [EMAIL PROTECTED] m so we can troubleshoot the issue with you.David BarkerFrom: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Declude JunkmailSent: Wednesday, November 12, 2008 11:18 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail]IMail Version 9.2. (We have the latest but just haven't installed it yet)It works great and helped me catch one false positive just this AM, but I had to create the mailbox (folder) manually from the web interface. Does it make a difference if that's a space or a tab between MAILBOX and spam? I used a tab.MAILBOX spamMAILBOX spamCan Mailbox be used multiple times such a one folder used for an IP blacklist filter and another used for PDFs? Such as:IPBLACKLIst MAILBOX BADIPsFILTERPDF MAILBOX PDF~Joe- Original Message - From: mailto:[EMAIL PROTECTED]David Barker To: mailto:declude.junkmail@declude.comdeclude.junkmail@declude.com Sent: Wednesday, November 12, 2008 8:07 AMSubject: RE: [Declude.JunkMail] Wish List: Related to Anyone know a tool...This is how the Mailbox action should work. The MAILBOX action will send an E-mail to a specific mailbox (folder) for the recipient. For example, you can have E-mail moved to a "spam" mailbox that the user can check via web messaging or IMAP (or POP3, by setting up a special account in the format "user-mailbox"). To use it, just include the name of the mailbox to use -- for example, "WEIGHT10 MAILBOX spam".Are you using SM or IM ?David BarkerVP Operations DecludeYour Email security is our business978.499.2933 office978.988.1311 fax[EMAIL PROTECTED]From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Declude JunkmailSent: Wednesday, November 12, 2008 1:21 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Wish List: Related to Anyone know a tool...It would certainly be nice if the Mailbox command would create a new folder in a user's account.Such asweight22 mailbox junkmailwhere the folder named junkmail would automatically be created.Or maybe I'm missing something? When I attempted to use this directive in a username.junkmail file, it wouldn't work until I manually created the folder for email to go to.Maybe someone can point me to a good way to do this.~Joe---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. -This information is intended only for the use of the individual orentity named above. If you are not the intended recipient, you are hereby notified thatany disclosure, copying, distribution, or action taken in relianceon the contents of these documents is strictly prohibited. If youhave received this information in error, please notify the senderimmediately and arrange for the return or destruction of the document(s).Warning: All e-mail sent to or from this address will be received orotherwise recorded by the Corporate e-mail system and is subject to archival, monitoring or review by, and/or disclosure to, someone otherthan the recipient.---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] Wish List: Related to Anyone know a tool...
It would certainly be nice if the Mailbox command would create a new folder in a user's account. Such as weight22mailboxjunkmailwhere thefolder named junkmailwould automatically be created. Or maybe I'm missing something? When I attempted to use this directive in a username.junkmail file, it wouldn't work until I manually created the folder for email to go to. Maybe someone can point me to a good way to do this. ~Joe ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] Problems with AUTOWHITELIST
I am having an issue with AUTOWHITELIST. I have a customer who's users use the web mail client exclusively. Because of this, they put each other in their address books. As spammers will spoof email to one user with another user from the same domain's address, this becomes a problem. With AUTOWHITELIST ON, all of this type of spam gets whitelisted. I cannot turn the feature off because that is how I let my other customers manage their personal whitelist. I would request that Declude offer an alternative to AUTOWHITELIST. Give me a test whereby I can assign a weight to an email if the sender is in the address book. That way, I can assign an appropriate negative weight to allow some of the email to come through but still catch the real bad stuff. Once it's whitelisted, nothing else can be done. This also goes for WHITELIST AUTH. Give us a test whereby I can test for Authentication and do whatever I want based on that. Please help, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] whitelist auth and spammer infested computer
In this regard, I would like to see an alternative to Whitelist Auth. Create a test for Authentication. That way we can add a negative weight rather than whitelist an email. Just a thought, Don - Original Message - From: Harry vanderzand To: declude.junkmail@declude.com Sent: Monday, August 11, 2008 8:25 PM Subject: [Declude.JunkMail] whitelist auth and spammer infested computer I have a situation where a client's computer in their network got infected by a spammer and 100,000 email got send out over the weekend It sure caused a big mess. How can I prevent this when I am using whitelist auth or do I need to turn that off? I have all the latest software from Declude Should I be using Declude Hijack? I do have a few clients that do legitimate mass mailings from time to time. Any help would be very appreciated. Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Tip of the day??
Ping. kinda quiet arounf here... Anyone got any tips on blocking the business loan junkmail? ~Joe ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] ENVFROM test
I could not find this test in the Junkmail Manual. I have a customer who is getting false negatives with this test. I wanted to see what triggers this but could not find any documentation. Could someone please fill me in? Thanks, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Filter for Bounce messages
I am looking for a filter that will allow me to delete bounce type messages. We are getting on internal blacklists (Bellsouth, Comcast) from what I believe is an over abundance of bounce messages. I would like to filter these out on my server. If anyone can help, I would appreciate it. Thanks, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x
I too have would love to see a solution for this. I have talked to doctor's offices that need this type of functionality for their email communications of patient information. Usually between two doctors or a doctor's office and a hospital. I will keep watching this thread with great interest. Don - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, June 07, 2007 7:42 PM Subject: Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x Interesting. I wonder how it works under the hood. You send securely to anyone, and they create a password and read the mail. Or at least that's what I got out of the NetSol presentation. As the sender, you add a small plugin to Outlook / OE, but the recipient doesn't need to do anything other than create the password. That doesn't sound very secure on the receiving end to me. I imagine the encryption works fine for keeping people from reading the mail in transit, but I don't see how you can be sure without a handshake of some kind how you know the intended recipient is the one who got the message. -Dave Doherty Skywaves, Inc. 97 Webster Street Worcester, MA 01603 508-425-7176 - Original Message - From: Howard Smith (N.O.R.A.D.) [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, June 07, 2007 5:35 PM Subject: RE: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x Here are examples of solutions offered by other ISP: https://sr.securemail.att.com/securemail/ http://www.networksolutions.com/email-account/email-security.jsp Howard Smith . -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Thursday, June 07, 2007 4:56 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x Are you looking for a solution like the PGP plug in's for Outlook or something else? Darrell --- Check out http://www.invariantsystems.com for utilities for Declude and Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Howard Smith (N.O.R.A.D.) wrote: I am an ISP that have customers in need of an Secure Email Solution such as a outlook plug-in , similar to what ATT and network solutions offer their email customers . Do anyone know of any company having an offering for ISP? Thanks Howard Howard Smith --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [.This E-mail scanned for viruses by www.SecureTrek.com, a N.O.R.A.D. Company-v2ta] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] New Reporting Tool
I've got ActiveState Perl 5.8.8 bld 819 installed and working. I use perl for all sorts of other scripts with no issues. I'm not sure what Regex is. I thought it was part of your code. I don't see a perl package install called Regex. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Posted At: Monday, December 11, 2006 4:33 PM Posted To: Lists - Declude JunkMail Conversation: [Declude.JunkMail] New Reporting Tool Subject: RE: [Declude.JunkMail] New Reporting Tool What's Regex ? Do you have PERL installed ? A 20 meg log file shouldn't matter... Karl Drugge -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Lists - Declude JunkMail Sent: Thursday, December 07, 2006 4:29 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] New Reporting Tool Thanks so much for this! I tried it out and it errors out as follows: File path : g:/logarchive/ Processing a single day Opening File : g:/logarchive/dec1206.log . Sorting arrays and cleaning up data Unmatched [ in regex; marked by -- HERE in m/[ -- HERE weight/ at f:\tools\dis tro-declog.pl line 443. My log is 20mb if that matters. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Posted At: Thursday, December 07, 2006 1:53 PM Posted To: Lists - Declude JunkMail Conversation: New Reporting Tool Subject: [Declude.JunkMail] New Reporting Tool The newest PERL script. Slices, dices, etc ... Throw it in a directory, edit a few environment variables at the top of the script, dump in a few Declude logs, run it, enjoy. Requires PERL, of course. Added two command line switches : 'day' and 'week' . Day does the previous day, week does the previous week. No command line switch, and you do all the logs in the directory. This can be memory intensive... You have been warned ! My own server, with 11-13k log files, consumes 700+ megs of memory when doing an entire month. Folks with larger files might want to think about doing this many files at once. Karl Drugge --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] New Reporting Tool
Thanks so much for this! I tried it out and it errors out as follows: File path : g:/logarchive/ Processing a single day Opening File : g:/logarchive/dec1206.log . Sorting arrays and cleaning up data Unmatched [ in regex; marked by -- HERE in m/[ -- HERE weight/ at f:\tools\dis tro-declog.pl line 443. My log is 20mb if that matters. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Posted At: Thursday, December 07, 2006 1:53 PM Posted To: Lists - Declude JunkMail Conversation: New Reporting Tool Subject: [Declude.JunkMail] New Reporting Tool The newest PERL script. Slices, dices, etc ... Throw it in a directory, edit a few environment variables at the top of the script, dump in a few Declude logs, run it, enjoy. Requires PERL, of course. Added two command line switches : 'day' and 'week' . Day does the previous day, week does the previous week. No command line switch, and you do all the logs in the directory. This can be memory intensive... You have been warned ! My own server, with 11-13k log files, consumes 700+ megs of memory when doing an entire month. Folks with larger files might want to think about doing this many files at once. Karl Drugge --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude not modifying subject line
Kevin, I am very well aware of what byte sequences constitute the end of a line. However, if the problem were this simple it would have been fixed long ago. Contrary to what some have said here, we have seen many instances where IMail likewise appends its headers to the end of the message. The broken line terminators are not necessarily of the same type in a given message. In addition, they are not necessarily adjacent to each other (with leading whitespace or unprintable characters on a line). What may appear obvious to the eye is often not at all what exists behind the scene. You may look at a message and be certain where the headers end and the body begins (the separating blank line). However, that message may not necessarily contain two consecutive EOL sequences of any type anywhere. David Franco-Rocha - Original Message - From: Kevin Bilbee [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, November 08, 2006 5:45 PM Subject: RE: [Declude.JunkMail] declude not modifying subject line I do not understand why you need to rewrite the message beyond what you already do? Just determine the end of headers properly then rewrite the message with your headers in the proper location. You already rewrite the message when adding headers so why would it take any longer to properly detect the end of headers. If you have two LF sequences next to each other ignoring the CR then you have the end of headers. For example if you have CRLFCRLF OR LFCRLFCR OR LFLF I have never seen a message use CR alone for an end of line. There are two LF bytes in each sequence ignore the CR bytes. Then when writing out the message with the Declude headers include the original byte sequences for each line. And the Declude lines should have the proper CRLF sequences. My two cents! Kevin Bilbee 1. I don't like to keep going in circles on this. If it was as easy as just fix it there would be no issue. Please understand that this is a lot more complex than you may realize, we are considering making the fixing of line terminators as an optional feature to be turned on/off because of a potential performance degradation of rewriting the messages. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] ping
pong - Original Message - From: Shaun Patterson To: declude.junkmail@declude.com Sent: Tuesday, June 13, 2006 4:06 PM Subject: [Declude.JunkMail] ping ping ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelisted address getting trapped anyway
The WHITELIST FROM directive uses the sender of the message as specified in the message envelope (MAIL FROM:[EMAIL PROTECTED]), which may or may not correspond to the From: line in the headers of the message itself. In this case, it did not. The filters operate on the message file, not on the envelope. That is why you can have different results like in this case. The X-Declude-Sender: x-header is the sender as specified in the envelope. David Franco-Rocha Declude Technical / Engineering - Original Message - From: Scott Fisher To: Declude.JunkMail@declude.com Sent: Thursday, March 16, 2006 12:00 PM Subject: Re: [Declude.JunkMail] Whitelisted address getting trapped anyway You might need WHITELIST from .xx.com (the smtp sender address looks to be in the fromat [EMAIL PROTECTED]) - Original Message - From: Harry Vanderzand To: Declude.JunkMail@declude.com Sent: Saturday, March 18, 2006 10:17 AM Subject: [Declude.JunkMail] Whitelisted address getting trapped anyway have an addres that I have whitelisted WHITELIST FROM @.com in global.cfg Yet somehow it got marked as spam There was a matchin a filter file How is this possible? Should whitelisting not take precedence? See headers below Received: from mailface.roving.com [63.251.135.75] by intown.net with ESMTP (SMTPD-8.22) id A17A068C; Fri, 17 Mar 2006 14:43:54 -0500Received: from ws06 (unknown [10.200.200.61])by mailface.roving.com (Postfix) with ESMTP id 8224448C003for [EMAIL PROTECTED]; Fri, 17 Mar 2006 14:42:37 -0500 (EST)Message-ID: [EMAIL PROTECTED]Date: Fri, 17 Mar 2006 14:43:53 -0500 (EST)From: Ken Weinberg [EMAIL PROTECTED]Reply-To: [EMAIL PROTECTED]To: [EMAIL PROTECTED]Subject: We Need Your InputMIME-Version: 1.0Content-Type: multipart/alternative; boundary="=_Part_13064663_1921543487.1142624633764"X-Roving-Queued: 20060317 02:43:53.764X-Mailer: Roving Constant Contact 0 (http://www.constantcontact.com)X-Return-Path-Hint: [EMAIL PROTECTED]X-Roving-ID: 1101247029557X-Lumos-SenderID: 1011230829116X-Roving-CampaignId: 1101247029557X-Roving-StreamId: 0X-Declude-Sender: [EMAIL PROTECTED] [63.251.135.75]X-Declude-Spoolname: D11790199df6a.smdX-Note: Total spam weight of this E-mail is 22.X-Note: Spam Tests Failed: FIVETEN-BULK [3], MYFILTER [19], WEIGHT10 [10], WEIGHT11 [11], WEIGHT12 [12], WEIGHT15 [15], WEIGHT19 [19]X-Note: REMOTEIP: 63.251.135.75X-Note: REVDNS: mailface.roving.comX-Note: FROM: [EMAIL PROTECTED]X-Note: TO: X-Spam-Tests-Failed: FIVETEN-BULK, MYFILTER, WEIGHT10, WEIGHT11, WEIGHT12, WEIGHT15, WEIGHT19 [22]X-RCPT-TO: [EMAIL PROTECTED]Status: UX-UIDL: 428964605X-IMail-ThreadID: 11790199df6a Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222
[Declude.JunkMail] SBC contact phone number
Does anyone have a contact phone number for the abuse department at SBCGlobal.Net? We got on their blacklist somehow and having been trying to get off. The log entry says to email [EMAIL PROTECTED] I emailed that address with the pertinent IP info but don't get a response back. Any help would be appreciated, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Headers / MIME Attachments
With reference to the problem reported regarding the detection of attachments in email, please be advised that we are looking into this issue today. David Franco-Rocha Declude Technical / Engineering --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] AVAFTERJM
When scanning for viruses after JunkMail through use of the above directive, the following rule applies: All email will continue to be scanned for viruses EXCEPT those emails having a final JunkMail action of: HOLD DELETE David Franco-Rocha Declude Technical / Engineering --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] ANN: SMTP Gateway
I see Alligate as an excellent compliment to our Imail 8.15/Declude 1.82 setup. I for one was thankful to learn about it through this list, as we've been struggling with finding an SMTP filtering gateway to sit in front of our working, stable Imail/Declude setup. I didn't have any prior experience with Alligate or Brian so my reading of the announcement was strictly informational. I don't see Alligate being a competitor to Imail or SmarterMail. It doesn't provide pop3, imap, webmail, or anything of the things that our customers call their mail server. It could compete against Declude. Except it works at the initial SMTP connection level (Pre processing) whereas Declude works after the SMTP connection is complete (Post processing). If Declude offered a stable pre-processing solution, I for one would sign up immediately. As I am not aware of any information from Declude stating they have a solution for this, we've all had to look elsewhere (5XX, Vamsoft, IMGate, etc). Dictionary attacks are killing us, as is the volume of spammers hitting our Imail box. ANYTHING to minimize what Imail/Declude has to process, without costing and arm and a leg, or a forklift upgrade is welcome! Alligate is a step above the 5XXSINK, by including tarpitting, detailed text logs, secondary SMTP AUTH port, connection blocking, etc. To me it's the right solution at the right time. IMGate wouldn't work for us because my staff doesn't do *nix, and I don't want to be the only one to support the box ;) I've got to sleep sometimes. Since we let our Imail support lapse and are holding judgment on SmarterMail until v3 is released, we're in a technical holding pattern while the spammers continue to assault our servers. I don't think I'm alone, which means there is an opportunity for someone and a potential market. While I love all this stuff, I have to eat too, and don't fault anyone for turning my pain into their financial gain so they can eat, if the value proposition is right. R. Scott Perry got assaulted on the Imail list repeatedly for years for pushing his wares. Imail had a gap-in-functionality, Declude seized the moment and profited by patching that gap. I was thankful for his repeated input/arguments and purchased his product - against Imail's own later offering. I hope Declude isn't struggling - they are vital to our business. I also hope that others aren't silent about other available options, competitive or otherwise. This list is so great for learning - where else can one go to learn more about real-world, ISP-level email delivery? Sorry for the ramble, just had to put my .02 in... Maintain, Babul (210) 696-1130, ext. 102 (210) 696-0572 [fax] Text Pager Email: [EMAIL PROTECTED] The Montopolis Group, Ltd. - www.montopolis.com Building stronger businesses... with Technology -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Posted At: Wednesday, January 25, 2006 5:35 PM Posted To: Lists - Declude JunkMail Conversation: [Declude.JunkMail] ANN: SMTP Gateway Subject: Re: [Declude.JunkMail] ANN: SMTP Gateway I can't believe what is apparently permissible on this list. Has no one realized that this product is a commercial competitor to IMail or SmarterMail, with no relevance to Declude? Don't try that mail is stopped before Declude has to deal with it attempt at association. It is what it is. A separate, commercial anti-spam gateway with no integral link to the now-struggling Declude. At least Len Conrad's free cookbook for IMGate has the exact same features as the one he charges $500 to install. That's always been the redeeming quality of his plugging model. Guess the game has changed. For everyone who's silently letting this go: how'd you feel if Vamsoft started advertising here? Do you think there aren't other people on the list who've kept quiet about similar products and services? --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/rel ease/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/dow nload/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/downloa d/release/ --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED
RE: [Declude.JunkMail] OT - Server Watching.
Or at least half ;) Maintain,Babul (210) 696-1130, ext. 102(210) 696-0572 [fax]Text Pager Email: [EMAIL PROTECTED] The Montopolis Group, Ltd. - www.montopolis.com "Building stronger businesses... with Technology" From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick HayerPosted At: Monday, January 23, 2006 5:53 PMPosted To: Lists - Declude JunkMailConversation: [Declude.JunkMail] OT - Server Watching.Subject: Re: [Declude.JunkMail] OT - Server Watching.John T (Lists) wrote: BTW, what server did DAD stand for? (It never made it off the design board, of if it did it never became a beta, only an alpha.)well with family court so prevalent I would guess MOM got all of DAD's stuff?-Nick :) John T eServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, AndrewSent: Monday, January 23, 2006 2:59 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT - Server Watching. I find that companies that will pay for Microsoft Exchange Server and Client licences (and other BackOffice products) wouldn't blink at the cost of MOM; and the pricing is staggered so that you can buy as much utility as you can realistically implement. What I find attractive is not the application management so much as the Event Log gathering and reporting. Weirdly enough, it's not the large shops that I've seen deploying MOM, but rather, it's the small to medium sized shops that don't have the in-house expertise and find MOM cheaper than outsourcing the high-end technologists. In particular, MOM providesthe basic "root cause analysis" that junior technologists lack, e.g. so that MOM can tell thehelp deskthat the webserver outage is really a DNS problem. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of MattSent: Monday, January 23, 2006 2:46 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] OT - Server Watching. Maybe that's because it costs an arm and a leg: http://www.microsoft.com/mom/howtobuy/default.mspxThis is really remote management software and not just simply monitoring and reporting. Probably makes sense in big enterprises but not for small businesses.MattColbeck, Andrew wrote: I'm quite surprised that nobody has named:http://www.microsoft.com/mom/default.mspxMicrosoft MOM yet. It's quite popular in Microsft shops.Andrew 8) -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, AndrewSent: Monday, January 23, 2006 11:45 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT - Server Watching.WhatsUp someversionorother http://www.ipswitch.comNagios (Open Source, with a *nix bent) http://www.nagios.org/Andrew 8) -Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. BennettSent: Monday, January 23, 2006 11:25 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] OT - Server Watching.Hey,I know this is off topic, but I respect the knowledge and opinions of the people on this list.What software / services do you guys use to watch your servers for up/down status?-Jerry---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] Hardware Issue
David, Thanks for the response but I only understand part of your answer. An expired license agreement is not equal to an expired license to run the software. I know when I have an expired license agreement but when does my license to run the software expire? Don - Original Message - From: David Franco-Rocha [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, December 27, 2005 5:50 AM Subject: Re: [Declude.JunkMail] Hardware Issue An expired license agreement is not equal to an expired license to run the software. It simply does not allow you to update the software, but you can continue to run the version you have been running. David Franco-Rocha Declude Technical / Engineering - Original Message - From: [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, December 27, 2005 1:17 AM Subject: Re: [Declude.JunkMail] Hardware Issue I too have stayed at the 1.82 version while keeping my service contract up to date. I am not ambitious enough to work through all the 2.x and 3.x issues. A heart felt thank you goes out to those of you who are. With the new licensing policy in 3.x, what happens when I decide not to renew the service agreement? Will all the Declude software I have stop working? Am I paying for it's usage only while I have a valid service agreement? It used to be that the service agreement allowed me major version upgrades when they were available without paying an additional fee. Am I now paying for a license to use the software? Don - Original Message - From: Darin Cox [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 26, 2005 3:03 PM Subject: Re: [Declude.JunkMail] Hardware Issue Bottom line is we were told if the license server was offline we would not be impacted. It is seeming now that that statement was not true, though I should withhold judgement until we hear exactly why this had an impact. Very glad I've stuck with 1.82 at the moment, though we had a service agreement that entitled us to upgrade to 3.x. I would certainly like to know what will be done to the software licensing to make sure this problem does not happen again. Otherwise, since mail is considered a critical system, Declude needs to staff 24/7 to address problems as they arise. Darin. - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 26, 2005 3:50 PM Subject: RE: [Declude.JunkMail] Hardware Issue True, very true. But like Andy or Darrell said, they should have done a test by pulling the plug on their license server during the week when they were watching it to see what would happen. But of course, hind sight is always 20/20 and Monday morning quarterbacking is highly overrated. ;-) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Don Brown Sent: Monday, December 26, 2005 12:44 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hardware Issue Software and hardware breaks. Nothing is bulletproof. Some are just better than others. Monday, December 26, 2005, 11:50:20 AM, John T (Lists) [EMAIL PROTECTED] wrote: JTL JTL JTL JTL OUCH! JTL JTL JTL JTL Gee, I thought this is the kind of thing that we were told no way would happen. JTL JTL JTL JTL JTL John T JTL JTL eServices For You JTL JTL JTL JTL JTL JTL -Original Message- JTL From: [EMAIL PROTECTED] JTL [mailto:[EMAIL PROTECTED] On Behalf Of David Franco- Rocha JTL Sent: Monday, December 26, 2005 9:29 AM JTL To: Declude.JunkMail@declude.com JTL Cc: Declude.Virus@declude.com JTL Subject: [Declude.JunkMail] Hardware Issue JTL JTL JTL JTL JTL Due to the long holiday weekend, we have been away from the JTL office for a few days. Unfortunately it has come to our attention JTL that there could be a problem with key validation on the server JTL there. After some testing, we have determined that there is in JTL fact a hardware issue that we expect to have resolved today. JTL JTL JTL JTL JTL JTL JTL JTL We appreciate that you have taken the time to bring this matter JTL to our attention and appreciate your patience while we rectify JTL the situation. We will once again post to this list when the issue has been corrected. JTL JTL JTL JTL JTL JTL JTL JTL Declude Technical / Engineering JTL JTL JTL JTL JTL JTL JTL JTL JTL Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http
Re: [Declude.JunkMail] Hardware Issue
I too have stayed at the 1.82 version while keeping my service contract up to date. I am not ambitious enough to work through all the 2.x and 3.x issues. A heart felt thank you goes out to those of you who are. With the new licensing policy in 3.x, what happens when I decide not to renew the service agreement? Will all the Declude software I have stop working? Am I paying for it's usage only while I have a valid service agreement? It used to be that the service agreement allowed me major version upgrades when they were available without paying an additional fee. Am I now paying for a license to use the software? Don - Original Message - From: Darin Cox [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 26, 2005 3:03 PM Subject: Re: [Declude.JunkMail] Hardware Issue Bottom line is we were told if the license server was offline we would not be impacted. It is seeming now that that statement was not true, though I should withhold judgement until we hear exactly why this had an impact. Very glad I've stuck with 1.82 at the moment, though we had a service agreement that entitled us to upgrade to 3.x. I would certainly like to know what will be done to the software licensing to make sure this problem does not happen again. Otherwise, since mail is considered a critical system, Declude needs to staff 24/7 to address problems as they arise. Darin. - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, December 26, 2005 3:50 PM Subject: RE: [Declude.JunkMail] Hardware Issue True, very true. But like Andy or Darrell said, they should have done a test by pulling the plug on their license server during the week when they were watching it to see what would happen. But of course, hind sight is always 20/20 and Monday morning quarterbacking is highly overrated. ;-) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Don Brown Sent: Monday, December 26, 2005 12:44 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hardware Issue Software and hardware breaks. Nothing is bulletproof. Some are just better than others. Monday, December 26, 2005, 11:50:20 AM, John T (Lists) [EMAIL PROTECTED] wrote: JTL JTL JTL JTL OUCH! JTL JTL JTL JTL Gee, I thought this is the kind of thing that we were told no way would happen. JTL JTL JTL JTL JTL John T JTL JTL eServices For You JTL JTL JTL JTL JTL JTL -Original Message- JTL From: [EMAIL PROTECTED] JTL [mailto:[EMAIL PROTECTED] On Behalf Of David Franco- Rocha JTL Sent: Monday, December 26, 2005 9:29 AM JTL To: Declude.JunkMail@declude.com JTL Cc: Declude.Virus@declude.com JTL Subject: [Declude.JunkMail] Hardware Issue JTL JTL JTL JTL JTL Due to the long holiday weekend, we have been away from the JTL office for a few days. Unfortunately it has come to our attention JTL that there could be a problem with key validation on the server JTL there. After some testing, we have determined that there is in JTL fact a hardware issue that we expect to have resolved today. JTL JTL JTL JTL JTL JTL JTL JTL We appreciate that you have taken the time to bring this matter JTL to our attention and appreciate your patience while we rectify JTL the situation. We will once again post to this list when the issue has been corrected. JTL JTL JTL JTL JTL JTL JTL JTL Declude Technical / Engineering JTL JTL JTL JTL JTL JTL JTL JTL JTL Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] HoldAnalyzer
Darin, I am extremely interested in your app ... Will you be announcing the release via this forum? TIA Doris Dean - Original Message - From: Darin Cox [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, December 06, 2005 5:12 PM Subject: Re: [Declude.JunkMail] HoldAnalyzer Now I remember your app. Sounds great. Unfortunately, our users don't want spam summary messages like this, so we review for them. Fortunately they're happy to pay a little extra for the service of not seeing spam at all, and are satisfied with our review intervals. Our app is very similar to SLSoft's old SpamReview app, but adds customizable actions on messages, like adding to a kill file, negative weight list, false positive report, etc. Darin. - Original Message - From: Kevin Bilbee [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, December 06, 2005 6:56 PM Subject: RE: [Declude.JunkMail] HoldAnalyzer You create a configuration file with the DHR.exe and then schedule it to run with task Scheduler, (dhrcon.exe DHRconfig.xml). It then sends and email to all users with held email, one email per timeperiod you have configured, the minimum is one day. In the email it gives them basic information about the messages headers like Envelope Sender, From Sender, Tests Failed, Date and Time the message arrived, and the subject of the message. Then there is a link after each message summary in the email the user clicks to recover the message. If the link is clicked the message will be requeued and the message source sent to the admin email as configured. At this time they can not log in but if you saw last month I posted a .net utility to encrypt and decrypt imail passwords. This is in preperation to allow for that functionality next year along with the daily email. This way users can go and check the messages held for them anytime they want or just wait til the next day for the email. If you can please let me know exactly what was unclear about the documentation so I can fix it. Rewrite it if you want. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Serge Sent: Tuesday, December 06, 2005 3:21 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] HoldAnalyzer Hi Kevin, you mean an asp app where users can log in and check the hold mail ? how does it exactly work ? do you have a single hold dir for all users ? that will not work in an ISP environment . or is there a way to filter user access to only his own messages ? TIA - Original Message - From: Kevin Bilbee [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, December 06, 2005 9:25 PM Subject: RE: [Declude.JunkMail] HoldAnalyzer With a Hold Analyzer you know longer have to do that for the user. Users recover their own messages. Having users recover their own messages lets the admin know what the recipient thinks is spam and what is not spam. I find it difficult to read their minds. when I did this in the past I made incorrect assumptions on what was spam. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Serge Sent: Tuesday, December 06, 2005 1:04 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] HoldAnalyzer we use imail spool viewer v1.2.4 has all the options we need (check envelope, header, delete, move to spool, ...) great tool --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED
[Declude.JunkMail] Fixed: SPF False Positives
The issue of false positives with the SPF test, reported by a couple of people, has been fixed. This will be included in the next release of the software (post 3.0.5.18). David Franco-Rocha Declude Technical / Engineering --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Excluding domains form tests
Dean, There is currently no way to exclude emails from being scanned by Declude. All emails are checked; only the actions taken can vary by domain. We may provide finer tuning of that as a future enhancement. David Franco-Rocha Declude Technical / Engineering - Original Message - From: Dean Lawrence To: declude.junkmail@declude.com Sent: Tuesday, November 08, 2005 9:04 AM Subject: [Declude.JunkMail] Excluding domains form tests I thought that I had this working properly, but now I'm not too sure. My setup is to by default not to have mail scanned by Junkmail and to only scan domains that I have set-up per-domain rules. All of my tests are defined in my global.cfg file and all test actions in my master $default$.junkmail are commented out. Then in in each domain directory, I have a separate $default$.junkmail mail which defines the action for each individual domain. What I am seeing in my logs though, is that every message that hits my Imail server (8.21) is being tested. The only difference from the per-domain emails is that the action for all of the tests is IGNORE. Other than whitelisting all of my other domains, is there a way to save on processing by not having these message evaluated? I am running Junkmail 3.05.18. Thanks, Dean-- __Dean Lawrence, CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 888.438.4381http://www.idatatech.com/Corporate Internet Development and Marketing Specialists
Re: [Declude.JunkMail] Address Not Whitelisted?
I am missing the thought process. Why is counterweighting by a large number so much better than whitelisting if both achieve the same purpose? Just asking, Don - Original Message - From: Travis Sullivan [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, November 04, 2005 8:59 AM Subject: Re: [Declude.JunkMail] Address Not Whitelisted? Exactly, counterweight works so much better. Whitelist at the last possible option. I counterweight everything and don't have a single whitelist entry. Travis - Original Message - From: Darin Cox [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, November 03, 2005 7:24 PM Subject: Re: [Declude.JunkMail] Address Not Whitelisted? We've found that to be too general... You might try a regex or phrase-based whitelist that looks for unique text in the newsletter to whitelist it (or rather counterweight it). Darin. - Original Message - From: Tyler Jensen [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, November 03, 2005 7:01 PM Subject: RE: [Declude.JunkMail] Address Not Whitelisted? Try Whitelist from @returns.bulk.yahoo.com Or Whitelist from @yahoo-inc.com I have one of these to allow fantasy football and baseball emails through to my franchisees. I have not seen any spam whitelisted because of this setup and I have been using it for at least a year. It may not be the best way but it has worked for me. Tyler -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of mail-lists Sent: Thursday, November 03, 2005 6:36 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Address Not Whitelisted? I'm at my wits end.. These Yahoo news alerts are legitimate messages, but I can't seem to whitelist them. So far in my global.cf I've added WHITELIST FROM settings to the following addresses, but they still don't get to the recipient! [EMAIL PROTECTED], [EMAIL PROTECTED], and [EMAIL PROTECTED] Anybody know what else I can do to allow these e-mails in? Thanks! Cavell Received: from n10.bulk.scd.yahoo.com [66.218.66.189] by cottonwoodfinancial.com (SMTPD-8.21) id A1190444; Thu, 03 Nov 2005 13:12:25 -0600 Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=ginc1024; d=yahoo-inc.com; b=p2OiCTjMDGenNXSS96zFPWPUJWbDSYtXDGfx+d+759EZNpjxhxAkRF35XS37W00BJ3v6G0WpK8 rYURzt55Dtrw8e6wXInDswJk67+7vNJnZRNIECCZO7cXBoKKaw2i4B8/wcWwL6WNeIq2lOUW rYURzt55Dtrw8e6wXInDswJk67+f8JH rYogvNoV28SaQReeLJUYw=; Received: from [66.218.69.2] by n10.bulk.scd.yahoo.com with NNFMP; 03 Nov 2005 19:12:53 - Received: from [66.94.229.26] by mailer2.bulk.scd.yahoo.com with NNFMP; 03 Nov 2005 19:12:53 - Received: from [127.0.0.1] by dlv8.alerts.scd.yahoo.com with NNFMP; 03 Nov 2005 19:12:53 - X-yahoo-newman-property: alerts X-yahoo-newman-id: [EMAIL PROTECTED] From: Yahoo! Alerts [EMAIL PROTECTED] Subject: **SPAM**=?UTF-8?B?S2V5d29yZCBOZXdzOiBbIkFkdmFuY2UgQW1lcmljYSJd?= To: [EMAIL PROTECTED] Reply-To: Yahoo! Alerts [EMAIL PROTECTED] Return-Path: [EMAIL PROTECTED] Errors-To: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: text/html; charset=utf-8 Content-Transfer-Encoding: 8bit X-Yahoo-AlertId:5cYJ5LIxGXHDwPmeko3O878bwgWlTAmS X-Yahoo-Alerts-Beta: YES Date: Thu, 3 Nov 2005 11:12:53 -0800 Message-Id: [EMAIL PROTECTED] X-RBL-Warning: MXRATE-ALLOW: GOOD SENDER X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command. X-RBL-Warning: MAILFROM: Domain returns.bulk.y has no MX or A records [0301]. X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [420e]. X-RBL-Warning: SUBJECTCHARS: Subject with at least 50 characters found. X-RBL-Warning: WEIGHT10: Weight of 24 reaches or exceeds the limit of 10. X-Declude-Sender: alerts.kmydqmbqgu2wknrtmy3taljygvxdau3ikndxovs7he3gwx3hhbeha2thovsvmvjxmiyuw [EMAIL PROTECTED] [66.218.66.189] X-Declude-Spoolname: D611901607008.smd X-Declude-Note: Scanned by Declude 3.0.5.5 (http://www.declude.com/x-note.htm) for spam. X-Declude-Scan: Score [24] at 13:12:37 on 03 Nov 2005 X-Declude-Tests: MXRATE-ALLOW, CMDSPACE, MAILFROM, SPAMHEADERS, SUBJECTCHARS, WEIGHT10, WEIGHT14, WEIGHT18 X-Country-Chain: UNITED STATES-destination X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 424737504 X-IMail-ThreadID: 611901607008 Confidentiality Notice: The information contained in this transmission is intended only for the personal and confidential use of the designated recipient named above. If the receiver of this transmission is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error, and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you are not the intended recipient, please immediately notify the sender and delete this e-mail message from your system. --- This E-mail
Re: [Declude.JunkMail] testing mailserver
Bonno, The text actually did appear as the body of the email. The problem was that the headers were added after the body, which has been an ongoing problem. Declude was not able to determine where the headers actually ended and the body began, so it only *looks* like the text is not in the body. Please send the actual message file as an attachment to [EMAIL PROTECTED] so that we can look at the raw data format of the message. With regard to these broken emails where headers are placed in the wrong location, we are still doing some testing and expect to have a solution very shortly. David Franco-Rocha Declude Technical / Engineering - Original Message - From: Bonno Bloksma To: Declude.JunkMail@declude.com Sent: Wednesday, November 02, 2005 6:31 AM Subject: [Declude.JunkMail] testing mailserver Hi, I was testing our mailserver by setting up a telnet session on port 25 and then entering the commands. I must have done something realy wrong as my tekst appears in the headers in a way not even Outlook Express can see. ;-0 It will show a blank message. This is wat was delivered to me: Received: from TEST [194.109.165.42] by tio.nl (SMTPD-8.21) id AE3902D0; Wed, 02 Nov 2005 12:08:41 +0100dit is een testX-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client [8c200041].X-Declude-Sender: [EMAIL PROTECTED] [194.109.165.42]X-Declude-Spoolname: D9DFC01B0059C.SMDX-Declude-Note: Scanned at tio.nl by Declude 2.0.6 (http://www.declude.com/x-note.htm) for spam.X-Declude-Scan: Score [8] at 12:09:30 on 02 Nov 2005X-Declude-Tests: BADHEADERSX-Country-Chain: NETHERLANDS-destination---[E-mail scanned at tio.nl for viruses by Declude Virus]From: [EMAIL PROTECTED]Date: Wed, 2 Nov 2005 12:09:30 +0100X-RCPT-TO: [EMAIL PROTECTED]Status: UX-UIDL: 383765952X-IMail-ThreadID: 9dfc01b0059c See the "dit is een test" below the received from line? This is what I did: Start (Windows) telnetset LOCAL_ECHOopen mail.tio.nl 25HELO TESTMAIL FROM:[EMAIL PROTECTED]RCPT TO:[EMAIL PROTECTED]DATAdit is een test.QUIT Did I make a BIG mistake? I know I should have added a msgid somewhere and a date line to have a proper valid message but is that nessecary in order to have the text after the DATA command appear as the body part of a mail? I'm using Declude 2.0.6 Met vriendelijke groet, Bonno Bloksma hoofd systeembeheer tio hogeschool toerisme en hospitality julianalaan 9 / 7553 ab hengelo t 074 255 06 10 / f 074 255 06 16 [EMAIL PROTECTED] / www.tio.nl
Re: [Declude.JunkMail] Headers showing up in the body on 3.05.10
Testing thus far has not yet returned any errors in determining the actual end of the headers. The resolution of this issue was not as simple as it may have appeared to some. The search for cr/lf/cr/lf or lf/lf was not sufficient because of the nature of these messages. Some lf sequences, even within the same message, may have been preceded by cr and others not. In addition, only by looking at hexdumps of actual messages did the culprit sequences become clearer. One of the more recent was a cr/lf/space/lf and /cr/lf/tab/lf or a string of invisible characters between the unreliable line terminators. Sometimes there are mixes of spaces and tabs or multiples of each. We anticipate including this fix in the next interim release. David Franco-Rocha Declude Technical / Engineering - Original Message - From: Mark Smith [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, October 28, 2005 7:55 AM Subject: FW: [Declude.JunkMail] Headers showing up in the body on 3.05.10 David, Just for follow-up. As I posted earlier we reverted back to 2.6 from 3.6.11 and 99% of these headers in the body messages are gone. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith Sent: Tuesday, October 25, 2005 4:54 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Headers showing up in the body on 3.05.10 David, Thanks for the explanation! However, I have yet to see a message with SMTP headers in the body if I remove Declude and send mail directly into Exchange. Maybe Exchange will just not deliver? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 25, 2005 3:27 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Headers showing up in the body on 3.05.10 In every instance that we have observed so far the headers in the body are caused by broken mail clients. This is not only an issue for Declude but for mail servers as well. To illustrates the difficulty coming up with a single algorithm that will detect all instances of these broken emails to prevent headers from appearing at the end of a message or within the body of a message. RFC dictates all lines must end with a CR/LF sequence, with a double sequence CR/LF/CR/LF separating the headers from the body. Technically, that would be a 0D 0A 0D 0A sequence. In the byte sequence below, the sixth line contains: 22 0A 20 0D 0A 49 20 73-74 61 72 74 65 64 20 68 where a single 0A is followed by a space and then the required 0D 0A sequence. When this problem was first reported, changes were made in the source to detect a simple 0A as a line terminator, followed by another line terminator sequence. However, this example would not get detected because they inserted a space, which is invisible, between the two line termination sequences. They could have inserted a tab (09) also, so checking only for a space would not have caught all possibilities. In addition, checking only for spaces at the beginning of a line would not solve the problem because certain header lines can be continued on the next line, which requires spaces and then non-blank characters prior to the next line termination sequence. 30 38 3A 35 37 3A 31 33-20 2D 30 35 30 30 0D 0A 4D 49 4D 45 2D 56 65 72-73 69 6F 6E 3A 20 31 2E 30 0D 0A 43 6F 6E 74 65-6E 74 2D 54 79 70 65 3A 20 74 65 78 74 2F 70 6C-61 69 6E 3B 0D 0A 09 63 68 61 72 73 65 74 3D 22-75 73 2D 61 73 63 69 69 22 0A 20 0D 0A 49 20 73-74 61 72 74 65 64 20 68 61 76 69 6E 67 20 61 6E-20 61 66 66 61 69 72 20 77 69 74 68 20 61 20 79-6F 75 6E 67 65 72 2C 20 Often from the outset these issues look extremely simple. However, because all eventualities that have to be covered it becomes quite complex. I am providing this example because things are rarely as simple as they may at first appear. With all that said we are looking into providing a solution for this problem. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, October 24, 2005 9:07 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Headers showing up in the body on 3.05.10 This looks like Declude was expecting to see an occurrence of Blank Folding, but it is making the mistake of detecting headers in the MIME segments or the body as a continuation of the real headers, either that or they changed the code that detects where to throw in the Declude generated headers in order to handle Blank Folding. IMO, Declude should just throw the headers just before the location of the first CRLFCRLF or possibly following a mistaken LFLF. I haven't seen any Declude headers in the body using 2.0.6.16 and earlier. Matt Robert Grosshandler wrote: This has been a problem for awhile (happened with the move to the new architecture, but Declude says it's
[Declude.JunkMail] Declude with SmarterMail 3.0
The 3.0 version of SmarterMail, yet to be released, will pass authentication information to Declude. For those of you who have been patiently waiting to implement WHITELIST AUTH with SmarterMail, please be advised that Declude will support that functionality with SmarterMail 3.0. David Franco-Rocha Declude Technical / Engineering --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Bug: HOP directive
We have discovered a bug in 3.x if you omit the HOP directive in your global.cfg file. The default value will be invalid if the directive does not appear in your configuration file. Instead of omitting the directive altogether, you must specify HOP 0. This will be corrected in the next interim release to default properly to HOP 0 if the directive is omitted. David Franco-Rocha Declude Technical / Engineering --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Headers in Body or at End of Message
We are preparing to test an algorithm to eliminate the problem whereby headers were inserted into the body of a message or at the end of the message. If you have any examples of emails like these, please send them as attachments to [EMAIL PROTECTED]. We would like to run as many as possible through the test program to check that the start of the body is accurately detected. Thanks. David Franco-Rocha Declude Technical / Engineering
[Declude.JunkMail] Headers in Body or at End of Message
We are preparing to test an algorithm to eliminate the problem whereby headers were inserted into the body of a message or at the end of the message. If you have any examples of emails like these, please send them as attachments to support at declude.com. We would like to run as many as possible through the test program to check that the start of the body is accurately detected. Thanks. David Franco-Rocha Declude Technical / Engineering
[Declude.JunkMail] Mail sent to Yahoo! address ends up in Bulk folder
When any customer sends an email through our server to a Yahoo! address, the email get put into the Bulk mail folder. Has anyone else experienced this behavior and have any suggestions? Does anyone have a phone number for the Yahoo! Postmaster to help resolve this issue Thanks in advance, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Mail sent to Yahoo! address ends up in Bulk folder
Thanks John for your reply, I sent an email to my test Yahoo! account and it went into the Bulk email folder. I opened it up and clicked on the option for full headers. There was not anything that gave any indication as to why it had been put there. They probably don't to keep the spammers from figuring out a way around them. Anyone have any other thoughts? Any help would be appreciated, Don - Original Message - From: John T (Lists) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, October 04, 2005 2:07 PM Subject: RE: [Declude.JunkMail] Mail sent to Yahoo! address ends up in Bulk folder Best place to start is to find out why it is being placed there. I believe Yahoo adds header lines for filtering, so getting the headers from the recipient would be the place to start. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, October 04, 2005 11:53 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Mail sent to Yahoo! address ends up in Bulk folder When any customer sends an email through our server to a Yahoo! address, the email get put into the Bulk mail folder. Has anyone else experienced this behavior and have any suggestions? Does anyone have a phone number for the Yahoo! Postmaster to help resolve this issue Thanks in advance, Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] AOL Now blocking Port 25
I searched the archives but couldn't find what I was looking for. Didn't someone post a link to a small software app that would run on the mail server and would forward all traffic from port 587 to port 25. We are not on the current Imail version so we can't use it's built in feature. Thanks in advance, Don - Original Message - From: Mark Smith [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, September 29, 2005 11:34 PM Subject: RE: [Declude.JunkMail] AOL Now blocking Port 25 Setup Windows IIS SMTP service to listen on port XX (something other than 25). Both can run and won't conflict. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Thursday, September 29, 2005 4:23 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] AOL Now blocking Port 25 Anybody out there know the Cisco PIX CLI syntax to do port forwarding on the firewall? I'm running Imail 8.15 and I'm stuck with port 25... -Dave Doherty Skywaves, Inc. - Original Message - From: Kevin Bilbee [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, September 29, 2005 3:48 PM Subject: RE: [Declude.JunkMail] AOL Now blocking Port 25 If you are on imail 8.2x you can setup the alternate port. Search for the thread on the how to. No additional software is needed to do port forwarding. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mark Smith Sent: Thursday, September 29, 2005 11:39 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] AOL Now blocking Port 25 As a web hosting company, we put an SMTP server listening on a different TCP port. We instruct users to modify their SMTP settings in their mail client to use this port. The server listens on this port but relays on 25. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frederick Samarelli Sent: Thursday, September 29, 2005 2:20 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] AOL Now blocking Port 25 Has anyone else been told AOL is now enfosing this policy and how do we get around it. a.. 554 IPT:OA http://postmaster.info.aol.com/errors/554iptoa.html EXPLANATION: The message you received is generated from AOL when sending mail through a third party program and connecting through the default port 25. America Online Inc. will no longer accept outgoing connections on port 25 through third party mail programs. SOLUTION: If you are trying to access your America Online e-mail please visit Keyword: Open Mail Access Send third party e-mail through port 587. This port requires you to authenticate and may require a change to your email client settings. Note, the server you are connecting to must support this configuration. If you are trying to get your AOL e-mail visit Keyword Open Mail Access, all others contact your server administrator for further support on this configuration. For more information visit the port 25 FAQ. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Server Running at 100%
AVAFTERJM ON must be in the virus.cfg file (if it is used) and it does require the ON parameter. David Franco-Rocha - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, September 08, 2005 9:08 PM Subject: Re: [Declude.JunkMail] Server Running at 100% I'm confused. The page in the Knowledge Base http://support.declude.com/Customer/KBArticle.aspx?articleid=11 Now I am too - I had no idea there was a knowledge base now :) says to put it in the global.cfg file. It also says nothing about adding the ON switch. I even exchanged emails with Declude support back on Aug. 2 stating that I was putting AVAFTERJM in my global.cfg file, and support never mentioned that I should have put it in the virus.cfg file, nor was anything said about PRESCAN. Placing it in your global.cfg is wrong. It needs to be in your virus.cfg. Prescan is a seperate feature that if it basically detects no attachments or harmful code it will skip scanning the message period. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Original Message From: David Barker [EMAIL PROTECTED] Sent: Thursday, September 08, 2005 12:01 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Server Running at 100% In your virus.cfg file: AVAFTERJM ON Also ensure that you have the directive: PRESCANON David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Thursday, September 08, 2005 11:56 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Server Running at 100% Importance: High I was told to see if using AVAFTERJM would help on resources on my server...right now I almost dead in the water..my server is cralling to send mailhow do I use this command...exactly how does it go into the config.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message - From: Richard Farris mailto:[EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, August 04, 2005 11:21 AM Subject: [Declude.JunkMail] Spam box Is there a box I can put in front of my Imail server that will help take some of the load off of the spam filtering that Declude is doing Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude and IMail 8.2
Todd, The engineering staff here at Declude has no role in the development or maintenance of the web site. Our sole priority in engineering is the maintenance and development of the product. David Franco-Rocha Declude Technical / Engineering - Original Message - From: Todd [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, August 24, 2005 11:27 AM Subject: Re: [Declude.JunkMail] Declude and IMail 8.2 While I don't see the guys at Declude drinking beer, I do see them updating their website and marketing sales. Its a matter or priorities. 3 months may be acceptable for software development, but for a major bug I do not see it as acceptable. And I don't think Scott would have ever let it go this long. IMail has released patches for 8.2 and that may cloud the issue, but that means Declude has to stay focused. It would be better to clearly communicate they have an issue to there client base, which they did not, and then create a fix for a particular version of 8.2, rather than chase IPSwitch and every version they produce over a period of a year. If IPSwitch releases another patch will it delay the Declude fix for several more months while they correct the code for the new version? The people that will have this problem are most likely the ones with current service agreements, at least with IPSwitch, the ones paying money to stay on top of the software. Declude should keep this in mind. - Original Message - From: Michael Jaworski [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, August 23, 2005 9:56 PM Subject: RE: [Declude.JunkMail] Declude and IMail 8.2 Heimir, You may want to consider using this list as your first line of defense. This is the best place to learn of new issues which are brought to everyone's attention by folks who are in the trenches. Keep in mind not everyone here has the latest version and not everyone is using iMail. I would not expect Declude to keep track of what is going on with my particular e-mail servers. I prefer them to spend all resources keeping up with the spammers. A few have made mention of the delay getting out this fix. It hurts when you are the one who is being impacted by an issue. I have been there but in the end I know they will find a fix and get it implemented as soon as possible. I don't see the folks at Declude sitting around drinking beer and working issues when they feel like it. From my experience in the software developing cycle 3 months for a major change is fast. Keep in mind they need to test and retest all those features we have requested over the years. Add the issue of iMail changing their software and then balance it out with what we pay for maintenance ... I am happy they are still in business constantly working and listening to us to update their product(s). Best to not play victim but actively monitor this anti-spam community created by Scott and driven by a lot of knowledgable, talented and hard working customers. And maintain your maintenance agreement. Small price to pay for what the product does for my customers. Michael Jaworski Puget Sound Network, Inc. (206) 217-0400 (800) 599-9485 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Heimir Eidskrem Sent: Tuesday, August 23, 2005 5:43 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude and IMail 8.2 Thank you for the update. It concern me that I can't find the email notifying your customer about this bug. Could you tell me when it was sent so I can find it and make sure I am not holding this type of emails. They are critical to us so I will put some effort in making sure I get them. Its been over 2.5 months. The fix will not be available for some time according your email. This is a very long time and frankly I think it makes Declude look very bad. I think there have been plenty of complaints about Declude lately. It seems that your reputation is getting a little tarnished. [EMAIL PROTECTED] wrote: Thank you for you posts. We understand your frustration; here are the facts so there is no confusion. 1. This is NOT a bug in Declude. Ipswitch made changes to their IMail architecture, making it incompatible with Declude and this requires a fundamental re-write of Declude not a 10 minute fix. 2. As soon as we were aware of these changes we began development to modify Declude to work with IMail 8.2. 3. It has been our priority and focus since we first identified the problem. 4. In order to deliver a quality product, sufficient testing needs to be done to ensure customer satisfaction. Since identification of the issue additional patches have been released by Ipswitch meaning additional testing and development has been required. 5. This is not an issue of interim releases as Declude product architecture has had to change making it very different from earlier versions of Declude. 6. This is not an issue of having Scott
Re: [Declude.JunkMail] Whitelisting
Richard,
The problem here is, first of all, that Declude
does not look at the cc: or bcc: in the headers. It deals with recipients of the
email solely on the basis of what is in the message envelope (q*.smd file),
which is discarded by IMail after processing; all you eventually see is the
contents of the message itself (the d*.smd file).
Whitelisting ensures that the email will pass all
tests. Under optimal circumstances, if an email source or destination is
whitelisted, all tests should be skipped. If there are two recipients and only
one were whitelisted, the headers of te email would have to indicate a
whitelisted weight of 0 for one recipient and the actual weight for the other
(non-whitelisted) recipient. That would necessitate two different sets of
headers, which would require two separate message files and therefore two
separate envelopes: If the non-whitelisted weight exceeded the HOLD threshold,
one copy of the email would be placed into the HOLD folder with the envelope
modified for that single recipient; the other would be whitelisted and the held
recipient would be deleted from that envelope. In other words, Declude would
have to generate multiple emails from a single email, which is not practical.
How would Declude assign a new queue number to the duplicate email? If one
recipient were whitelisted and the other had a weight of 5 (to be delivered),
there would be different sets of headers and therefore different emails. They
could not both have the same queue number because they could no be placed into
the spool at the same time (one would overwrite the other).
The email server generates a separate copy of the
email for each recipient after processing by Declude. However, there is no
practical way for Declude to create multiple emails from a single
message.
David Franco-Rocha
Declude Technical Support
- Original Message -
From:
Richard
Farris
To: Declude.JunkMail@declude.com
Sent: Monday, July 25, 2005 4:24 PM
Subject: [Declude.JunkMail]
Whitelisting
I just took out all the email addresses I had
whitelisted in my Global file last week because I thought this would
helpstop more spam getting thruand of course folks are now emailing
me saying they are missing mail..newsletters and such...
My question is "Why is it not possible with
Declude to whitelist an email address and it only applies to that email
address and not any others that might be in CC or BCC"?
Richard FarrisEthixs Online1.270.247.
Office1.800.548.3877 Tech Support"Crossroads to a Cleaner
Internet"
- Original Message -
From:
Matt
To: Declude.JunkMail@declude.com
Sent: Monday, July 25, 2005 1:47
PM
Subject: Re: [Declude.JunkMail] Filter
not triggering
Kevin,Just a thought if you wanted to confirm this as
a bug, maybe try a filter for this same message, but match a full word to
see if it triggers. I did decode this segment and there is no
additional encoding or other tricks that would cause a filter to not
hit.IMO, knowing about bugs like this would be very helpful at
times, especially considering the time that it would take each one of us
that was affected by it to figure it out on our own. Maybe if Declude
doesn't want to post this information on their site, we could take it upon
ourselves to share such information with the list when it is
discovered. This is for the most part how the list used to function in
the old days, though most of us seemed to desire a page dedicated to the
topic regardless.MattKevin Bilbee wrote:
Well that would explain why many of my filters are not as effective
as they used to be. Has Declude announced when the fix will be
available
Kevin Bilbee
-Original Message-From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On
Behalf Of John CarterSent: Monday, July 25, 2005 8:05
AMTo: Declude.JunkMail@declude.comSubject:
RE: [Declude.JunkMail] Filter not triggering
I have reported to Declude a problem with the
"CONTAINS" statement. Prior to 2.0.6 (or somewhere around
there)it worked oncharacter match, but after an upgrade to
Declude it only works on a word match. (In other words you could not
longer match on a string of characters within a word.) This would
affect your situation.
I believe the fix is caught up in the wait for the
newest version (the one they are testing now.)
John
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Kevin BilbeeSent: Monday, July 25, 2005
9:10 AMTo: JunkMail DecludeSubject:
[Declude.JunkMail] Filter not triggering
The attache
[Declude.JunkMail] Declude's responsiveness on this list
Yesterday I complained about the lack of participation on this list from Declude. Today alone there have been over a half a dozen posts. This has not gone unnoticed. Keep up the good work! Don --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter not triggering
This is one of the main problems with the "new" Declude - lack
of communication! In the old days, Scott would monitor this list and
respond to posts throughout the day. Now, we are lucky if they respond
even bi-weekly. The last post from Declude was 7/15/05 - 10 days
ago,. Prior to that, the last significant postwas on 6/29/05 -
approx. 2 weeks before that. Why is it so difficult for them to post on a
regular basis? It seem like such an easy thing to do that builds customer
loyalty. On the other hand, lack of it breeds resentment. We all
want Declude to succeed. If they do - we do.
Declude, could you please work on this?
Don
- Original Message -
From:
Matt
To: Declude.JunkMail@declude.com
Sent: Monday, July 25, 2005 1:47 PM
Subject: Re: [Declude.JunkMail] Filter
not triggering
Kevin,Just a thought if you wanted to confirm this as a
bug, maybe try a filter for this same message, but match a full word to see if
it triggers. I did decode this segment and there is no additional
encoding or other tricks that would cause a filter to not hit.IMO,
knowing about bugs like this would be very helpful at times, especially
considering the time that it would take each one of us that was affected by it
to figure it out on our own. Maybe if Declude doesn't want to post this
information on their site, we could take it upon ourselves to share such
information with the list when it is discovered. This is for the most
part how the list used to function in the old days, though most of us seemed
to desire a page dedicated to the topic
regardless.MattKevin Bilbee wrote:
Well that would explain why many of my filters are not as effective
as they used to be. Has Declude announced when the fix will be
available
Kevin Bilbee
-Original Message-From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On
Behalf Of John CarterSent: Monday, July 25, 2005 8:05
AMTo: Declude.JunkMail@declude.comSubject:
RE: [Declude.JunkMail] Filter not triggering
I have reported to Declude a problem with the
"CONTAINS" statement. Prior to 2.0.6 (or somewhere around
there)it worked oncharacter match, but after an upgrade to
Declude it only works on a word match. (In other words you could not
longer match on a string of characters within a word.) This would
affect your situation.
I believe the fix is caught up in the wait for the
newest version (the one they are testing now.)
John
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Kevin BilbeeSent: Monday, July 25, 2005
9:10 AMTo: JunkMail DecludeSubject:
[Declude.JunkMail] Filter not triggering
The attached email is not getting trapped by
my STOCKFILTER??? Here are the log lines. They do not indicate any issues
with the STOCKFILTER. In the STOCKFILTER this line should be
hitting
BODY 10CONTAINS (OTC:
Any idea why this email is not triggering
this line and assigning 10 points Could declude not be decoding the
BASE64 This also seems to be an intermittent issue!
07/24/2005 19:57:36 Q551E097C0333 Filter
HELOFILTER: Not skipping E-mail due to current weight of 2.07/24/2005
19:57:36 Q551E097C0333 Filter VIRUSTRAP: Not skipping E-mail due to
current weight of 2.07/24/2005 19:57:36 Q551E097C0333 Filter
REVDNSFILTER: Not skipping E-mail due to current weight of
2.07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to
19.07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to
13.07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to
14.07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to
5.07/24/2005 19:57:36 Q551E097C0333 Filter STOCKFILTER: Not
skipping E-mail due to current weight of 2.07/24/2005 19:57:36
Q551E097C0333 Filter: Set max weight to 15.07/24/2005 19:57:36
Q551E097C0333 Filter BODYFILTER: Not skipping E-mail due to current
weight of 2.07/24/2005 19:57:36 Q551E097C0333 NOABUSE:2 .
Total weight = 2.07/24/2005 19:57:36 Q551E097C0333 Using
[incoming] CFG file D:\IMAIL\Declude\$default$.junkmail.07/24/2005
19:57:36 Q551E097C0333 Redirecting [EMAIL PROTECTED]
to file
D:\Imail\declude\junkmailfiles\standardabrasives.com.junkmail.07/24/2005
19:57:36 Q551E097C0333 Msg failed NOABUSE ("Not supporting [EMAIL PROTECTED]"). Action="">07/24/2005
19:57:36 Q551E097C0333 Msg failed BASE64 (A binary encoded text or
HTML section was found in this E-mail.). Action="">07/24/2005
19:57:36 Q551E097C0333 L1 Message OK07/24/2005 19:57:36
Q551
Re: [Declude.JunkMail] custom delivery executable?
Darrell, This would not work with Declude because Declude uses imail1.exe to send out the notification messages for viruses. All such notifications, instead of going to the intended recipient, would likewise go to this text file. There may be other ways in which it might interfere with Declude, but this struck me as the most obvious. David Franco-Rocha Declude Technical Support - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, June 23, 2005 11:44 AM Subject: Re: [Declude.JunkMail] custom delivery executable? Or another thought to try is renaming your custom delivery app to imail1.exe and replacing theirs. Althought I am not sure what else this would break. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Darin Cox writes: You could change all email addresses to be program aliases. The batch file run by the program alias could then dump the message into a text file, or even post the message straight into your database. Darin. - Original Message - From: Chase Seibert To: Declude.JunkMail@declude.com Sent: Thursday, June 23, 2005 9:53 AM Subject: [Declude.JunkMail] custom delivery executable? Hey guys, We have a very non-standard iMail/Declude install. Basically, we only us the system for the SMTP protocol, as well as virus and spam filtering. Once a message has passed through those systems, it's delivered to a mailbox as normal. However, we don't allow POP or IMAP access to our systems. Instead, we parse the mailboxes when they change, pull out new mail and insert it into a SQL Server database for access in our web-based CRM. Messed up, huh? We are looking to skip the whole step of delivering the mail to a mailbox and then chunking it out. It's not a speed problem, but rather a reliability concern. Our current solution has about a .1% failure rate, meaning that some messages are not delivered until the next message comes along into that folder to knock it out. Ok, here is my question. I am wondering if there is some way to setup iMail/Declude so that it delivers a message right to a stand alone file, as apposed to a mailbox. Qmail, for example, can do this. I doubt there is any out of the box support for this, so I started investigating using a custom Declude filter for this. From the manual: For more flexibility, you can have Declude JunkMail pass parameters to your program, using variables. For example, you can set up the test as 'TESTNAME external returnvalue filename %INOROUT%', which would send the %INOROUT% variable as a parameter to your program (which would be incoming for an incoming E-mail, or outgoing for an outgoing E-mail). Presumably, we could write a custom executable and define a rule for it in Junkmail. The custom executable would get the entire message body and just pipe it to a stand-alone file. If the message was later also delivered to an iMail mailbox, that's fine. However, I think the issue with that idea is that the filters will not have executed when that custom executable is called. Accoring to the Declude manaul, the order of execution is: 1. IMail's Control Access file (to block IPs) 2. IMail's Kill List (to block return addresses) 3. IMail v8 anti-spam (most tests) 4. Declude Virus 5. Declude Hijack 6. Declude JunkMail 7. IMail's filters and extra IMail v8 anti-spam tests *we want to insert a custom exectuable here Is this even possible, or should I just start looking as Linux mail systems? -Chase Chase Seibert | Network and Systems Engineer | Bullhorn Inc | 617.464.2440 x119 | www.bullhorn.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: Re[2]: [Declude.JunkMail] Log file errors
David, I will get back to you (and the list) on this by Monday. I have to scan the entire Declude source tree for these types of messages and will let you know. David Franco-Rocha Declude Technical Support - Original Message - From: David Sullivan [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, June 24, 2005 10:13 AM Subject: Re[2]: [Declude.JunkMail] Log file errors Hello Dan, Friday, June 24, 2005, 9:50:10 AM, you wrote: DH SERVFAIL means that the domain does exist and the root name servers have DH information on this domain, but that the authoritative name servers are DH not answering queries for this domain. Great, thanks Dan. Now, Declude...are there any other conditions whereby Declude puts a Warning in the log file that is related to the functioning of the actual Declude software? We monitor log files for the words ERROR or WARNING. In this case, this warning is fairly normal operation of Declude. If software related issues are only logged under ERROR then we'll drop the WARNING monitoring. DS 06/22/2005 00:39:15 Qeb72438900c4923f WARNING: DNS server DS 66.179.12.115 returned a SERVER FAILURE error for MX or A for DS fadmail.com. -- Best regards, Davidmailto:[EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
A few questions to the customers having this issue. Add another customer to the list! What version of Windows are you using? Windows 2000 Server What SP's are installed? SP4 What version of Declude are you using? 1.82 What version of IMail are you using? 8.20 What hot fixes have you applied to IMail? HF1 How long before you see this resource problem? Problem occurs based on occasional large outbound mailings generated on another server. Does your scanner software automatically update itself (not definitions but the software itself) Nope. Using F-Prot 3.16b for Windows. I manually upgrade the scanner software on the server. When did this start happening? Did ANY kind upgrade happen? Win, Declude, IMail, Scanner? After upgrade to IMail 8.20! no changes to Windows, Declude, or F-Prot. Your name and phone number Allan Ries Archdiocese of Milwaukee 414-769-3332 riesa at archmil.org Any else you suspect or find odd. Summary: This definitely happened to us after upgrading to IMail 8.20. Before that, no problems in our setup. I am guessing that their new threading is causing the issue. We generate large broadcast messages to various groups of our employees and volunteers. Some weekly messages have 1000 - 2500 recipients. These are generated on another server and sent to the mail server. After a certain point, the mail server gets overwhelmed. I get a message that the server is running low on virtual memory. After that is when the insufficient resources messages involving Declude appear. I always have to restart the SMTP service in IMail. Reducing the # of mailing threads on the other server did not help. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] WHITELIST LOCAL v2.0.6.12
I expect to have the fix for this issue available tomorrow. David Franco-Rocha Declude Technical Support - Original Message - From: Shayne Embry [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, May 11, 2005 4:14 PM Subject: RE: [Declude.JunkMail] WHITELIST LOCAL v2.0.6.12 We had the same problem with v2.0.6.10. Contacted support about it, but haven't gotten a firm answer. Shayne -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Wednesday, May 11, 2005 2:59 PM To: Declude.JunkMail@declude.com Cc: [EMAIL PROTECTED] Subject: [Declude.JunkMail] WHITELIST LOCAL v2.0.6.12 I added WHITELIST LOCAL to the Global.cfg and all (and I mean ALL) inbound e-mail to local users was whitelisted. My read was that this would whitelist e-mail from local users to other local users. Is that not correct? Thanks, Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Split headers
John, This problem was reported previously to us and has been corrected in the latest interim release. It is caused by broken mail clients that do not terminate header lines with the required cr/lf sequence. David Franco-Rocha Declude Technical Support - Original Message - From: John Carter [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, May 09, 2005 9:08 AM Subject: [Declude.JunkMail] Split headers While reviewing some held emails, I have seen messages with what I'll call split headers -- as in the normal header lines are at the beginning of the msg file and the Declude headers are the end of the msg file with the msg body in between. My question is will this mess up any test results, esp. using filters with MAILFROM, etc.? John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - headers script for Outlook or Express
Not sure about Outlook. Outlook Express cuts off most headers if you use the Forward icon. Instead, select Message from the top-level menu and then select Forward As Attachment. The forwarded email will have all the headers intact. David Franco-Rocha Declude Technical Support - Original Message - From: Fritz Squib [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, May 06, 2005 1:09 PM Subject: RE: [Declude.JunkMail] OT - headers script for Outlook or Express Try http://www.xintercept.com/pkpeek.htm, only works with Oultook though. I've posted the link here a couple of times before. Fritz Frederick P. Squib, Jr. Network Operations Citizens Telephone Company of Kecksburg http://www.wpa.net () ascii ribbon campaign - against html email /\- against microsoft attachments -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno Sent: Friday, May 06, 2005 12:46 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT - headers script for Outlook or Express Anyone have any ideas how to give challenged users a really easy way to get the headers out of Outlook or Outlook express and forward them to my spam account? As soon as I start talking to most of them about right clicking, copying, pasting etc they get this strange blank look on their face... Also I thought a report spam button on the IMAIL web interface that would copy the full headers, and forward them and the e-mail to a pre-determined address wouldn't be to hard, anyone have anything like this? Or any suggestions on how to get the headers from spam that gets through the all the filters? Thanks - Marc --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- [This E-mail scanned by Citizens Internet Services with Declude Virus.] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail
Dave, This was a problem when we first implemented Declude with SmarterMail. The spool manager would show files in the spool, even after we had deleted them. The only way to get rid of them was to bring down the SM services and then restart them. Then the files no longer appeared in the spool. I believe that SmarterTools has now rectified that. - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, May 02, 2005 6:08 PM Subject: Re: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail However, the contents of the HDR file are retained in memory by SmarterMail. That sounds like it could lead to a memory leak. I tried SM as a SmartHost caching server and deleted all returns beforee SM could send them. About once a week I had to reboot the machine. Now I think I know why. -d - Original Message - From: David Franco-Rocha [ Declude ] [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, May 02, 2005 8:27 AM Subject: Re: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail See below. David Franco-Rocha - Original Message - From: David Sullivan [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, April 29, 2005 5:28 PM Subject: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail Hello David, Friday, April 29, 2005, 4:55:53 PM, you wrote: DFRD No, there is not an inherent delay in the delivery of all messages. If DFRD Declude does not complete processing within a specified time period, DFRD SmarterMail tries to take the file. However, if Declude finishes processing So, does this mean that SM could process a file that Declude did NOT scan? That should not happen, since the message is passed to Declude by SmarterMail. Or, are you saying this moving the file in a different folder process prevents SM from EVER processing a file that Declude hasn't finished? No, I am not saying that at all. There are some unique aspects regarding the way SmarterMail processes messages that necessitate equally unique behavior on the part of Declude (unfortunately). When the incoming SMTP dialogue has been completed, SmarterMail creates the envelope file (HDR) and the message data file (EML). However, the contents of the HDR file are retained in memory by SmarterMail. The most significant negative effect of this behavior is that changes made by Declude to the envelope (re-routing a recipient, deleting a recipient, etc.) are not seen by SmarterMail; when SmarterMail regains control of the message it uses the envelope in memory and completely disregards any changes made to the envelope. To circumvent this behavior, Declude renames the HDR and EML files after processing by prepending X to the spool name prior to moving the message back to the SmarterMail spool. This causes SmarterMail to see this as a new message and reads a new envelope into memory. It eventually realizes that, in a sense, the old message has been deleted. Since this is seen as a new message by SmarterMail, it tries to pass it once again to Declude. However, Declude ignores all messages whose names begin with X because it knows they have already been processed. DF -- Best regards, Davidmailto:[EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail
See below. David Franco-Rocha - Original Message - From: David Sullivan [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, April 29, 2005 5:28 PM Subject: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail Hello David, Friday, April 29, 2005, 4:55:53 PM, you wrote: DFRD No, there is not an inherent delay in the delivery of all messages. If DFRD Declude does not complete processing within a specified time period, DFRD SmarterMail tries to take the file. However, if Declude finishes processing So, does this mean that SM could process a file that Declude did NOT scan? That should not happen, since the message is passed to Declude by SmarterMail. Or, are you saying this moving the file in a different folder process prevents SM from EVER processing a file that Declude hasn't finished? No, I am not saying that at all. There are some unique aspects regarding the way SmarterMail processes messages that necessitate equally unique behavior on the part of Declude (unfortunately). When the incoming SMTP dialogue has been completed, SmarterMail creates the envelope file (HDR) and the message data file (EML). However, the contents of the HDR file are retained in memory by SmarterMail. The most significant negative effect of this behavior is that changes made by Declude to the envelope (re-routing a recipient, deleting a recipient, etc.) are not seen by SmarterMail; when SmarterMail regains control of the message it uses the envelope in memory and completely disregards any changes made to the envelope. To circumvent this behavior, Declude renames the HDR and EML files after processing by prepending X to the spool name prior to moving the message back to the SmarterMail spool. This causes SmarterMail to see this as a new message and reads a new envelope into memory. It eventually realizes that, in a sense, the old message has been deleted. Since this is seen as a new message by SmarterMail, it tries to pass it once again to Declude. However, Declude ignores all messages whose names begin with X because it knows they have already been processed. DF -- Best regards, Davidmailto:[EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Imail 8.2 / smartermail
Declude does not currently plug directly into SmarterMail's spam tools. They are completely separate. The MAILBOX directive used by Declude with IMail, whereby an email is moved to a specific user folder, is not available on the SmarterMail platform. When I have discussed this with SmarterMail, they have said that the recipient can move it himself to a particular folder on the basis of headers added to the message by Declude. David Franco-Rocha - Original Message - From: Jonathan [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, April 28, 2005 10:57 PM Subject: Re: [Declude.JunkMail] Imail 8.2 / smartermail Darrell ([EMAIL PROTECTED]) wrote: Sidenote, I assume SmarterMail can act as a domain filtering gateway with Declude, right? Pretty sure I saw some marketing spam saying it could .. Yes, that is absolutly correct - Declude will work on Smartermail. So I was just playing with the SM web interface -- does Declude plug directly into SM's spam tools? If so, that looks pretty slick compared to hacked up scripts shuffling stuff into the right folders .. :) Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: Re[2]: [Declude.JunkMail] Imail 8.2 / smartermail
There is a very specific reason for this process. Unlike IMail, which provides for a daisy-chain mechanism whereby Declude gets the msg for processing and hands it back to smtp32 for delivery, SmarterMail passes the msg to Declude and, after a set period of time, tries to deliver it. Taking it out of the spool prevents SmarterMail from grabbing the file until Declude has finished with it. David Franco-Rocha - Original Message - From: David Sullivan [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, April 29, 2005 3:42 PM Subject: Re[2]: [Declude.JunkMail] Imail 8.2 / smartermail I downloaded the SM/Declude demo, thinking of moving from Imail. One thing I noticed is that for each message, SM appeared to move it's version of the D/Q files from spool, to a processing folder and then process it. This seems like twice the necessary disk activity over just processing it from the /spool folder. Has anybody seen any SM performance hits vs. Declude because of this on a system handling 30k msgs/hr? (Assuming use of standard Imail best practices for disk utilization) -- Best regards, Davidmailto:[EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: Re[4]: [Declude.JunkMail] Imail 8.2 / smartermail
No, there is not an inherent delay in the delivery of all messages. If Declude does not complete processing within a specified time period, SmarterMail tries to take the file. However, if Declude finishes processing sooner, SmarterMail knows that the Declude process has terminated and delivers the email immediately. - Original Message - From: David Sullivan [EMAIL PROTECTED] To: David Franco-Rocha [ Declude ] Declude.JunkMail@declude.com Sent: Friday, April 29, 2005 4:34 PM Subject: Re[4]: [Declude.JunkMail] Imail 8.2 / smartermail Hello David, Friday, April 29, 2005, 4:27:38 PM, you wrote: DFRD msg to Declude and, after a set period of time, tries to deliver it. Taking DFRD it out of the spool prevents SmarterMail from grabbing the file until DFRD Declude has finished with it. So there is an inherent delay in the delivery of all messages? How long? -- Best regards, Davidmailto:[EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Imail 8.20
Scott, No, Declude has not yet been tested with Imail 8.2, although we expect to begin some testing very shortly. We have been in the process of resolving some outstanding issues and preparing to do an interim release. It would have been counter-productive to introduce a new IMail platform in the midst of all of this. We are aware of a problem with one customer who has tried to use Declude with the beta of IMail 8.2 (attachment corruption). This customer also had problems with smtpd32 repeatedly going down, although this is not likely related to Declude. As soon as we have started testing and have any feedback regarding the results, we will post them for you. If any of you have any feedback you would like to provide to us, we would appreciate your letting us know about it. Thanks. David Franco-Rocha - Original Message - From: Scott Fisher To: Declude.JunkMail@declude.com Sent: Thursday, April 28, 2005 7:51 AM Subject: [Declude.JunkMail] Imail 8.20 A question for Declude... Has Declude been tested with Imail 8.20?
Re: [Declude.JunkMail] Imail 8.20
These types of errors are not related to Declude. Authentication is handled directly with IMail during the SMTP dialogue. This issue has already surfaced in the IMail forum. David Franco-Rocha - Original Message - From: William Stillwell To: Declude.JunkMail@declude.com Sent: Thursday, April 28, 2005 10:28 AM Subject: Re: [Declude.JunkMail] Imail 8.20 I just upgraded.. NOT WORKING.. I am getting AUTH errors on sending to local users, and 550 Errors.. - Original Message - From: Jeff Frantz To: Declude.JunkMail@declude.com Sent: Thursday, April 28, 2005 9:37 AM Subject: RE: [Declude.JunkMail] Imail 8.20 I upgraded to v8.2 this morning and have had no issues. IÂ’m running Declude Virus and Junkmail v2.0.6. -Jeff From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan HorneSent: Thursday, April 28, 2005 9:07 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Imail 8.20 I upgraded yesterday to Imail 8.2 and so far the phones aren't ringing off the hooks. No reported problems from any of our users. I've tailed the logs and they all seem normal. I am running Declude Junkmail Pro/Virus Standard/Hijack 2.0.6. Dan Horne From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Franco-Rocha [ Declude ]Sent: Thursday, April 28, 2005 8:39 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Imail 8.20 Scott, No, Declude has not yet been tested with Imail 8.2, although we expect to begin some testing very shortly. We have been in the process of resolving some outstanding issues and preparing to do an interim release. It would have been counter-productive to introduce a new IMail platform in the midst of all of this. We are aware of a problem with one customer who has tried to use Declude with the beta of IMail 8.2 (attachment corruption). This customer also had problems with smtpd32 repeatedly going down, although this is not likely related to Declude. As soon as we have started testing and have any feedback regarding the results, we will post them for you. If any of you have any feedback you would like to provide to us, we would appreciate your letting us know about it. Thanks. David Franco-Rocha - Original Message - From: Scott Fisher To: Declude.JunkMail@declude.com Sent: Thursday, April 28, 2005 7:51 AM Subject: [Declude.JunkMail] Imail 8.20 A question for Declude... Has Declude been tested with Imail 8.20?
Re: [Declude.JunkMail] Imail 8.20
There is really no problem posting this to the
JunkMail list. But, since it is specifically an IMail problem, make sure it is
at least cross-posted to the IMail list also.
David Franco-Rocha
- Original Message -
From:
William Stillwell
To: Declude.JunkMail@declude.com
Sent: Thursday, April 28, 2005 11:47
AM
Subject: Re: [Declude.JunkMail] Imail
8.20
I wasn't reffering to declude not working, There
is an issue with the odbc with
an external database, I was just informing people
there is a "Slight" issue with it.
I have posted the resolution for those that are
not aware.
Other than that, declude appears to be working
fine here.
- Original Message -
From:
David
Franco-Rocha [ Declude ]
To: Declude.JunkMail@declude.com
Sent: Thursday, April 28, 2005 10:44
AM
Subject: Re: [Declude.JunkMail] Imail
8.20
These types of errors are not related to
Declude. Authentication is handled directly with IMail during the SMTP
dialogue. This issue has already surfaced in the IMail forum.
David Franco-Rocha
- Original Message -
From:
William Stillwell
To: Declude.JunkMail@declude.com
Sent: Thursday, April 28, 2005 10:28
AM
Subject: Re: [Declude.JunkMail] Imail
8.20
I just upgraded.. NOT WORKING..
I am getting AUTH errors on sending to local
users, and 550 Errors..
- Original Message -
From:
Jeff Frantz
To: Declude.JunkMail@declude.com
Sent: Thursday, April 28, 2005 9:37
AM
Subject: RE: [Declude.JunkMail]
Imail 8.20
I upgraded to
v8.2 this morning and have had no issues. IÂ’m running Declude
Virus and Junkmail v2.0.6.
-Jeff
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan HorneSent: Thursday, April 28, 2005 9:07
AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail]
Imail 8.20
I upgraded
yesterday to Imail 8.2 and so far the phones aren't ringing off the
hooks. No reported problems from any of our users. I've
tailed the logs and they all seem normal. I am running Declude
Junkmail Pro/Virus Standard/Hijack 2.0.6.
Dan
Horne
From:
[EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Franco-Rocha [
Declude ]Sent:
Thursday, April 28, 2005 8:39 AMTo:
Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail]
Imail 8.20
Scott,
No, Declude has not yet
been tested with Imail 8.2, although we expect to begin some testing
very shortly. We have been in the process of resolving some
outstanding issues and preparing to do an interim release. It would
have been counter-productive to introduce a new IMail platform in the
midst of all of this. We are aware of a problem with one customer who
has tried to use Declude with the beta of IMail 8.2 (attachment
corruption). This customer also had problems with smtpd32 repeatedly
going down, although this is not likely related to
Declude.
As soon as we have started
testing and have any feedback regarding the results, we will post them
for you. If any of you have any feedback you would like to provide to
us, we would appreciate your letting us know about it.
Thanks.
David
Franco-Rocha
- Original Message
-
From:
Scott Fisher
To:
Declude.JunkMail@declude.com
Sent:
Thursday, April 28, 2005 7:51 AM
Subject:
[Declude.JunkMail] Imail 8.20
A question for
Declude...
Has Declude been tested
with Imail
8.20?
Re: [Declude.JunkMail] Multiple log lines per message
Kris, The R and L represent Remote and Local, respectively. From these log lines, it appears that there are in fact two recipients (maybe one of them is the copyall account). If you set your LOGLEVEL to DEBUG and send a similar message to a single recipient, the log file should then show the precise email addresses of each recipient. David Franco-Rocha - Original Message - From: Kris McElroy [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, April 27, 2005 1:01 PM Subject: [Declude.JunkMail] Multiple log lines per message I am running declude 2.04 and I have noticed that there are 4 log lines for every message? What would cause this? What is R1, L2? How many lines per message should I have? 04/27/2005 10:43:31 Qb31e34670094d8a5 R1 Message OK 04/27/2005 10:43:31 Qb31e34670094d8a5 Tests failed [weight=16]: GIBBERISH=IGNORE ANTI-GIBBERISH=IGNORE Y!DIRECTED=IGNORE ANTI-Y!DIRECTED=IGNORE COMBO-ZOMBIEISH=IGNORE BASE64=IGNORE HELOBOGUS=IGNORE IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE WEIGHT10=IGNORE WEIGHT15=IGNORE 04/27/2005 10:43:31 Qb31e34670094d8a5 L2 Message OK 04/27/2005 10:43:31 Qb31e34670094d8a5 Tests failed [weight=16]: GIBBERISH=IGNORE ANTI-GIBBERISH=IGNORE Y!DIRECTED=IGNORE ANTI-Y!DIRECTED=IGNORE COMBO-ZOMBIEISH=WARN BASE64=WARN HELOBOGUS=WARN IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE WEIGHT10=WARN WEIGHT15=DELETE Thanks, Kris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Increase in porn?
Yep, usually has to do something with video type stuff. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Wednesday, July 21, 2004 11:30 AM To: Woody G. Fussell Subject: Re: [Declude.JunkMail] Increase in porn? On Wednesday, July 21, 2004, 11:27:33 AM, Woody wrote: WGF Are any of you seeing an increase in explicit porn getting past Declude and WGF Sniffer in the past few days. WGF We are seeing a disturbing increase that will only fail some minor weighted WGF test such as bad routing and often fail no test. They are almost dynamically WGF changing the spelling of the obvious words we are adding to subject and WGF content filtering. WGF Any suggestions on how to get ahead of these guys and reduce such emails? We are closing the net on this new guy. He's shooting himself in the foot by mad-libbing his text strings and obfuscating the spelling. Let's just say, he has my undivided attention. Would this be the mega huge shy next door dvd collection guy? _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude vs iMail
Just a warning on this, make sure that you have that domain setup to be able to create sub-folders. We set this up and then realized they were being returned as they were bouncing since the folder did not exist. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, July 19, 2004 3:09 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude vs iMail Does Declude actually place messages, besides those that make it through, in the folder/mailbox or does it deliver to iMail with a suggestion (?) of which folder to place the message in? Example: SPAMCOPMAILBOX spam With the MAILBOX action, Declude JunkMail tells IMail to deliver the E-mail in the mailbox that you specify (spam in this case). It isn't a suggestion -- it's what Declude JunkMail expects IMail to do (just the same as if you had a rule to deliver it to the spam mailbox). It is possible that IMail could override this for some reason, but I can't think of a case where it would. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SOT somewhat offtopic
We do this for a client and had the nobody alias setup to goto a certain email address. Then Exchange POP's that account and delivers the email to the users on the exchange box. This solution does scan emails with Declude. We dropped the nobody alias and setup individual aliases though as we were getting killed with dictionary attacks. Just setup aliases to point to a global box and have Exchange POP into it. It is simple. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Colbeck, Andrew Sent: Friday, July 16, 2004 12:17 PM To: '[EMAIL PROTECTED]' Subject: RE: [Declude.JunkMail] SOT somewhat offtopic Serge, POP and IMAP are certainly available in Exchange, but if I read this architecture correctly, what you client probably wants is the ETRN extension to SMTP. I used this once under Exchange 5.5 to fetch mail over dial up. Here's an ancient article on the subject to get you started on some basic research. http://www.winnetmag.com/MicrosoftExchangeOutlook/Article/ArticleID/5599/559 9.html Andrew 8) -Original Message- From: Serge [mailto:[EMAIL PROTECTED] Sent: Friday, July 16, 2004 9:57 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] SOT somewhat offtopic We have a client curently using MDaemon, all his messages are stored here in the same mailbox (nobody) then his mdaemon server retrieves the messages (using pop) and dispatche to his specific users mailboxes. He want to move to exchange, which apparently cannot use pop so we need to switch to store and forward method 1- With store and forward, does declude still scan the messages for spam/viruses ? 2- Can we use imail rules to delete spam messages that are flaged by declude (when using store and forward) ? 3- can anyone give me a link then explain the store and forward configuration (for Imail, DNS MX, and exchange) ? Thanks in advance --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SOT somewhat offtopic
I know it can be done as we have a client that POP's into it all the time. I am not familiar with Exchange, but it might be an add-on tool or something. I see the POP lines in the log every day. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Serge Sent: Friday, July 16, 2004 1:47 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SOT somewhat offtopic Just setup aliases to point to a global box and have Exchange POP into it. It is simple. The client said Exchange cannot pop in an imail mailbox Are you sure it can be done ? To you have a link about how to configure the feature in exchange ? - Original Message - From: Grant Griffith - Declude JM [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, July 16, 2004 6:30 PM Subject: RE: [Declude.JunkMail] SOT somewhat offtopic We do this for a client and had the nobody alias setup to goto a certain email address. Then Exchange POP's that account and delivers the email to the users on the exchange box. This solution does scan emails with Declude. We dropped the nobody alias and setup individual aliases though as we were getting killed with dictionary attacks. Just setup aliases to point to a global box and have Exchange POP into it. It is simple. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Colbeck, Andrew Sent: Friday, July 16, 2004 12:17 PM To: '[EMAIL PROTECTED]' Subject: RE: [Declude.JunkMail] SOT somewhat offtopic Serge, POP and IMAP are certainly available in Exchange, but if I read this architecture correctly, what you client probably wants is the ETRN extension to SMTP. I used this once under Exchange 5.5 to fetch mail over dial up. Here's an ancient article on the subject to get you started on some basic research. http://www.winnetmag.com/MicrosoftExchangeOutlook/Article/ArticleID/5599/559 9.html Andrew 8) -Original Message- From: Serge [mailto:[EMAIL PROTECTED] Sent: Friday, July 16, 2004 9:57 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] SOT somewhat offtopic We have a client curently using MDaemon, all his messages are stored here in the same mailbox (nobody) then his mdaemon server retrieves the messages (using pop) and dispatche to his specific users mailboxes. He want to move to exchange, which apparently cannot use pop so we need to switch to store and forward method 1- With store and forward, does declude still scan the messages for spam/viruses ? 2- Can we use imail rules to delete spam messages that are flaged by declude (when using store and forward) ? 3- can anyone give me a link then explain the store and forward configuration (for Imail, DNS MX, and exchange) ? Thanks in advance --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPF and MTLDB Issue?
I thought with SPF that it checked the DNS of the actual domain, so how could spammers fake it with their own SPF settings? For example if a message comes from an AOL.com account, it should check the AOL.Com DNS, not some other DNS server. Maybe I am not understanding how this is working? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, July 12, 2004 10:00 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue? You are missing a column: SPFPASS spf passx 0 0 SPFUNKNOWN spf unknown x 0 0 SPFFAIL spf failx 50 0 Personally, I don't recommend crediting any points for an SPF pass result. Too many spammers can set up SPF records for their system (and they do. Yesterday 58% of the SPF Pass results were spam). Also don't expect the world. More than 95% of my e-mail goes into SPFUNKNOWN. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/12/04 09:29AM The entries are below. I am thinking they are correct, but I am not seeing anything in my logs that indicate this is working at all. SPFPASS passx x -10 0 SPFFAIL failx x 5 0 I did the install of MTLDB also and have not seen any entries on it either. If you need anything log wise, just let me know. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, July 12, 2004 9:23 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue? I know the list has been flooded, but I can not get any of these tests working, anyone have any advice? What lines do you have in your global.cfg that begin with SPF? We are looking into an issue where the MTLDB may not be returning positive responses, and should have more information later today on that. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPF and MTLDB Issue?
OK, I understand that, but he can not fake being AOL or Yahoo or anything anymore anyway. Thanks for the explanation. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Tuesday, July 13, 2004 9:01 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue? A static spammer purchases a domain name. He then sets up a SPF record for the domain name. E-mail sent out from the domain name will pass the SPF test. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/13/04 07:45AM I thought with SPF that it checked the DNS of the actual domain, so how could spammers fake it with their own SPF settings? For example if a message comes from an AOL.com account, it should check the AOL.Com DNS, not some other DNS server. Maybe I am not understanding how this is working? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Monday, July 12, 2004 10:00 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue? You are missing a column: SPFPASS spf passx 0 0 SPFUNKNOWN spf unknown x 0 0 SPFFAIL spf failx 50 0 Personally, I don't recommend crediting any points for an SPF pass result. Too many spammers can set up SPF records for their system (and they do. Yesterday 58% of the SPF Pass results were spam). Also don't expect the world. More than 95% of my e-mail goes into SPFUNKNOWN. Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 07/12/04 09:29AM The entries are below. I am thinking they are correct, but I am not seeing anything in my logs that indicate this is working at all. SPFPASS passx x -10 0 SPFFAIL failx x 5 0 I did the install of MTLDB also and have not seen any entries on it either. If you need anything log wise, just let me know. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, July 12, 2004 9:23 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue? I know the list has been flooded, but I can not get any of these tests working, anyone have any advice? What lines do you have in your global.cfg that begin with SPF? We are looking into an issue where the MTLDB may not be returning positive responses, and should have more information later today on that. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
[Declude.JunkMail] MTLDB Issue?
Scott Said: We are looking into an issue where the MTLDB may not be returning positive responses, and should have more information later today on that. -Scott Is there going to be another release that fixes this issue? Or is there a solution at this point? Grant Griffith --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPF and MTLDB Issue?
I know the list has been flooded, but I can not get any of these tests working, anyone have any advice? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Grant Griffith - Declude JM Sent: Friday, July 09, 2004 3:24 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] SPF and MTLDB Issue? Hello All, We implemented SPF a few weeks ago and I just went thru the logs of the past couple of weeks and noticed there is nothing in any logs showing this test. I also just implemented the new MTLDB test and the same issue, never see a WARN in the logs and I have them set to WARN if failed. I am running 1.79i of Declude. I am still running IMail 7.1x. Do I need to be running IMail 8.x for these tests to work properly? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPF and MTLDB Issue?
The entries are below. I am thinking they are correct, but I am not seeing anything in my logs that indicate this is working at all. SPFPASS passx x -10 0 SPFFAIL failx x 5 0 I did the install of MTLDB also and have not seen any entries on it either. If you need anything log wise, just let me know. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Monday, July 12, 2004 9:23 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue? I know the list has been flooded, but I can not get any of these tests working, anyone have any advice? What lines do you have in your global.cfg that begin with SPF? We are looking into an issue where the MTLDB may not be returning positive responses, and should have more information later today on that. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SPF and MTLDB Issue?
Hello All, We implemented SPF a few weeks ago and I just went thru the logs of the past couple of weeks and noticed there is nothing in any logs showing this test. I also just implemented the new MTLDB test and the same issue, never see a WARN in the logs and I have them set to WARN if failed. I am running 1.79i of Declude. I am still running IMail 7.1x. Do I need to be running IMail 8.x for these tests to work properly? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: How to delete a mass of files on a Windows drive drive
We have a script that run weekly to clean out that directory. Works fine for us. We had the same issue a while back and created the simple batch file to take care of it. Easy script is below. :: Change to correct directory path below... del c:\inetpub\mailroot\badmail\*.* /Q Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Sent: Wednesday, July 07, 2004 9:12 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] OT: How to delete a mass of files on a Windows drive drive Well, I gave it about 4 hours to complete a del *.* and it didn't do it. This is a MS SMTP Badmail directory and I'm only guessing at the number of actual files because I can't see into that directory. I figured out the naming convention, and by doing a del *1.bad ought to target exactly 1/48th of the files if I am correct (3 different extensions and hex naming convention)...but that took 4 minutes to execute...BUT IT WORKED! The sad thing is that L0pht could crack virtually every password on a server in the time it takes to simply delete a directory full of files :( RAID would have really helped though. Sorry Goran, no native deltree in Windows (to my knowledge at least), but that might have been a good way around it if it didn't have to enumerate the files, which I think is essentially the same thing as a *.* within a single directory tree. I think it's time to see if I can configure MS SMTP on this server not to store Badmail (it's an ORF gateway). Hey Scott, is Declude Gateway 1.0 going to get released? :) Matt R. Scott Perry wrote: I'm kind of befuddled with this one, but there is a directory on a certain machine that I estimate has about 50,000 or more files on an IDE hard drive and Windows 2003 will hang in Explorer when you try to delete or open the directory from that interface, and I also tried the command window and the DEL command with no luck either. I get a feeling that it is timing out while enumerating the files and not even starting to delete them. I tried searching for an answer on Google but couldn't figure out a good phrase to match this condition. Any help would be appreciated. You might want to try going to a command prompt and typing del a*.*, del b*.*, etc., until you have it down to a manageable size. I can't guarantee that will work -- but I've encountered even larger directories (on Windows 2000, I believe) and doing a directly listing from a command prompt would take forever (almost literally -- perhaps 30 minutes, so be patient!), but doing dir a* type commands would be reasonably quick (seconds). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Question on SPF Setup. Was under You **May** etc
This brings up a good point, if I client is located in another part of the US and we have no way to know what IP Address they might be using. How can this be setup? For example, our server has around 16 IP's, 12.177.8.48 to 12.177.8.63, but we have clients that will not be connected within this range. They might be something like 64.77.164.248 or something. Does the SPF test use the 64. address when doing the test or the mail server that the message is being sent from which would be in the IP range listed above? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, June 30, 2004 7:45 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] FW: You **MAY** have spam This is legit, coming from my own mailserver, and it failed the SPF test. Obviously something is not correct here. Any suggestions? I have used the wizard on the pobox site and pasted the text string into a text record in my DNS. The problem is that your SPF record (v=spf1 a mx ptr -all) doesn't list IPs that your users may be connecting to your mailserver from. In this case, you should whitelist your own users (WHITELIST AUTH if you are running IMail v8 and the latest Declude beta). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Question on SPF Setup. Was under You **May** etc **May** etc
Figures we would have to upgrade. We are at 7.1x as it has been very stable. Not sure we want to upgrade to problems. If someone sends an email and it shows up on our server as a 64. address. What about when the message is delivered to someone at AOL? Will it also see the 64. address, therefore fail the SPF test on their end also? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, June 30, 2004 9:44 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Question on SPF Setup. Was under You **May** etc **May** etc This brings up a good point, if I client is located in another part of the US and we have no way to know what IP Address they might be using. How can this be setup? For example, our server has around 16 IP's, 12.177.8.48 to 12.177.8.63, but we have clients that will not be connected within this range. They might be something like 64.77.164.248 or something. That is a good question. The best way to look at this is ask How does IMail let this client send mail, while not allowing spammers to send mail? The answer to that is SMTP AUTH. If you're using a version of IMail before IMail v8, you're stuck there -- previous versions do not record in the information that Declude JunkMail gets that SMTP AUTH was used. In that case, you would need to be creative (perhaps a filter that subtracts points for MAILFROM's that contain your domain). Does the SPF test use the 64. address when doing the test or the mail server that the message is being sent from which would be in the IP range listed above? It uses the IP that connects to the IMail server. So if the user connects directly, SPF would see the 64. address. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Way OT: HTML code for tab
This shows you one way to do this, may not help you in your case. Not sure of another way to do it though. http://www.htmlgoodies.com/tutors/tabs.html Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Tuesday, June 29, 2004 1:19 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Way OT: HTML code for tab Does any one know what the HTML code for a single tab is? John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Messages slipping through JM
Why not use the command in Declude to do this directly? In looking at the manual it appears to be ROUTETO email address. You could do this for the WEIGHT20 Piece. Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Ken Weise Sent: Tuesday, June 29, 2004 4:16 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Messages slipping through JM If this was forwarded from another account, it would skip the IMail rule. I just went through that, when one of our sales people went on vacation and forwarded their mail to the CEO, who then received all their spam. :-) At 04:56 PM 6/29/2004, you wrote: Sorry Scott, should have been more clear. We don't do a declude Hold at Weight20, we do a warn, and then I have a rule in Imail (7.15) that sends anything with WEIGHT20 to a spambox submailbox. Here are the JM logs: [trunc] 06/29/2004 14:49:58 Qc7df09da00840372 L1 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L2 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L3 Message OK 06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]: SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN WEIGHT20=WARN CATCHALLMAILS=IGNORE 06/29/2004 14:49:58 Qc7df09da00840372 L4 Message OK [/trunc] So I'm gonna answer my own question here, and say that Declude got it right, but Imail didn't catch it in the Rule. Anyone have a clue on why Imail rule wouldn't catch the text WEIGHT20 using this rule: H~(WEIGHT20):spambox TIA Jason - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 3:11 PM Subject: RE: [Declude.JunkMail] Messages slipping through JM Jason, What does the Declude log file indicate for these messages? Best Regards Andy Schmidt HM Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Messages slipping through JM
Not sure if this would really work, but you could send it to a separate mailbox using the ROUTETO function by putting [EMAIL PROTECTED] Will this work if it is to the same user? Might be a way around the problem? Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management A Division of ETC http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jason @ AreaTech Sent: Tuesday, June 29, 2004 4:44 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Messages slipping through JM - Original Message - From: Grant Griffith - Declude JM [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, June 29, 2004 4:19 PM Subject: RE: [Declude.JunkMail] Messages slipping through JM Why not use the command in Declude to do this directly? In looking at the manual it appears to be ROUTETO email address. You could do this for the WEIGHT20 Piece. I'm not sending all WEIGHT20 to a separate e-mail address. I'm shooting it to a sub mailbox. For this I would use the MAILBOX action, and that requires PRO which we do not have. Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPF support
Scott, just to make sure. Just one x in there? It seems the other tests are setup differently. Example: CMDSPACE cmdspacex x 8 0 Sincerely, Grant Griffith EI8HT LEGS Enhanced Web Management http://www.getafreewebsite.com 877-483-3393 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Thursday, June 24, 2004 10:33 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPF support Is this a current test we can use with Declude? I would like to begin adding it to our weighting system if it is something that is beginning to be used. --- To use the new SPF test, you can add lines such as: SPFPASS spf passx -5 0 SPFFAIL spf failx 8 0 to your global.cfg file. SPF returns PASS for E-mail that passes SPF (that comes from an IP that is acceptable to the owner of the domani that it claims to be coming from), FAIL for E-mail that fails SPF (that does not come from an acceptable IP for the domain), or UNKNOWN (for E-mail from domains that do not use SPF yet, or for some other reason should return UNKNOWN). --- If it is used, does it automatically accept an email if a TXT record is not found for that domain? If there is no SPF record, the E-mail will be treated exactly as it had before (being blocked as spam if it fails enough spam tests). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] NDR's
Hi, We are seeing a lot of NDR's coming from ligit servers, with a spoofed user name, but a correct domain name. What would be the best way to deal with this ever growing problem. Regard's, Kevin __ This email has been Processed using Sorting Office Email Services This email and any attachments are confidential to the intended recipient and may also be privileged. If you are not the intended recipient please delete it from your system and notify the sender. You should not copy it or use it for any purpose nor disclose or distribute its contents to any other person. Sorting Office Email Filter Solution Anti-Virus | Anti-Spam For kad.co.uk --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] NDR's
Markus We are seeing 1 in 10 email's which are NDR's and are nothing to do with the german-politic spam messages. Look's like we have a new problem, which is growing quickly. Scott I hope you can help on this one or anyone else... Kevin -- Original Message -- From: Markus Gufler [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Fri, 11 Jun 2004 12:49:55 +0200 We are seeing a lot of NDR's coming from ligit servers, with a spoofed user name, but a correct domain name. What would be the best way to deal with this ever growing problem. Yipiieee :-) I'm not the only one having this problem. As I can see this are NDR's from current spam messages having forged but real existing mailfrom addresses and a lot of random recipient names in combination with valid domains. (german-politic spam messages send from sober.g zombies) Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [ PS. This email has been securely processed by Sorting Office ] __ This email has been Processed using Sorting Office Email Services This email and any attachments are confidential to the intended recipient and may also be privileged. If you are not the intended recipient please delete it from your system and notify the sender. You should not copy it or use it for any purpose nor disclose or distribute its contents to any other person. Sorting Office Email Filter Solution Anti-Virus | Anti-Spam For kad.co.uk --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Possible Spam: RE: [Declude.JunkMail] NDR's
Hi Markus, I know what you mean, just like the list below I have a customer, nst.ie, and this is what is happening to them. Kevin QD:\IMail\spool\Ddbdf01e626ff.SMD Hkadmail.co.uk WD:\Imail\kadmail_co_uk E0, S[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] NRCPT TO: [EMAIL PROTECTED] R[EMAIL PROTECTED] -- Original Message -- From: Markus Gufler [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Fri, 11 Jun 2004 18:06:41 +0200 We've been getting upwards of 30k messages a day which are NDR's with our domain name, but with a randomly generated username. We found that although our mail server is more then capable of handling the volume, it was creating a lot of lag with POP3 accounts when the server was being hammered with the dang things. Seems this is getting to be the latest craze, spamming with legit domain names attached to a random username. Thats not the current problem. The problem are NDR's send back to real existing email addresses because the original message has had only one (or a few) valid recipient addresses but a lot of random generated name parts of the email address. (in sober.g case this are one valid recipient and 39 usualy inexistant, random generated addresses) Your gateway would filter out this type of NDRs Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [ PS. This email has been securely processed by Sorting Office ] __ This email has been Processed using Sorting Office Email Services This email and any attachments are confidential to the intended recipient and may also be privileged. If you are not the intended recipient please delete it from your system and notify the sender. You should not copy it or use it for any purpose nor disclose or distribute its contents to any other person. Sorting Office Email Filter Solution Anti-Virus | Anti-Spam For kad.co.uk --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spamdomains.txt file
Me too! Kevin -- Original Message -- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Mon, 19 Apr 2004 07:09:27 -0700 Me three. ;) John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Rick Hogue Sent: Monday, April 19, 2004 6:56 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Spamdomains.txt file Me too. Rick Hogue www.intent.net Web Hosting 1-800-866-2983 www.prosperity.com Featured web site -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doug McKee Sent: Monday, April 19, 2004 8:55 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Spamdomains.txt file Me too, Thanks, Doug -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Goran Jovanovic Sent: Monday, April 19, 2004 7:38 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Spamdomains.txt file Todd, Would you mind sending me a copy of the spamdomain.txt file as well? I would like to see what you have as a starting point. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Todd Sent: Monday, April 19, 2004 2:19 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Spamdomains.txt file Jeff, I see no one has answered you on this. Spamdomains is a very useful test and I think you will like the results. We get an average of 14% weekdays and 26% on weekends of our email fail Spamdomains and there are not a lot of FPs. I will send you a spamdomains file tomorrow. Todd Hunter Smart Mail - Original Message - From: Jeff Maze - Hostmaster [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, April 16, 2004 11:15 AM Subject: RE: [Declude.JunkMail] Spamdomains.txt file Anyone? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster Sent: Friday, April 16, 2004 8:26 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Spamdomains.txt file Hello, I think I'm going to implement the spam domains tests. Anyone have a file they would like to share that works well for them? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [South Texas Internet scanned this E-mail for viruses using Declude Virus] --- [South Texas Internet scanned this E-mail for viruses using Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail
[Declude.JunkMail] Surbl.org
I would also be interested :) Kevin -- Original Message -- From: Roger Eriksson [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Tue, 13 Apr 2004 17:10:58 +0200 However I hope to see SURBL soon as an additional Declude test. I just got caught up on this thread and checked out the website for SURBL and I agree! This would help with the stuff that passes all of the other tests. Sheldon Hi, SURBL is surprisingly effective, considering the fact that it only contains about 450-500 entries. I have written a simple command script that downloads the rbldns zone file and converts it to a body filter. I have scheduled it to run once a day. Here are yesterday's stats with 9666 hits for the SURBL test (note that the individual tests show total number of hits, while the spam summary only counts one hit per message irrespective of the number of recipients): # Declude test results -- dec0412.log AHBL-PROXY 1857 AHBL-RHSBL 835 AHBL-SOURCE 302 BADHEADERS 1610 BASE64-PLUS 412 BASE64 786 CBL 10616 COMMENTS 54 DSBL 8875 DSN 1611 FORGEDLOCAL 781 GREYLIST 5 HELOBOGUS 2616 MAILFROM 487 MAILPOLICE 554 MESSAGE OK 2294 NETBL 463 OPM 554 ORDB 24 REVDNS 3028 RSL 673 SBL 571 SNIFFER-ADULT 897 SNIFFER-CASINO 35 SNIFFER-CREDIT 1057 SNIFFER-EMAIL 8 SNIFFER-EXP 578 SNIFFER-GEN 824 SNIFFER-GREY 2 SNIFFER-INSUR 571 SNIFFER-MAL 2 SNIFFER-MEDIA 2172 SNIFFER-OBFUSC 201 SNIFFER-PHARM 5279 SNIFFER-PRINT 0 SNIFFER-RICH 840 SNIFFER-SCAM 119 SNIFFER-TOOLS 0 SNIFFER-TRAVEL 43 SNIFFER 12628 SORBS-DUHL 7512 SPAMCOP 10546 SPAMDOMAINS 3380 SPAMHEADERS 293 SPAMTRAP 121 SPFFAIL 209 SURBL 9666 URLDBL 76 WEIGHT15-19 846 WEIGHT20 11987 WHITELISTED 110 Unique messages for local delivery: 5812 Held spam: 4256 (73%) Marked spam: 455 (7%) Non-spam: 1101 (18%) Furthermore, SURBL has a rather low overlap with most other tests (only unique hits are counted here): #Test check - dec0412.log Test: SURBL Number of unique hits: 2849 Shared with SBL (421 hits): 69 (2%) Shared with DSBL (3018 hits): 1951 (68%) Shared with SPAMCOP (3673 hits): 2208 (77%) Shared with AHBL-SOURCE (261 hits): 49 (1%) Shared with CBL (3563 hits): 2232 (78%) Shared with AHBL-PROXY (683 hits): 420 (14%) Shared with OPM (200 hits): 132 (4%) Shared with RSL (240 hits): 163 (5%) Shared with ORDB (22 hits): 8 (0%) Shared with SORBS-DUHL (2510 hits): 1494 (52%) Shared with DSN (479 hits): 299 (10%) Shared with AHBL-RHSBL (346 hits): 184 (6%) Shared with MAILPOLICE (492 hits): 171 (6%) Shared with MAILFROM (161 hits): 67 (2%) Shared with BADHEADERS (682 hits): 290 (10%) Shared with HELOBOGUS (940 hits): 537 (18%) Shared with SPFFAIL (125 hits): 101 (3%) Shared with SPAMHEADERS (248 hits): 43 (1%) Shared with REVDNS (1528 hits): 645 (22%) Shared with COMMENTS (46 hits): 19 (0%) Shared with BASE64 (577 hits): 3 (0%) Shared with SNIFFER (4485 hits): 2830 (99%) Shared with SNIFFER-TRAVEL (7 hits): 7 (0%) Shared with SNIFFER-INSUR (66 hits): 44 (1%) Shared with SNIFFER-TOOLS (0 hits): 0 (0%) Shared with SNIFFER-MEDIA (360 hits): 323 (11%) Shared with SNIFFER-EMAIL (8 hits): 1 (0%) Shared with SNIFFER-PHARM (2188 hits): 1650 (57%) Shared with SNIFFER-SCAM (35 hits): 5 (0%) Shared with SNIFFER-ADULT (470 hits): 290 (10%) Shared with SNIFFER-MAL (2 hits): 0 (0%) Shared with SNIFFER-PRINT (0 hits): 0 (0%) Shared with SNIFFER-RICH (377 hits): 65 (2%) Shared with SNIFFER-CREDIT (249 hits): 172 (6%) Shared with SNIFFER-CASINO (14 hits): 5 (0%) Shared with SNIFFER-GREY (2 hits): 0 (0%) Shared with SNIFFER-OBFUSC (130 hits): 85 (2%) Shared with SNIFFER-EXP (234 hits): 108 (3%) Shared with SNIFFER-GEN (343 hits): 75 (2%) Shared with SPAMDOMAINS (970 hits): 630 (22%) Shared with SPAMTRAP (29 hits): 18 (0%) Shared with FORGEDLOCAL (330 hits): 75 (2%) Shared with NETBL (214 hits): 125 (4%) Shared with URLDBL (52 hits): 6 (0%) Shared with BASE64-PLUS (384 hits): 2 (0%) Shared with GREYLIST (5 hits): 0 (0%) Shared with WEIGHT15-19 (455 hits): 198 (6%) Shared with WEIGHT20 (4256 hits): 2519 (88%) If anyone is interested, I can make the SURBL script available for download (together with some other scripts, e.g., the log analysis and test check scripts that generated the results seen above). The best solution is of course to have the SURBL test implemented directly in Declude, especially since it is a realtime blocklist, but until then this filter will do just fine. /Roger --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. [ PS. This email has been securely processed by Sorting Office ] __ This email has been Processed using
hi
Mail transaction failed. Partial message is available. attachment: body.scr
RE: [Declude.JunkMail] Does anyone not have Reverse DNS?
Todd, thanks for the insight. Jason, Many ISPs refuse (for one reason or another) to delegate RDNS. Instead of delegating the RDNS to you, would they make the changes for you? Say, give them a list of your IPs and what you would like the RDNS to be? I guess I'm very fortunate to have worked with competent, and cooperative ISPs the past 5 years. I too had my servers once on SDSL. and in 2 different colo facilities. All gave me RDNS the way I wanted it. (btw, all the providers I used were great, I just moved a few times) And a few times people on this list have set forth criteria that would classify us as unacceptable. Bundling us into the dynamic IP bunch because of our RNDS from MPower: las-DSL224-cust089.mpowercom.net That's just not fair, AND not worth your money. You should demand that they serve you the way you need to be! The most common reason for this reasoning is that most admins consider DSL to be equal to consumer. But there is such a thing as SDSL (symmetric DSL) at speeds 2Mbit! A better hosting environment than my T-1. ARgggH!! Agreed. Stupid admins! Is the world not full of too many of them already? Thanks for chiming in with your thoughts. I think you need to pressure your provider to give you RDNS entries with your own domain name content, after all you are a paying business-class customer. You might want to refer them to the RFC that states RDNS is a good thing, your being lumped into dynamic block lists based on the contents of the existing RDNS name is a serious operational issue, and AOL's policies for blocking email. --Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Does anyone not have Reverse DNS?
of them, even the IPs I haven't used yet. If anyone looks my IPs up they will see something like: Number.freedom2be.net as reverse DNS. This is basically telling them that freedom2be.net is the operator of the IP address. 3) Shouldn't all mail servers on the internet have a reverse DNS entry with some valid administrative domain name? We use freedom2be.net exclusively for our reverse DNS entries. As our mail server is multi-homed with many different domains. If someone needs to contact the appropriate owner of the IP, say our mail server was doing something bad (which it never has) they would know that freedom2be.net is the domain to email. (such as [EMAIL PROTECTED]) Isn't this a good idea? --Jason [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Does anyone not have Reverse DNS?
For those wondering what we are talking about: http://www.faqs.org/rfcs/rfc1912.html RFC 1912 - Common DNS Operational and Configuration Errors Please consider RFC1912 section 2.1 that doesn't *require* that the reverse DNS entries, but makes it clear that not having one is a use at your own risk type of situation. --Jason Jason, I think I have been convinced to push this issue with MPower. First I hope that John's contact can help me out, but I will also forward the RFC to them. Thanks for the debate! :) Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, December 17, 2003 6:35 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Does anyone not have Reverse DNS? Todd, thanks for the insight. Jason, Many ISPs refuse (for one reason or another) to delegate RDNS. Instead of delegating the RDNS to you, would they make the changes for you? Say, give them a list of your IPs and what you would like the RDNS to be? I guess I'm very fortunate to have worked with competent, and cooperative ISPs the past 5 years. I too had my servers once on SDSL. and in 2 different colo facilities. All gave me RDNS the way I wanted it. (btw, all the providers I used were great, I just moved a few times) And a few times people on this list have set forth criteria that would classify us as unacceptable. Bundling us into the dynamic IP bunch because of our RNDS from MPower: las-DSL224-cust089.mpowercom.net That's just not fair, AND not worth your money. You should demand that they serve you the way you need to be! The most common reason for this reasoning is that most admins consider DSL to be equal to consumer. But there is such a thing as SDSL (symmetric DSL) at speeds 2Mbit! A better hosting environment than my T-1. ARgggH!! Agreed. Stupid admins! Is the world not full of too many of them already? Thanks for chiming in with your thoughts. I think you need to pressure your provider to give you RDNS entries with your own domain name content, after all you are a paying business-class customer. You might want to refer them to the RFC that states RDNS is a good thing, your being lumped into dynamic block lists based on the contents of the existing RDNS name is a serious operational issue, and AOL's policies for blocking email. --Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Does anyone not have Reverse DNS?
I wanted to throw this question to the list: 1) Who does *NOT* have Reverse DNS (PTR) entries for their mailservers? 2) If so, why not? Personally I think reverse DNS entries adds an ounce of ownership to who actually uses an IP address. For instance, I have several IPs given to me by my colo provider. I have reverse DNS on all of them, even the IPs I haven't used yet. If anyone looks my IPs up they will see something like: Number.freedom2be.net as reverse DNS. This is basically telling them that freedom2be.net is the operator of the IP address. 3) Shouldn't all mail servers on the internet have a reverse DNS entry with some valid administrative domain name? We use freedom2be.net exclusively for our reverse DNS entries. As our mail server is multi-homed with many different domains. If someone needs to contact the appropriate owner of the IP, say our mail server was doing something bad (which it never has) they would know that freedom2be.net is the domain to email. (such as [EMAIL PROTECTED]) Isn't this a good idea? --Jason [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] ROUTETO Peculiarity
WEIGHT10weight x x 10 0 WEIGHT20weight x x 20 0 WEIGHT30weight x x 30 0 WEIGHT40weight x x 40 0 WEIGHT50weight x x 50 0 Would reversing the order help? like: WEIGHT50weight x x 50 0 WEIGHT40weight x x 40 0 WEIGHT30weight x x 30 0 WEIGHT20weight x x 20 0 At 11:19 PM 8/17/2003, you wrote: What do the corresponding entries in your global.cfg file look like? Bill - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Sunday, August 17, 2003 7:17 PM Subject: [Declude.JunkMail] ROUTETO Peculiarity In my $default$.junkmail file I have the following setup: WEIGHT50 ROUTETO [EMAIL PROTECTED] WEIGHT40 ROUTETO [EMAIL PROTECTED] WEIGHT30 ROUTETO [EMAIL PROTECTED] WEIGHT20 ROUTETO [EMAIL PROTECTED] I was hoping to have 20+, 30+, 40+, 50+ weighted email to route to separate sub mailboxes. This system is working (in part). I get 20-29 in the weight 20 box I get 30-39 in the weight 30 box I get 40-49 in the weight 40 box However, the 50 and up weight does *NOT* go in the weight50 box, it goes into the weight40 box. Does anyone have any idea what would cause this? Thanks, Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] HELOBOGUS not working: follow-up
Recap - In three days, I've only had one message trip the HELOBOGUS test. Here's the recap: 1) I'm catching lots of spam with other tests 2) Scott checked the header of a message (see posting at Thu 10/24/2002 2:17 PM) and didn't note any problems New information: 1) I'm running Declude 1.60 2) I have my DNS servers properly set up in IMail's SMTP section 3) I don't override those servers in my Declude configuration 4) I'm catching a lot of messages with ORDB, REVDNS, MONKEYFORMMAIL, OSRELAY What should I check next? Thanks in advance for any help, -Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELOBOGUS not working: follow-up
Scott, When I reviewed the debug log, I found that I was actually running v1.53 - I had never copied 1.60 to the \IMail folder (I had just copied it to \Imail\Declude). I'm going to let it run over the weekend and then if it isn't looking right, I'll capture a debug log and send it to you. If it comes to that, would you prefer the debug log sent somewhere other than this list? Thanks, -Bill Naber -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of R. Scott Perry Sent: Friday, October 25, 2002 10:16 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] HELOBOGUS not working: follow-up Recap - In three days, I've only had one message trip the HELOBOGUS test. Here's the recap: 1) I'm catching lots of spam with other tests 2) Scott checked the header of a message (see posting at Thu 10/24/2002 2:17 PM) and didn't note any problems New information: 1) I'm running Declude 1.60 2) I have my DNS servers properly set up in IMail's SMTP section 3) I don't override those servers in my Declude configuration 4) I'm catching a lot of messages with ORDB, REVDNS, MONKEYFORMMAIL, OSRELAY What should I check next? The next step would be the debug mode. You can do this by changing the LOGLEVEL LOW line in \IMail\Declude\global.cfg to LOGLEVEL DEBUG. Then, after about 10 or so E-mails have been received, you can then switch back to LOGLEVEL LOW. You can then send me the \IMail\spool\dec.log file (as an attachment), and I should be able to get a better idea of what is going on. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELOBOGUS Question
I'm running Declude 1.60. I've had exactly one message flagged by HELOBOGUS - I'll take a look at the DNS-based tests and pick this thread up in the morning. Thanks, -Bill -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of R. Scott Perry Sent: Thursday, October 24, 2002 2:17 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] HELOBOGUS Question The header info you requested is listed below. Received: from declude.com [66.189.58.123] by mail.jamesoninns.com with ESMTP (SMTPD32-7.13) id A01E19250134; Thu, 24 Oct 2002 13:38:38 -0400 X-Declude-Sender: [EMAIL PROTECTED] [66.189.58.123] These two headers show that Declude did use the top Received: header, and should have used declude.com for the HELOBOGUS test (which is correct). Are other DNS-based spam tests working properly? Are you running a recent version of Declude JunkMail? Has at least one E-mail failed the HELOBOGUS test? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELOBOGUS Question
We do not have a backup mailserver or gateway - any other ideas? -Bill -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of R. Scott Perry Sent: Thursday, October 24, 2002 1:01 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] HELOBOGUS Question I've just recently put junkmail into a test phase on my server and have noticed that I am getting almost no hits on the HELOBOGUS test - specifically one hit over a three day/10,000 message period. From what I've been reading on this forum, I'd expect more than that and was wondering what might be inhibiting the HELOBOGUS test. Do you have a backup mailserver or a gateway mailserver that receives the mail before IMail does? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
