RE: [Declude.JunkMail] Spam leak?

[David Barker]

We are aware of this it was a forged email posting to our list, we have
disabled all posting on the customer list until we need to post.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Friday, January 13, 2006 9:04 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Spam leak?


> Ummm... Did anybody else get a piece of spam this morning with subject
> SPAMSPCE: that seems to have been relayed through Declude.com?

Yes.
Markus

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

[David Barker]

I have worked with customers with similar Dual-Xeon CPU setup and have seen
processing of 1000+ emails per minute.

1. What is your THREADS in the Declude.cfg ?
2. Are you running many large filters ?
3. How many virus scanners are you running ?
4. Is hyperthreading turned ON or OFF ?
5. Are you using any other Directives in your declude.cfg ?

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Friday, January 13, 2006 8:16 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Declude v3 CPU usage and processing speed


We've running W2k3 Server on a Dell PE1750 with 3GHz Dual-Xeon CPU and
SCSI-Raid system here.

Sometimes the proc folder is filling up with thousands of messages and
declude is processing it. 
But it does process them way to slow. 

While all 4 CPU-Usage graphs in the task manager has an average value of
around 50% messages are processed but only around 50 per minute.

I've tried to play around with 

THREADS in declude.cfg
"Delivery Threads" and "Listen pipes" in Imail Queue Manager Restarted
services, and the entire server Moved temporaly out most of the queue files
in proc folder

None of this changed anything.
Why it seems that Declude v3 is not working as fast as possible when there
are so much messages waiting for delivery?

Markus


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

[David Barker]

1. Set THREADS 200
2. Which virus scanner are you running ? and do you have PRESCAN ON in your
virus.cfg
3. Try turning hyperthreading off.
4. Set WAITFORMAIL 500
5. Have you had DNS issues with decludeproc running ? Disable WINSOCKCLEANUP
ON
6. Disable WAITFORTHREADS and WAITBETWEENTHREADS

Let me know.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Friday, January 13, 2006 10:11 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed



> I have worked with customers with similar Dual-Xeon CPU setup and have 
> seen processing of 1000+ emails per minute.

We have two of this machines here. It has exactly the same config from the
screw who hold the server in the rack up to each dot in the junkmail config
file (except the license codes ;-)

The first server seems processing messages faster then the second.
On the second server the more I play with values the lower CPU-usage and
processing goes. After each reboot of decludeproc it's going down a little
bit. Neither a reboot solved the problem. When I block incomming
SMTP-traffic on the second server it will process around 50 messages per
minute by showing up an average CPU usage way below of 50% (currently 20%)


> 1. What is your THREADS in the Declude.cfg ?

Everything from 5 up to 500


> 2. Are you running many large filters ?

I've tried enabling und disabling many filters without any noticeable
change. But large filters should create a large cpu-usage. 


> 3. How many virus scanners are you running ?

Usualy two but I've also disabled the second for testing without any result


> 4. Is hyperthreading turned ON or OFF ?

Yes task manager is showing up 4 cpu's


> 5. Are you using any other Directives in your declude.cfg ?

Beside THREADS I've currently in use

WAITFORMAIL 5000
WINSOCKCLEANUP   ON

I've tried changing WAITFORMAIL up to 15000 ms as suggested by another v3
Admin and I've also tried  adding

WAITFORTHREADS  1500
WAITBETWEENTHREADS   1

With values from 150 .. 1500 and 1 .. 1000 without any noticeable change in
the task manager cpu usage.

The number of queue files in the proc folder is going up and down (something
between 1000 and 12000 files) The server is working and delivery messages
but only with 50% of his power and speed.

Netstat is showing around 100 ETSABLISHED connections and around 50 in
TIME_WAIT The process list in the task manager is showing up around 50
entries


Markus





---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

[David Barker]

1. How many messages currently in your \proc  ?

2. On average how many threads has decludeproc and what is the highest
thread count over a 5 min period check this under your processors, also set
the update speed under the "view" to high

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Friday, January 13, 2006 10:56 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed



> I would try the DNSOVERRIDE x.x.x.x switch in your declude.cfg file.  
> There is a post in the archive from Declude - Bill I beleive that 
> explains more.

Can't find any message from "Bill"
Added DNSOVERRIDE without any result


Markus

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

[David Barker]

FYI Hyperthreading http://news.zdnet.co.uk/0,39020330,39237341,00.htm
 
"Intel had sold hyperthreading as something that gave performance gains to
heavily threaded software. SQL Server is very thread-intensive, but it
suffers. In fact, I've never seen performance improvement on server software
with hyperthreading enabled. We recommend customers disable it when running
Citrix and our software on the same server." 
 
Turning HT OFF is not the solution for everyone but has worked on servers in
several cases that I am aware of.
 
David B
www.declude.com



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Friday, January 13, 2006 11:08 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed


Quick comment about turning hyperthreading off.  I posted a graph from
sometime in the last two weeks where I tested this with 2.0.6.16 and it
showed that this effectively doubled my CPU utilization.  I understand that
3.x is different, but it still launches a lot of processes such as external
tests and virus scanners that are primarily single-threaded.  I won't
dismiss the possibility of an error on my system considering how large the
difference was for the worse, but I haven't seen any claims that turning off
hyperthreading produced an improvement yet, though on other applications I
have definitely seen benchmarks that show measurable improvements in some
cases.

Matt



David Barker wrote: 

1. Set THREADS 200
2. Which virus scanner are you running ? and do you have PRESCAN ON
in your
virus.cfg
3. Try turning hyperthreading off.
4. Set WAITFORMAIL 500
5. Have you had DNS issues with decludeproc running ? Disable
WINSOCKCLEANUP
ON
6. Disable WAITFORTHREADS and WAITBETWEENTHREADS

Let me know.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus
Gufler
Sent: Friday, January 13, 2006 10:11 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude v3 CPU usage and processing
speed



  

I have worked with customers with similar Dual-Xeon CPU
setup and have 
seen processing of 1000+ emails per minute.



We have two of this machines here. It has exactly the same config
from the
screw who hold the server in the rack up to each dot in the junkmail
config
file (except the license codes ;-)

The first server seems processing messages faster then the second.
On the second server the more I play with values the lower CPU-usage
and
processing goes. After each reboot of decludeproc it's going down a
little
bit. Neither a reboot solved the problem. When I block incomming
SMTP-traffic on the second server it will process around 50 messages
per
minute by showing up an average CPU usage way below of 50%
(currently 20%)


  

1. What is your THREADS in the Declude.cfg ?



Everything from 5 up to 500


  

2. Are you running many large filters ?



I've tried enabling und disabling many filters without any
noticeable
change. But large filters should create a large cpu-usage. 


  

3. How many virus scanners are you running ?



Usualy two but I've also disabled the second for testing without any
result


  

4. Is hyperthreading turned ON or OFF ?



Yes task manager is showing up 4 cpu's


  

5. Are you using any other Directives in your declude.cfg ?



Beside THREADS I've currently in use

WAITFORMAIL 5000
WINSOCKCLEANUP   ON

I've tried changing WAITFORMAIL up to 15000 ms as suggested by
another v3
Admin and I've also tried  adding

WAITFORTHREADS  1500
WAITBETWEENTHREADS   1

With values from 150 .. 1500 and 1 .. 1000 without any noticeable
change in
the task manager cpu usage.

The number of queue files in the proc folder is going up and down
(something
between 1000 and 12000 files) The server is working and delivery
messages
but only with 50% of his power and speed.

Netstat is showing around 100 ETSABLISHED connections and around 50
in
TIME_WAIT The process list in the task manager is showing u

RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed

[David Barker]

Declude.cfg should be in your \Declude folder, is that where it is located ?

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
Sent: Friday, January 13, 2006 11:25 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed


> 1. How many messages currently in your \proc  ?

SRV1 is gone below 1000
SRV2 is still somewhere between 4000 and 6000 messages (going up and down
slowly)



> 2. On average how many threads has decludeproc and what is the highest 
> thread count over a 5 min period check this under your processors, 
> also set the update speed under the "view" to high

Avg: 16 min: 13 max: 17

Why this? My current THREADS value is set to 200.
Where should I place declude.cfg ?



But after Darells suggestion I noticed another difference between both
servers. SRV1 and SRV2 has configured two different DNS servers for lookups
(even without DNSOVERERIDE)

After disabling all DNS-based tests CPU usage seems going up to an average
of 90% but only for certain periods then it's going down back to an avg of
50%

Markus




> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
> Sent: Friday, January 13, 2006 10:56 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Declude v3 CPU usage and processing 
> speed
> 
> 
> 
> > I would try the DNSOVERRIDE x.x.x.x switch in your
> declude.cfg file.  
> > There is a post in the archive from Declude - Bill I beleive that 
> > explains more.
> 
> Can't find any message from "Bill"
> Added DNSOVERRIDE without any result
> 
> 
> Markus
> 
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> 
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> 

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: Re[2]: [Declude.JunkMail] Declude v3 CPU usage and processing speed

[David Barker]

 
25% utilization under NO load is very strange. Could you provide us with
Remote Access to see this ?

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Sullivan
Sent: Friday, January 13, 2006 1:28 PM
To: Matt
Subject: Re[2]: [Declude.JunkMail] Declude v3 CPU usage and processing speed

Hello Matt,

Friday, January 13, 2006, 12:29:25 PM, you wrote:

M> I would throw both logs into Debug and restart just to see if there 
M> areany clues in there.

Did this and couldn't come up with anything out of ordinary.

M> One other longshot that would be interesting would be to change 
M> thedefault host in IMail to match the other box and use the keys on 
M> theproperly functioning server just to see if there is any 
M> difference.

Good idea, we'll give this a shot.

What about the 25% utilization under NO load. We see this on all boxes now
with Declude 3.5.23. Are you seeing this behavior as well?



--
Best regards,
 Davidmailto:[EMAIL PROTECTED]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] decludeproc causing dns queries to fail

[David Barker]

Will,

If Decludeproc was usurping network resources we should be aware of this
issue. However currently you are the only report of this incident. Please
make sure you are running the latest version of declude 3.0.5.23
 
Declude has sent out DNS requests and did not recieve responses from the DNS
server, this is an indication of a DNS issues with your Network.. 

1. Check your firewall and ensure Port 53 is open.
2. Check your Firewall/Router logs to make sure incoming DNS packets are not
being blocked
3. Check for potential Network problems
4. Check that you DNS is working correctly. 

If you find it to be one of these reasons listed above it is a DNS issue and
not a Declude issue. BTW this is posted in our Knowledge base.  

David B
www.declude.com



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Tuesday, January 17, 2006 9:22 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] decludeproc causing dns queries to fail



For the second time in a month I have come to work to find over 500,000
messages in my proc folder.  The cause is declude's inability to perform dns
queries, thus mail backlogs.  The reason declude cannot perform DNS queries
is that no outgoing traffic is being permitted on port 53.  The reason no
outgoing traffic is being permitted on port 53 is that decludeproc has
consumed the resources allocated to my network interface.  The fix for this
is relatively simple.  I stop the decludeproc service and restart it and all
is well.   

 

After the first occurrence, it was suggested that I enable winsockcleanup
documented as the following at declude.com:

WINSOCKCLEANUPON
Located in Declude.cfg. Some customers had issues related to their network
stack causing loss of functionality for basic network operations. The
default for this directive is OFF 

Now I've been fooled twice, so I guess shame on me.  Does anyone have a
suggestion that would help resolve this?  In the meantime I will be writing
a script to monitor the number of message in the proc folder and if it
reaches a certain threshold, will restart the decludeproc service.  I really
don't care for workarounds such as this, but I've gained a bad image over
these two occurrences and I cannot allow it to happen again.

 

Declude.cfg:

THREADS   100

WAITFORMAIL 5000

WINSOCKCLEANUP   ON 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] decludeproc causing dns queries to fail

[David Barker]

Will,

Thanks for your post. I will arrange for one of our engineers to take a
further look at this issue.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Tuesday, January 17, 2006 10:06 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail

Thank you for the feedback.  There is no firewall between my mail server and
my DNS server.  The DNS server is running without issue and resolves names
just fine on all other workstations and servers even when the issues on my
mail server arise.  When the issue presents itself, the mail server alone is
unable to establish a connection to the DNS.
During the first instance, I verified multiple times that the DNS server was
resolving properly and noted that the mail server could not establish a
connection with any of the five DNS servers I tried.  After the decludeproc
service was restarted, I could once again establish the connection for DNS
and mail processing started again.  However, with 500k messages in queue it
took less than a half hour for the problem to happen again.  My solution at
the time, which I am not happy with, was to purge the proc folder.  Without
such overhead it ran fine for weeks.

The second time this happened a few days ago, I verified all my pervious
findings.

I can guarantee with absolute certainty that there are no DNS issues at the
root of this problem.  The sole cause and solution lie with the decludeproc
service and its consumption of resources on my mail server.

I just wrote a program to monitor the number of files in the proc folder and
restart the decludeproc service if it exceeds 2000.  This will be enough to
ensure that this doesn't happen again, but I do wish to make this issue
known so it can be avoided or diagnosed in the future.

I am currently running Win2003/sp1, Imail 8.12 with declude pro 3.0.5.22
running spam and antivirus with f-prot. 

Will


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Tuesday, January 17, 2006 9:40 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail

Will,

If Decludeproc was usurping network resources we should be aware of this
issue. However currently you are the only report of this incident.
Please
make sure you are running the latest version of declude 3.0.5.23
 
Declude has sent out DNS requests and did not recieve responses from the DNS
server, this is an indication of a DNS issues with your Network.. 

1. Check your firewall and ensure Port 53 is open.
2. Check your Firewall/Router logs to make sure incoming DNS packets are not
being blocked 3. Check for potential Network problems 4. Check that you DNS
is working correctly. 

If you find it to be one of these reasons listed above it is a DNS issue and
not a Declude issue. BTW this is posted in our Knowledge base.  

David B
www.declude.com



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Tuesday, January 17, 2006 9:22 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] decludeproc causing dns queries to fail



For the second time in a month I have come to work to find over 500,000
messages in my proc folder.  The cause is declude's inability to perform dns
queries, thus mail backlogs.  The reason declude cannot perform DNS queries
is that no outgoing traffic is being permitted on port 53.  The reason no
outgoing traffic is being permitted on port 53 is that decludeproc has
consumed the resources allocated to my network interface.  The fix for this
is relatively simple.  I stop the decludeproc service and restart it and all
is well.   

 

After the first occurrence, it was suggested that I enable winsockcleanup
documented as the following at declude.com:

WINSOCKCLEANUPON
Located in Declude.cfg. Some customers had issues related to their network
stack causing loss of functionality for basic network operations. The
default for this directive is OFF 

Now I've been fooled twice, so I guess shame on me.  Does anyone have a
suggestion that would help resolve this?  In the meantime I will be writing
a script to monitor the number of message in the proc folder and if it
reaches a certain threshold, will restart the decludeproc service.  I really
don't care for workarounds such as this, but I've gained a bad image over
these two occurrences and I cannot allow it to happen again.

 

Declude.cfg:

THREADS   100

WAITFORMAIL 5000

WINSOCKCLEANUP   ON 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[Thi

RE: [Declude.JunkMail] decludeproc causing dns queries to fail

[David Barker]

Will,

When this happens again could you try start/stopping the queue manager and
smtp services in Imail to see if it resolves the issue of not being able to
connect to the DNS server.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Wednesday, January 18, 2006 3:49 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] decludeproc causing dns queries to fail

Just to clarify...  If Imail was not processing, wouldn't the buildup be
occurring in the /spool directory itself?  Would declude also be affected by
such an issue and cause a buildup in the /spool/proc folder?

I ask, because my mail is getting built up in the /spool/proc folder, not
the /spool folder.  As I understand it, declude.exe deposits mail into the
/spool/proc folder.  The decludeproc.exe server runs to move mail out of
this folder into the /spool/proc/work folder for processing and once
completed moves it to the /spool folder so Imail may deliver it.  Am I
missing something?

This also doesn't explain why no outgoing DNS queries are allowed while
these issues are occurring, such as nslookup (unable to even establish a
connection to any DNS server), but once again work when the decludeproc.exe
is restarted.  To clarify, I am not restarting or changing Imail services in
any way.  My one and only step to resolve the issue is to stop
decludeproc.exe and restart it in services.  Nothing else needs to be done.
This is the only service I need to touch.

I am more than happy to try modifying my setup as a form of troubleshooting,
but forgive me for trying to understand the reasoning behind it.

Will




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Wednesday, January 18, 2006 7:14 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] decludeproc causing dns queries to fail

Will,

It is possible that this is not a Declude issue.

We had a similar problem years ago with an earlier version of Imail, even
before we began using Declude. It turned out that there has been an ongoing
bug in Imail about the entry of multiple DNS servers into the SMTP setup

page. They say you can enter several IPs separated by spaces, but if you do
this, IMail occasionally gets confused and basically stops looking at DNS
entirely. This results in quick buildup in the spool and the kind of
problems you describe.

The cure is to run cache-only DNS locally on the server. Just install the
service, set it for Automatic, turn it on, point IMail to 127.0.0.1,an
stop/start the IMail SMTP service. This will result in improved performance
because all your DNS lookups won't go over your network. You can point the
local DNS to your other servers by entering their addresses into DNS in the
Network | TCP/IP property sheet.

-Dave Doherty
 Skywaves, Inc. 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Spool Directory Backed Up

[David Barker]

1. Check for DNS problems by running your logs on DEBUG and 
then searching for didn't get response if you see multiple entries like this it 
could be DNS
 
2. How many threads are you running in your Declude.cfg and 
what is the CPU of the server ?
 
David


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of A. 
ClausenSent: Friday, January 20, 2006 12:44 PMTo: 
Declude.JunkMail@declude.comSubject: [Declude.JunkMail] Spool 
Directory Backed Up

We upgraded to 3.0.5.23 a couple of weeks ago, and 
since then I've noticed a steady expansion in the number of files in the spool 
directory.  It's now up to about 37000 files.  I'm fairly certain that 
Declude has something to do with this.  Any hints?
 
-- 
A. Clausen

RE: [Declude.JunkMail] Spool Directory Backed Up

[David Barker]

If there is not one create it using notepad. Or Check if you have a copy in
C:\Program Files\Declude

What is the CPU of the server ?

David B
www.declude.com



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of A. Clausen
Sent: Friday, January 20, 2006 1:11 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Spool Directory Backed Up




David Barker wrote: 

1. Check for DNS problems by running your logs on DEBUG and then
searching for didn't get response if you see multiple entries like this it
could be DNS
 
2. How many threads are you running in your Declude.cfg and what is
the CPU of the server ?

Here's a curious thing.  Where is the Declude.cfg file?  I can't even find
it.

-- 
A. Clausen


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] DOSENDERACTIONS

[David Barker]

DOSENDERACTIONS ON uses the $default$.sender actions for OUTBOUND email 
rather than the OUTBOUND actions in the global.cfg
 
David 
B
www.declude.com



From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
georgeSent: Friday, January 20, 2006 3:24 PMTo: 
Declude.JunkMail@declude.comSubject: [Declude.JunkMail] 
DOSENDERACTIONS


The DOSENDERACTIONS ON option in the 
GLOBAL.CFG appears to be looking for a configuration file named 
$default$.sender
 
I can’t find any specific 
documentation to verify that the above statement is correct or what the contents 
and format of the $default$.sender file are.  I would assume that it would 
be the same as the $default$.junkmail but I’d appreciate verification and 
clarification before investing a lot of time and effort into the 
implementation.  I would also assume that one of these files would be 
required everyplace there is a $default$.junkmail 
file.
 
Thanks,
 
George

RE: [Declude.JunkMail] Spool Directory Backed Up

[David Barker]

Place the declude.cfg in the \declude folder change the following value.

THREADS35

Stop/restart the decludeproc service.

David

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of A. Clausen
Sent: Friday, January 20, 2006 4:15 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Spool Directory Backed Up



David Barker wrote:

>If there is not one create it using notepad. Or Check if you have a 
>copy in C:\Program Files\Declude
>
>What is the CPU of the server ?
>
>  
>
Found it in Program Files.  This is the contents:
THREADS15
WAITFORMAIL5000
#WAITFORTHREADS  1500
#WAITBETWEENTHREADS   1

The CPU of the server is a 2.6ghz Pentium IV.

--
A. Clausen
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT: Virus Scanning For Your Servers

[David Barker]

1. You should be using fpcmd.exe which is the 32bit scanner of F-Prot not
the f-prot.exe which is the 16 bit version. 
2. Remove the /NOFLOPPY and /PACKED options from the switches
3. Ensure that the Real Time protector of F-Prot is not installed.
 
David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Evans Martin
Sent: Saturday, January 28, 2006 4:05 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] OT: Virus Scanning For Your Servers

If ClamWin doesn't do on access scanning and it is the only virus scanner
running on my system, to what can I attribute the errors in this log
segment?

01/22/2006 00:11:52.187 42470405 Vulnerability flags = 0
01/22/2006 00:11:52.234 42470405 Error 87 starting scanner
[C:\Progra~1\FSI\F-Prot\F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE=5 /NOFLOPPY
/NOBOOT /DUMB /PACKED /REPORT=report.txt
c:\SMARTE~1\Spool\proc\work\42470405.vir\]; NOT SCANNING ATTACHMENTS! Error
String: [The parameter is incorrect.]
01/22/2006 00:11:52.234 42470405 1 [1 of 2 not deleted] files were deleted.
You should not use an on-access virus scanner that scans the \IMail
directory or sub-directories.
01/22/2006 00:11:52.234 42470405 Scanned: Error starting scanner
01/22/2006 00:12:32.312 42470406 Vulnerability flags = 0
01/22/2006 00:12:32.343 42470406 Error 87 starting scanner
[C:\Progra~1\FSI\F-Prot\F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE=5 /NOFLOPPY
/NOBOOT /DUMB /PACKED /REPORT=report.txt
c:\SMARTE~1\Spool\proc\work\42470406.vir\]; NOT SCANNING ATTACHMENTS! Error
String: [The parameter is incorrect.]
01/22/2006 00:12:32.343 42470406 1 [1 of 2 not deleted] files were deleted.
You should not use an on-access virus scanner that scans the \IMail
directory or sub-directories.
01/22/2006 00:12:32.343 42470406 Scanned: Error starting scanner
01/22/2006 00:12:42.437 42470407 Vulnerability flags = 0
01/22/2006 00:12:42.453 42470407 Scanned: Virus Free [Prescan OK][MIME: 1
3031]
01/22/2006 00:12:47.593 42470408 Vulnerability flags = 0
01/22/2006 00:12:47.625 42470408 Error 87 starting scanner
[C:\Progra~1\FSI\F-Prot\F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE=5 /NOFLOPPY
/NOBOOT /DUMB /PACKED /REPORT=report.txt
c:\SMARTE~1\Spool\proc\work\42470408.vir\]; NOT SCANNING ATTACHMENTS! Error
String: [The parameter is incorrect.]
01/22/2006 00:12:47.625 42470408 1 [1 of 2 not deleted] files were deleted.
You should not use an on-access virus scanner that scans the \IMail
directory or sub-directories.
01/22/2006 00:12:47.625 42470408 Scanned: Error starting scanner
01/22/2006 00:13:27.718 42470409 Vulnerability flags = 0
01/22/2006 00:13:27.734 42470409 MIME file: [text/html][*DEFAULT*;
Length=2063 Checksum=158746]
01/22/2006 00:13:27.734 42470409 Scanned: Virus Free [Prescan OK][MIME: 2
3360]
01/22/2006 00:13:47.890 42470410 Vulnerability flags = 0
01/22/2006 00:13:47.906 42470410 Error 87 starting scanner
[C:\Progra~1\FSI\F-Prot\F-Prot.exe /TYPE /SILENT /NOMEM /ARCHIVE=5 /NOFLOPPY
/NOBOOT /DUMB /PACKED /REPORT=report.txt
c:\SMARTE~1\Spool\proc\work\42470410.vir\]; NOT SCANNING ATTACHMENTS! Error
String: [The parameter is incorrect.]
01/22/2006 00:13:47.906 42470410 1 [1 of 2 not deleted] files were deleted.
You should not use an on-access virus scanner that scans the \IMail
directory or sub-directories.
01/22/2006 00:13:47.906 42470410 Scanned: Error starting scanner

Thanks,
Evans Martin

---
EVANS MARTIN  <[EMAIL PROTECTED]>
HOSTING:  http://www.martek.net
PROGRAMMING:  http://www.martekware.com

iPlus Info Browser - IPB's IMail Migration Tool, password browser, reporting
suite make IPlus Info Browser something no IMail administrator should be
without.  http://www.martek.net/Default.aspx?tabid=96


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
> [EMAIL PROTECTED] On Behalf Of george
> Sent: Saturday, January 28, 2006 12:47 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] OT: Virus Scanning For Your Servers
> 
> Evans,
> 
> I use F-Prot, ClamWin, AVG and NOD32, in that order.
> 
> I don't use ClamWin to do scheduled scans and it doesn't do on-access 
> scanning, so it doesn't interfere with F-Prot in any way.
> 
> George
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
> > [EMAIL PROTECTED] On Behalf Of Evans Martin
> > Sent: Friday, January 27, 2006 9:41 PM
> > To: Declude.JunkMail@declude.com
> > Subject: [Declude.JunkMail] OT: Virus Scanning For Your Servers
> >
> > What do you guys use for virus protection on your servers?  I am 
> > trying
> to
> > use ClamWin but it is competing with Declude Virus/FProt.  I looked 
> > for
> a
> > place to exclude my mail folders and it doesn't seem to allow
> directories
> > to be excluded, only filenames.  I'm trying to stay open source or
> really
> > cheap because of the number of machines that I have and Clam has 
> > always worked well on my X machines.
> >
> >
> >
> > Thanks,
> >
> > Evans Martin
> 

RE: [Declude.JunkMail] Recurring Quemgr Issues again

[David Barker]

Randy,
 
The new release of SmarterMail 3.0 coming soon, will 
support WHITELIST AUTH
 
David B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of randy 
armbrechtSent: Sunday, January 29, 2006 6:21 PMTo: 
Declude.JunkMail@declude.comSubject: [Declude.JunkMail] Recurring 
Quemgr Issues again

OK - I'm officially fed up and looking to move to a different platform.  
I finally thought I had this licked, but it is rearing up again.Our 
Queuemgr just up'd and stpped again today; still haven't gotten it back 
up.  We were on IMail 8.15hf2; dual Xeon 2GB Ram, Win2000, declude 3.x 
(latest) JMPro, Virus std and HJ, & F-ProtThe issue IS NOT - 
mail gets processed by Declude fine; it's not being processed by Imail Queuemgr 
when pla ced back in the spool folder*I have stopped / restarted all 
services; no good*I stopped services, renamed the spool file so I could 
start from scratch, restarted all and it is hit or miss.*dns IS NOT the 
problem - dns runs on the server direct; I have concluded from nslookup that DNS 
is woking fine.  I have even tried to switch DNS to a new server; same 
thing.I took the opportunity to upgrade to 8.22 while I am down, 
thinking this would help.  Nope.It's a d%$& good thing I have a 
SmarterMail server running for a few test domains so I can still communicate 
with the group for assistance.  The only reason I haven;t switched to SM 
yet (latest v2) is because as far as I know, SM & declude still do not 
support AMTP Auth whitelist.Anyone have any suggestions?Randy 
ArmbrechtGlobal Web Solutions, Inc.804-382-5300 option 
1

[Declude.JunkMail] Declude 3.0 / 4.0

[David Barker]

1. The definition of an Annual Subscription is a license to run Declude for
a period of a year at which time the Annual Subscription has to be renewed
to continue running Declude. Annual Subscription does NOT apply to customers
of Declude prior 8 Feb 06.

2. Existing Customers prior to 8 Feb 06 CAN continue using the Service
Agreement model. This mean you purchase a Annual Service agreement to ensure
support and having access to new releases of Declude for that year. If your
Service Agreement lapses you are still able to run Declude you will just not
have access to support or new releases.

3. Annual Subscription is NOT the same Annual Service Agreement.

4. For Customers prior to 8 Feb 06 you CAN continue to use Declude as you
always have with the ability to purche an Annual Service Agreement.

5. With regards to Version 3.0 and 4.0 there is NO major difference in
functionality except that 4.0 runs as a single product with Declude EVA PRO,
Junkmail PRO and Hijack. Where as Version 3.0 still supports 3 individual
products.

6. Customers prior to 8 Feb 06 are NOT forced into upgrading to version 4.0
but have an option to do so at greatly reduced price.

7. I am pulling together some additional release notes on a comparison
between version version 3.0 and 4.0 which I hope to have available next
week.

David B
www.declude.com






From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert E. Spivack
Sent: Saturday, February 11, 2006 2:06 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] declude 4 changes ... worried...



How many user mailboxes do you have?  The pricing of some outsourced
solutions which have a per mailbox fee might actually be lower now that
Declude is also an annual required payment.

 



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Friday, February 10, 2006 8:49 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] declude 4 changes ... worried...

 

Yep.  at that price it's time to move to something else or build our own
system.

 

Declude, come back with something reasonable or you'll lose customers like
IMail did.


Darin.

 

 

- Original Message - 

From: Scott Fisher   

To: Declude.JunkMail@declude.com 

Sent: Friday, February 10, 2006 10:43 AM

Subject: [Declude.JunkMail] declude 4 changes ... worried...

 

So I thought I'd go web browsing on the Declude site and see what is up with
Declude 4.

I'm a Virus Pro and Junkmail Pro licensee on Imail.

 

Going forward Declude 4 is the entire suite (Virus Pro, Junkmail Pro and
Hijaak).

Kevin's post mentions that Declude 3 will be supported. Although long term
how long will they support two different code sets?

I'd say my long-term gut feeling isn't good.

 

Next I look through the purchase page. Declude 4 for Imail is now only
available for a $1450 Annual Subscription. Ouch.

The last time I paid maintenance for Declude it was $265. That's a bump.

 

(Essentially having only one domain here), That is mighty pricey especially
compared to the Declude for Smartmail 1 domain price of $199.

 

 

Don't get me wrong, I really like the Declude prodcut. It's so flexible that
you can do many different things...

I just can't see how smaller entities like me are going to positively
affected by these changes.

 

 


-
Scott Fisher
Director of IT
Farm Progress Companies
191 S Gary Ave
Carol Stream, IL 60188
630-462-2323

 

This email message, including any attachments, is for the sole use of the
intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the sender
by reply email and destroy all copies of the original message. Although Farm
Progress Companies has taken reasonable precautions to ensure no viruses are
present in this email, the company cannot accept responsibility for any loss
or damage arising from the use of this email or attachments.

 

 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude 3.0 / 4.0

[David Barker]

The price as based on a formula which is determined by what you currently
have licensed and is therefore is not the same for everyone. ie. If you just
have a license for JM lite you would pay more for an upgrade than someone
who has JM PRO and EVA std.

An upgrade means:

Customers of Declude prior 8 Feb 06 can continue with Service Agreements see
point 4.

David B
www.declude.com



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Saturday, February 11, 2006 3:24 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude 3.0 / 4.0

HI David,

Re: 6.  What is the price for the upgrade?  And does the upgrade mean we are
on an annual subscription, or continue with service agreements?

Darin.


- Original Message -
From: "David Barker" <[EMAIL PROTECTED]>
To: ; 
Sent: Saturday, February 11, 2006 10:47 AM
Subject: [Declude.JunkMail] Declude 3.0 / 4.0


1. The definition of an Annual Subscription is a license to run Declude for
a period of a year at which time the Annual Subscription has to be renewed
to continue running Declude. Annual Subscription does NOT apply to customers
of Declude prior 8 Feb 06.

2. Existing Customers prior to 8 Feb 06 CAN continue using the Service
Agreement model. This mean you purchase a Annual Service agreement to ensure
support and having access to new releases of Declude for that year. If your
Service Agreement lapses you are still able to run Declude you will just not
have access to support or new releases.

3. Annual Subscription is NOT the same Annual Service Agreement.

4. For Customers prior to 8 Feb 06 you CAN continue to use Declude as you
always have with the ability to purche an Annual Service Agreement.

5. With regards to Version 3.0 and 4.0 there is NO major difference in
functionality except that 4.0 runs as a single product with Declude EVA PRO,
Junkmail PRO and Hijack. Where as Version 3.0 still supports 3 individual
products.

6. Customers prior to 8 Feb 06 are NOT forced into upgrading to version 4.0
but have an option to do so at greatly reduced price.

7. I am pulling together some additional release notes on a comparison
between version version 3.0 and 4.0 which I hope to have available next
week.

David B
www.declude.com






From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert E. Spivack
Sent: Saturday, February 11, 2006 2:06 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] declude 4 changes ... worried...



How many user mailboxes do you have?  The pricing of some outsourced
solutions which have a per mailbox fee might actually be lower now that
Declude is also an annual required payment.





From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Friday, February 10, 2006 8:49 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] declude 4 changes ... worried...



Yep.  at that price it's time to move to something else or build our own
system.



Declude, come back with something reasonable or you'll lose customers like
IMail did.


Darin.





- Original Message - 

From: Scott Fisher <mailto:[EMAIL PROTECTED]>

To: Declude.JunkMail@declude.com

Sent: Friday, February 10, 2006 10:43 AM

Subject: [Declude.JunkMail] declude 4 changes ... worried...



So I thought I'd go web browsing on the Declude site and see what is up with
Declude 4.

I'm a Virus Pro and Junkmail Pro licensee on Imail.



Going forward Declude 4 is the entire suite (Virus Pro, Junkmail Pro and
Hijaak).

Kevin's post mentions that Declude 3 will be supported. Although long term
how long will they support two different code sets?

I'd say my long-term gut feeling isn't good.



Next I look through the purchase page. Declude 4 for Imail is now only
available for a $1450 Annual Subscription. Ouch.

The last time I paid maintenance for Declude it was $265. That's a bump.



(Essentially having only one domain here), That is mighty pricey especially
compared to the Declude for Smartmail 1 domain price of $199.





Don't get me wrong, I really like the Declude prodcut. It's so flexible that
you can do many different things...

I just can't see how smaller entities like me are going to positively
affected by these changes.






-
Scott Fisher
Director of IT
Farm Progress Companies
191 S Gary Ave
Carol Stream, IL 60188
630-462-2323



This email message, including any attachments, is for the sole use of the
intended recipient(s) and may contain confidential and privileged
information. Any unauthorized review, use, disclosure or distribution is
prohibited. If you are not the intended recipient, please contact the sender
by reply email and destroy all copies of the original message. Although Farm
Progress Companies has taken reasonable p

RE: [Declude.JunkMail] Declude 3.0 / 4.0

[David Barker]

Darin,

If you have JM Pro & EVA PRO & Hijack you can choose if you want to run
version 3 or version 4 in either case the SA applies as in point 2.

2. Existing Customers prior to 8 Feb 06 CAN continue using the Service
Agreement model. This mean you purchase a Annual Service agreement to ensure
support and having access to new releases of Declude for that year. If your
Service Agreement lapses you are still able to run Declude you will just not
have access to support or new releases.

If you do NOT have JM Pro & EVA PRO & Hijack and choose not to upgrade ...
then you remain with version 3 as version 4 is licensed for JM Pro & EVA PRO
& Hijack as I have explained in point 5.

5. With regards to Version 3.0 and 4.0 there is NO major difference in
functionality except that 4.0 runs as a single product with Declude EVA PRO,
Junkmail PRO and Hijack. Where as Version 3.0 still supports 3 individual
products.

If you need further clarification I would suggest calling us and we will be
happy to answer all your questions.

PS. You will have to wait till Monday 'cuase it's 11:30 on a Saturday
evening and I am not taking calls at home :)

David B
www.declude.com




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Saturday, February 11, 2006 10:55 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude 3.0 / 4.0

Ok, so what are the various prices?  You're going to get asked this a lot.
Why not post the answer on this forum and save everyone a lot of time?

Also, does upgrade mean a previous customer is on SAs, but using v4?  Or
does that customer stay on v3?

Darin.


----- Original Message -
From: "David Barker" <[EMAIL PROTECTED]>
To: 
Sent: Saturday, February 11, 2006 9:55 PM
Subject: RE: [Declude.JunkMail] Declude 3.0 / 4.0


The price as based on a formula which is determined by what you currently
have licensed and is therefore is not the same for everyone. ie. If you just
have a license for JM lite you would pay more for an upgrade than someone
who has JM PRO and EVA std.

An upgrade means:

Customers of Declude prior 8 Feb 06 can continue with Service Agreements see
point 4.

David B
www.declude.com



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Saturday, February 11, 2006 3:24 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude 3.0 / 4.0

HI David,

Re: 6.  What is the price for the upgrade?  And does the upgrade mean we are
on an annual subscription, or continue with service agreements?

Darin.


- Original Message -
From: "David Barker" <[EMAIL PROTECTED]>
To: ; 
Sent: Saturday, February 11, 2006 10:47 AM
Subject: [Declude.JunkMail] Declude 3.0 / 4.0


1. The definition of an Annual Subscription is a license to run Declude for
a period of a year at which time the Annual Subscription has to be renewed
to continue running Declude. Annual Subscription does NOT apply to customers
of Declude prior 8 Feb 06.

2. Existing Customers prior to 8 Feb 06 CAN continue using the Service
Agreement model. This mean you purchase a Annual Service agreement to ensure
support and having access to new releases of Declude for that year. If your
Service Agreement lapses you are still able to run Declude you will just not
have access to support or new releases.

3. Annual Subscription is NOT the same Annual Service Agreement.

4. For Customers prior to 8 Feb 06 you CAN continue to use Declude as you
always have with the ability to purche an Annual Service Agreement.

5. With regards to Version 3.0 and 4.0 there is NO major difference in
functionality except that 4.0 runs as a single product with Declude EVA PRO,
Junkmail PRO and Hijack. Where as Version 3.0 still supports 3 individual
products.

6. Customers prior to 8 Feb 06 are NOT forced into upgrading to version 4.0
but have an option to do so at greatly reduced price.

7. I am pulling together some additional release notes on a comparison
between version version 3.0 and 4.0 which I hope to have available next
week.

David B
www.declude.com






From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Robert E. Spivack
Sent: Saturday, February 11, 2006 2:06 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] declude 4 changes ... worried...



How many user mailboxes do you have?  The pricing of some outsourced
solutions which have a per mailbox fee might actually be lower now that
Declude is also an annual required payment.





From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Friday, February 10, 2006 8:49 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] declude 4 changes ... worried...



Yep.  at that price it's time to move to something else or build our own
system.



Declude, come bac

RE: [Declude.JunkMail] Declude 3.0 / 4.0

[David Barker]

>> So henceforth, 3 will be license/SA and 4 will be subscription. 

No as customers prior to 8 Feb 06 can use version 4 if they have Declude EVA
PRO, Junkmail PRO and Hijack licensed and remain with the purchase of
service agreements.

>> Will there be concurrent development for both versions or will future
filtering enhancements be limited to version 4, requiring the subscription
model to take advantage of them?

There will be concurrent development for both versions. I am struggling to
make this clearer than I already have so I will try again:

A.  Declude customers prior to 8 Feb 06 do NOT have to move to the
Subscription but CAN remain with the Service Agreement.

B.  If you have have EVA PRO, Junkmail PRO and Hijack licensed you CAN run
either version 3.0 or 4.0

C. There is NO major difference in functionality except that 4.0 runs as a
single product with Declude EVA PRO, Junkmail PRO and Hijack. 
   where as Version 3.0 still supports 3 individual products. 

D. Declude customers prior to 8 Feb 06 do NOT have to move to the
subscription model.

If you need further clarification I would suggest calling us and we will be
happy to answer all your questions.

PS. You will have to wait till Monday 'cause it's 7:30 am on a Sunday
morning and I am still not taking calls at home :)

David B
www.declude.com



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan
Sent: Sunday, February 12, 2006 1:24 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude 3.0 / 4.0

Thanks for the info David.  The answer can wait, but there is one point I
would like clarified:


> If you do NOT have JM Pro & EVA PRO & Hijack and choose not to upgrade 
> ...
> then you remain with version 3 as version 4 is licensed for JM Pro & 
> EVA PRO & Hijack as I have explained in point 5.
>
> 5. With regards to Version 3.0 and 4.0 there is NO major difference in 
> functionality except that 4.0 runs as a single product with Declude 
> EVA PRO, Junkmail PRO and Hijack. Where as Version 3.0 still supports 
> 3 individual products.




Dan
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.Virus] [Declude.JunkMail] Declude 3.0 / 4.0

[David Barker]

Let me quote myself on point 5.

"EXCEPT that 4.0 runs as a single product with Declude EVA PRO, Junkmail PRO
and Hijack. Where as Version 3.0 still supports 3 individual products."

As to NO major differences, there are NO major differences in functionality
but rather minor differences which have to do with integration into
SmarterMail 3.0 which makes it a little easier for New Customers which I
will explain in greater detail with the notes I promised in point 7, but
again these differences do NOT effect existing customers.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Don Brown
Sent: Sunday, February 12, 2006 11:23 AM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
Subject: Re: [Declude.Virus] [Declude.JunkMail] Declude 3.0 / 4.0

Saturday, February 11, 2006, 9:47:07 AM, David Barker <[EMAIL PROTECTED]>
wrote:
DB> [Snip]

DB> 5. With regards to Version 3.0 and 4.0 there is NO major difference 
DB> in functionality except that 4.0 runs as a single product with 
DB> Declude EVA PRO, Junkmail PRO and Hijack. Where as Version 3.0 still 
DB> supports 3 individual products.

DB> [Snip]

DB> 7. I am pulling together some additional release notes on a 
DB> comparison between version version 3.0 and 4.0 which I hope to have 
DB> available next week.

DB> David B
DB> www.declude.com
DB> [Snip]

Items 5 & 7 are contradictory, to the extent that no comparison, as promised
in 7, would be needed, if the only difference was, as quoted in 5.



Don Brown - Dallas, Texas USA Internet Concepts, Inc.
[EMAIL PROTECTED]   http://www.inetconcepts.net
(972) 788-2364Fax: (972) 788-5049


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] SPAMHEADERS question - more confusion

[David Barker]

You can add the following to your global.cfg file under your headers
section:

XINHEADER   X-Declude-Code: %HEADERCODE%

This will produce a code and you can check it on this web page which will
explain to you what problem(s) exist with headers that cause E-mails to fail
the BADHEADERS or SPAMHEADERS tests in Declude JunkMail. 

http://www.declude.com/tools/header.php

David B
www.declude.com


From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Orin Wells
Sent: Friday, February 24, 2006 3:05 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] SPAMHEADERS question - more confusion


Thanks Matt.  I don't spend as much time as some of you folks have spent on
both iMail and Declude so there is more than a little bit I still have to
learn.

I misread your first response and got off on the wrong track by thinking you
had said the message-id header WAS inserted by the mail client.  In
re-reading you clearly said it was done by iMail.  OK, I know what to do
now.

At 10:47 PM 2/23/2006, Matt wrote:


Outlook does not add a Message-ID header.  The difference between
these two messages is that the first is one that is using your server as
it's SMTP server and you are scanning the message as it came directly from
the E-mail client, while the second example is one that passed through
another server before coming to yours.  IMail, like most every E-mail
server, adds a Message-ID header when one isn't already there.  Declude
detects Message-ID headers inserted by your own IMail box (Message-Id:
<[EMAIL PROTECTED]> in the first example), and treats the
message as if it didn't have one since it didn't actually have one when it
was received, and this is what triggers SPAMHEADERS for this message.  The
second example had a Message-ID header before it hit your server.  That
header was inserted by Charter's server.

There is a lesser known solution to this that you definitely should
add if you are going to stay on IMail 7.07.  You can add "LOOSENSPAMHEADERS
ON" to your Global.cfg to disable the Message-ID test in SPAMHEADERS.  I use
this even though I don't have the same issue because I get a lot more false
positives on SPAMHEADERS when it checks for the Message-ID.  If you use this
alternative switch, you will still get other hits such as CMDSPACE and
BADHEADERS on some of the same E-mail clients.  It appears that you aren't
using CMDSPACE though because that test would hit every directly connecting
Outlook client unless it was whitelisted.  CMDSPACE is a great test,
especially in combination with other tests that target zombie spam (XBL/CBL,
SpamCop, open relay tests, and to some extent Sniffer).

The best solution is to upgrade to IMail 8.x or higher and add a
setting to your Global.cfg for "WHITELIST AUTH".  This will whitelist all
authenticated E-mail, which I assume included the first example that you
provided.  This also saves processing power since WHITELIST AUTH disables
most tests in JunkMail.

Matt





Orin Wells wrote: 


Clearly I am missing something here.  I am still wrestling
with the SPAMHEADERS issue but with a different sender.  This time the
sender is using Microsoft Office Outlook.  It appears messages coming from
this sender do not have the Message-ID header.  But when I look at other
messages sent by others using the same build of this application sometimes
they DO have the Message-ID.  What is happening here?  Is there anyway that
this sender can "fix" this problem?

Here is a header set from the chap who is "failing"

X-Persona: 
Received: from steve2 [216.254.57.135] by consejo-wa.org
with ESMTP
  (SMTPD32-7.07) id A9111EEB010C; Thu, 23 Feb 2006 14:37:05
-0800
Reply-To: <[EMAIL PROTECTED]>
 
From: "Steve Chupik" <[EMAIL PROTECTED]>
 
To: "'Orin Wells'" <[EMAIL PROTECTED]>
 
Subject: RE: e-mail
Date: Thu, 23 Feb 2006 14:36:49 -0800
Organization: Consejo Counseling
MIME-Version: 1.0
Content-Type: multipart/alternative;

boundary="=_NextPart_000_03BE_01C63886.9616AF40"
X-Mailer: Microsoft Office Outlook, Build 11.0.5510
Thread-Index: AcYzhon3oAG4QKXrR/aQjfBQ4RaA6gFQvMdQ
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506
In-Reply-To: <[EMAIL PROTECTED]>
 
Message-Id: <[EMAIL PROTECTED]>
X-RBL-Warning: SPAMHEADERS: This E-mail has headers
consistent with spam [421e].
X-Declude-Sender: [EMAIL PROTECTED] [216.254.57.135]
X-Note: This E-mail was scan

RE: [Declude.JunkMail] SmarterMail 3 / Declude 4

[David Barker]

 >>What impact does "unmark as spam" have, in relation to Declude?

This should add the sender to SM trusted sender file which Declude checks
against for whitelisting.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jay Sudowski -
Handy Networks LLC
Sent: Monday, March 06, 2006 4:06 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail 3 / Declude 4

So in your Declude configuration, you have everything set to WARN only?
And then in SmarterMail, you decide what actions to take?  What impact does
"unmark as spam" have, in relation to Declude?  

I get the feeling that this could be very powerful, in terms of dealing with
false positives, etc ... assuming that it works as it should.
Using SmarterMail based rules, it'd be possible to move spam to the
customer's junk e-mail folder and then also use SmarterMail's auto-purge
settings to keep the size of the junkmail folder under control.   We can
also give our customers more power to whitelist through SmarterMail trusted
senders.

We are planning on upgrading later this week and I want to do it right.
I just hope that the transition between essentially what was Declude setup
for iMail originally, to Declude integrated with SmarterMail will be smooth.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Robertson
Sent: Monday, March 06, 2006 2:14 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail 3 / Declude 4

Declude's integration with SmarterMail's spam system is something we had
been waiting on for over a year.  Declude passes the final weight back to
SM, and SM decides what to do with the message.  This means you can set
different actions for each user or domain based on whatever weight is best
for them.  Some admins might take this for granted, but using SM 2.x with
Declude always felt like you were patching together content filters to try
to trick SM into reading Declude's recommendation.

Basically everything built into SM to handle spam now works, including:
domain and user level "trusted senders"; whitelisting from address books and
"Unmark as Spam"; and whitelisting thru SM only applies to the user/domain
it was set for (whereas whitelisting thru Declude would whitelist the
message for every recipient).

In addition, the SM spam setting for message forwarding (i.e. - "Do not
forward spam level medium and above") actually works.  Very useful.

In short, the SM 3/Declude 4 combo is an incredible improvement over the
previous version.  Declude just assigns the weight -- SM handles delivering,
modifying or deleting the message.

I can't comment on SMTP blocking.  We use gateways to filter all incoming
mail, so we don't use that feature.  I'd be interested to hear whether it
actually does use Declude to block at the SMTP level.

Hope that helps,
Jeff

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
> [EMAIL PROTECTED] On Behalf Of Jay Sudowski - Handy Networks LLC
> Sent: Monday, March 06, 2006 9:51 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] SmarterMail 3 / Declude 4
> 
> I'm wondering if anyone is running SmarterMail 3 / Declude 4 and can 
> explain the greater integration that SmarterMail now has with Declude,
> and how you've been dealing with that so far.   Most intriguing is
this
> potential feature from SmarterMail manual:
> 
> Declude
> Declude integration allows you to use Declude products in conjunction 
> with the SmarterMail weighting system. Configuration of Declude is
done
> through the Declude product, and all you need to do in SmarterMail is 
> enable the spam check.
> 
> -- AND --
> 
> SMTP Blocking
> This tab allows you to set up extra spam checks that block emails at 
> delivery if a certain amount of spam checks fail.
> 
> Enable SMTP Spam Blocking - Check this box to turn on this feature.
> 
> SMTP Block Threshold - An email must score this value or higher in
order
> to be blocked. The score is established by the settings on the Spam 
> Checks tab.
> 
> Does this mean that it's now possible to reject messages using Declude 
> at the SMTP session level?
> 
> Thanks!
> -
> Jay Sudowski // Handy Networks LLC
> Director of Technical Operations
> Providing Shared, Reseller, Semi Managed and Fully Managed Windows
2003
> Hosting Solutions
> Tel: 877-70 HANDY x882 |  Fax: 888-300-2FAX www.handynetworks.com
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To 

RE: [Declude.JunkMail] SmarterMail 3 / Declude 4

[David Barker]

The initial release of SM 3.x they changed the format of their domains file
so everything that Declude checked was considered outgoing. This has since
been resolved with the latest release in 4.0.9 and 3.0.6 in Declude and 3.x
of SM.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Baranowski
Sent: Monday, March 06, 2006 4:39 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail 3 / Declude 4


FYI, David informed me that the SM3/Declude 4.x will us the global.cfg for
actions instead of the $default$.junkmail file. This was more then a week
ago, so I don't know if this has been changed yet. (SM3 issue)

Rick

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jay Sudowski -
Handy Networks LLC
Sent: Monday, March 06, 2006 2:06 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail 3 / Declude 4

So in your Declude configuration, you have everything set to WARN only?
And then in SmarterMail, you decide what actions to take?  What impact does
"unmark as spam" have, in relation to Declude?  

I get the feeling that this could be very powerful, in terms of dealing with
false positives, etc ... assuming that it works as it should.
Using SmarterMail based rules, it'd be possible to move spam to the
customer's junk e-mail folder and then also use SmarterMail's auto-purge
settings to keep the size of the junkmail folder under control.   We can
also give our customers more power to whitelist through SmarterMail trusted
senders.

We are planning on upgrading later this week and I want to do it right.
I just hope that the transition between essentially what was Declude setup
for iMail originally, to Declude integrated with SmarterMail will be smooth.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Robertson
Sent: Monday, March 06, 2006 2:14 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] SmarterMail 3 / Declude 4

Declude's integration with SmarterMail's spam system is something we had
been waiting on for over a year.  Declude passes the final weight back to
SM, and SM decides what to do with the message.  This means you can set
different actions for each user or domain based on whatever weight is best
for them.  Some admins might take this for granted, but using SM 2.x with
Declude always felt like you were patching together content filters to try
to trick SM into reading Declude's recommendation.

Basically everything built into SM to handle spam now works, including:
domain and user level "trusted senders"; whitelisting from address books and
"Unmark as Spam"; and whitelisting thru SM only applies to the user/domain
it was set for (whereas whitelisting thru Declude would whitelist the
message for every recipient).

In addition, the SM spam setting for message forwarding (i.e. - "Do not
forward spam level medium and above") actually works.  Very useful.

In short, the SM 3/Declude 4 combo is an incredible improvement over the
previous version.  Declude just assigns the weight -- SM handles delivering,
modifying or deleting the message.

I can't comment on SMTP blocking.  We use gateways to filter all incoming
mail, so we don't use that feature.  I'd be interested to hear whether it
actually does use Declude to block at the SMTP level.

Hope that helps,
Jeff

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
> [EMAIL PROTECTED] On Behalf Of Jay Sudowski - Handy Networks LLC
> Sent: Monday, March 06, 2006 9:51 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] SmarterMail 3 / Declude 4
> 
> I'm wondering if anyone is running SmarterMail 3 / Declude 4 and can 
> explain the greater integration that SmarterMail now has with Declude,
> and how you've been dealing with that so far.   Most intriguing is
this
> potential feature from SmarterMail manual:
> 
> Declude
> Declude integration allows you to use Declude products in conjunction 
> with the SmarterMail weighting system. Configuration of Declude is
done
> through the Declude product, and all you need to do in SmarterMail is 
> enable the spam check.
> 
> -- AND --
> 
> SMTP Blocking
> This tab allows you to set up extra spam checks that block emails at 
> delivery if a certain amount of spam checks fail.
> 
> Enable SMTP Spam Blocking - Check this box to turn on this feature.
> 
> SMTP Block Threshold - An email must score this value or higher in
order
> to be blocked. The score is established by the settings on the Spam 
> Checks tab.
> 
> Does this mean that it's now possible to reject messages using Declude 
> at the SMTP session level?
> 
> Thanks!
> -
> Jay Sudowski // Handy Networks LLC
> Director of Technical Operations
> Providing Shared, Reseller, Semi Managed and Fully Managed Windows
2003
> Hosting Solutions
> Tel: 877-70 HANDY x882 |  Fax: 888-300-2FAX www.handynetworks.com
> 

[Declude.JunkMail] Declude Release

[David Barker]

Declude Release 3.0.6.4 and 4.0.9.4

HI  FIX Corrected logging issue and locked file problem trying to
move .hdr files in SmarterMail

SM  ADD Support for MAILBOX action in Smartermail

CON FIX Confirm for Imail now working correctly

David B
www.declude.com

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude Release

[David Barker]

Thanks. Fixed it. Please check now.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: Monday, March 13, 2006 9:51 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude Release

-David,

Can you check the download link for the proc only download for 3.0.6.4?
I received a page not found error.

- Original Message -
From: "David Barker" <[EMAIL PROTECTED]>
To: ; 
Sent: Monday, March 13, 2006 8:06 AM
Subject: [Declude.JunkMail] Declude Release


> Declude Release 3.0.6.4 and 4.0.9.4
> 
> HI  FIX  Corrected logging issue and locked file problem trying to
> move .hdr files in SmarterMail
> 
> SM ADD Support for MAILBOX action in Smartermail
> 
> CON FIX Confirm for Imail now working correctly
> 
> David B
> www.declude.com
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Whitelisted address getting trapped anyway

[David Barker]

Harry,
 
This is the actual sender of the email
 
X-Declude-Sender: [EMAIL PROTECTED]
  [63.251.135.75]
 
Not

From: Ken Weinberg <[EMAIL PROTECTED]>

David B
www.declude.com




From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand
Sent: Saturday, March 18, 2006 11:18 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Whitelisted address getting trapped anyway


have an addres that I have whitelisted
 
WHITELIST FROM @.com in global.cfg
 
Yet somehow it got marked as spam
 
There was a match in a filter file
 
How is this possible?
 
Should whitelisting not take precedence?
 
See headers below
 
Received: from mailface.roving.com [63.251.135.75] by intown.net with ESMTP
  (SMTPD-8.22) id A17A068C; Fri, 17 Mar 2006 14:43:54 -0500
Received: from ws06 (unknown [10.200.200.61])
 by mailface.roving.com (Postfix) with ESMTP id 8224448C003
 for <[EMAIL PROTECTED]>; Fri, 17 Mar 2006 14:42:37 -0500 (EST)
Message-ID: <[EMAIL PROTECTED]>
Date: Fri, 17 Mar 2006 14:43:53 -0500 (EST)
From: Ken Weinberg <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: We Need Your Input
MIME-Version: 1.0
Content-Type: multipart/alternative; 
 boundary="=_Part_13064663_1921543487.1142624633764"
X-Roving-Queued: 20060317 02:43:53.764
X-Mailer: Roving Constant Contact 0 (http://www.constantcontact.com)
X-Return-Path-Hint: [EMAIL PROTECTED]
X-Roving-ID: 1101247029557
X-Lumos-SenderID: 1011230829116
X-Roving-CampaignId: 1101247029557
X-Roving-StreamId: 0
X-Declude-Sender: [EMAIL PROTECTED]
[63.251.135.75]
X-Declude-Spoolname: D11790199df6a.smd
X-Note: Total spam weight of this E-mail is 22.
X-Note: Spam Tests Failed: FIVETEN-BULK [3], MYFILTER [19], WEIGHT10 [10],
WEIGHT11 [11], WEIGHT12 [12], WEIGHT15 [15], WEIGHT19 [19]
X-Note: REMOTEIP: 63.251.135.75
X-Note: REVDNS: mailface.roving.com
X-Note: FROM: [EMAIL PROTECTED]
X-Note: TO: 
X-Spam-Tests-Failed: FIVETEN-BULK, MYFILTER, WEIGHT10, WEIGHT11, WEIGHT12,
WEIGHT15, WEIGHT19 [22]
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 428964605
X-IMail-ThreadID: 11790199df6a
 
 
 
Harry Vanderzand 
inTown Internet & Computer Services 
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222
 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail]

[David Barker]

IGNORE does not mean the points would not be applied. The points are always
applied for all emails. IGNORE means do not take any action regarding that
specific test.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise
Sent: Thursday, March 30, 2006 11:20 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]

Local. This server runs 4 domains on Smartermail, about 350 users. It seems
that the points are being applied, but that the header is just not added to
the email. If IGNORE was really the action taken, the points wouldn't be
applied, correct? 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, March 30, 2006 11:08 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]

Ken, 

Is this for a gatewayed domain or a domain that is local to the server? 

Darrell
 ---
Check out http://www.invariantsystems.com for utilities for Declude, Imail,
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers. 


Ken Weise writes: 

> Not sure what I did wrong here. I split the Sniffer tests into 
> individual tests, gave them points in the global.cfg as such:
> 
> SNIFFER-INSURANCE   external  048
> "E:\SmarterMail\Declude\Sniffer\lln6rhd4.exe i7wixz7dzzlldqx6"9
0 
> 
> Added the Warn line to $default$.junkmail as: 
> 
> SNIFFER-INSURANCE WARN 
> 
> And yet, in the log file I get the following: 
> 
> Msg failed SNIFFER-INSURANCE (Message failed SNIFFER-INSURANCE: 48.).
> Action=IGNORE. 
> 
> 
> Why is the Action coming up as IGNORE? It should be warn, as far as I 
> can see. I have many of the sniffer tests, and a new filter test doing 
> the same thing. I have stopped and started the decludeproc service, 
> and still the same result. Any tips? Anything stupidly obvious?
> Running - Declude Version
> 3.0.6.4 for SmarterMail. Thanks!

---
[This E-mail scanned for viruses by Declude EVA]


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail]

[David Barker]

Post in example please.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise
Sent: Thursday, March 30, 2006 1:53 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]

Ok, so the remaining question is, why do some tests say WARN in the logs,
while others say IGNORE, when they are all set to WARN in the
$default$.junkmail?

P.s. Darin, correct about the license code, big slip on my part. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, March 30, 2006 12:24 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]

IGNORE does not mean the points would not be applied. The points are always
applied for all emails. IGNORE means do not take any action regarding that
specific test.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ken Weise
Sent: Thursday, March 30, 2006 11:20 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]

Local. This server runs 4 domains on Smartermail, about 350 users. It seems
that the points are being applied, but that the header is just not added to
the email. If IGNORE was really the action taken, the points wouldn't be
applied, correct? 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Thursday, March 30, 2006 11:08 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]

Ken, 

Is this for a gatewayed domain or a domain that is local to the server? 

Darrell
 ---
Check out http://www.invariantsystems.com for utilities for Declude, Imail,
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers. 


Ken Weise writes: 

> Not sure what I did wrong here. I split the Sniffer tests into 
> individual tests, gave them points in the global.cfg as such:
> 
> SNIFFER-INSURANCE   external  048

---
[This E-mail scanned for viruses by Declude EVA]


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] HELP - outlook meeting invitations arell not coming through properly. Please See below - Iam using imail 8.15 - declude 2.0.6

[David Barker]

Go into your virus.cfg and comment out the FOOTER 
lines.
 
David B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Howard Smith 
(N.O.R.A.D.)Sent: Friday, March 31, 2006 5:09 PMTo: 
Declude.JunkMail@declude.comCc: [EMAIL PROTECTED]Subject: 
[Declude.JunkMail] HELP - outlook meeting invitations arell not coming through 
properly. Please See below - Iam using imail 8.15 - declude 
2.0.6


I have clients that 
are using outlook appointment scheduling – but the receipts get the 
following  email error - -
Original 
Message-
From: Bruce Kusens [mailto:[EMAIL PROTECTED]]
Sent: Thursday, March 
30, 2006 9:33 AM
To: 
[EMAIL PROTECTED]; 'Therese Adlhoch Smith'; 
[EMAIL PROTECTED]
Subject: GoToMeeting 
Invitation - PDC CD call
Received: from 
imf19aec.mail.bellsouth.net [205.152.59.67] by norad06.norad.com with 
ESMTP
(SMTPD32-8.15) id 
A66ABC8D0026; Thu, 30 Mar 2006 12:33:30 -0500
Received: from 
ibm60aec.bellsouth.net ([65.8.197.116])
by 
imf19aec.mail.bellsouth.net with ESMTP
id
<[EMAIL PROTECTED]
>;
Thu, 30 Mar 2006 
12:33:30 -0500
Received: from BedTV 
([65.8.197.116]) by ibm60aec.bellsouth.net with 
ESMTP
id 
<[EMAIL PROTECTED]>;
Thu, 30 Mar 2006 
12:33:30 -0500
Reply-To: 
<[EMAIL PROTECTED]>
From: "Bruce Kusens" 
<[EMAIL PROTECTED]>
To: 
<[EMAIL PROTECTED]>,
"'Therese Adlhoch 
Smith'" <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]>
Subject: GoToMeeting 
Invitation - PDC CD call
Date: Thu, 30 Mar 2006 
12:33:19 -0500
Organization: Atrus 
Inc
MIME-Version: 
1.0
Content-Type: 
text/calendar; method=REQUEST;
charset="UTF-8"
Content-Transfer-Encoding: 
7bit
X-Mailer: Microsoft 
Office Outlook, Build 11.0.6353
X-MimeOLE: Produced By 
Microsoft MimeOLE V6.00.2900.2180
thread-index: 
AcZUIAkjq1y9Oj2zT7WmqZng/uqKww==
Message-Id: 
<[EMAIL PROTECTED]>
X-Declude-Sender: 
[EMAIL PROTECTED] [205.152.59.67]
X-Note: This E-mail 
was scanned by (www.SecureTrek.com) for Spam and 
Virus.
X-Spam-Tests-Failed: 
Whitelisted [0]
X-Note: This E-mail 
was sent from imf19aec.mail.bellsouth.net 
([205.152.59.67]).
X-RCPT-TO: 
<[EMAIL PROTECTED]>
Status: 
U
X-UIDL: 
432016717
BEGIN:VCALENDAR
PRODID:-//Microsoft 
Corporation//Outlook 11.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST BEGIN:VEVENT 
ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:[EMAIL PROTECTED]
ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:[EMAIL PROTECTED]
ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:[EMAIL PROTECTED]
ORGANIZER:MAILTO:[EMAIL PROTECTED]
DTSTART:20060330T18Z
DTEND:20060330T19Z
TRANSP:OPAQUE
SEQUENCE:0
UID:04008200E00074C5B7101A82E008A0A14A20F653C601
100
01E062A20E3BE2D4881466EED97BFF648
DTSTAMP:20060330T173319Z
DESCRIPTION:When: 
Thursday\, March 30\, 2006 1:00 PM-2:00 PM 
(GMT-05:00)
Eastern Time (US & 
Canada).\n\n*~*~*~*~*~*~*~*~*~*\n\nPlease join my
meeting at\n https://www.gotomeeting.com/join/874812145\nConference 
Call:
Dial (319) 256-0210\, 
access code 874-812-145\nMeeting ID:
874-812-145\n\nGoToMeeting(TM) 
\nOnline Meetings Made Easy\n SUMMARY:GoToMeeting Invitation - PDC CD 
call
PRIORITY:5
X-MICROSOFT-CDO-IMPORTANCE:1
CLASS:PUBLIC
BEGIN:VALARM
TRIGGER:-PT15M
ACTION:DISPLAY
DESCRIPTION:Reminder
END:VALARM
END:VEVENT
END:VCALENDAR
 
 
---
[This E-mail scanned 
for viruses by www.SecureTrek.com, a 
N.O.R.A.D.
Company]
 
 
---
[This E-mail scanned 
for viruses by www.SecureTrek.com, a N.O.R.A.D. 
Company]
 
 
 
 
 
Howard 
Smith
N.O.R.A.D. 
Inc.
P.O. 
Box 
680116
Miami, Florida 33168  

www.norad.com 
[EMAIL PROTECTED]
Office - (305) NETWORK 
(638-9675)
Sales - (786) 
206-0045
Fax 1 - (305) 
359-5144
 

Confidentiality Notice: 
This email message, including any Attachments, is for the sole use of the 
intended recipient(s) and may contain confidential and privileged information. 
Any unauthorized review, use, disclosure or distribution is prohibited. If you 
are not the intended recipient, please contact  [EMAIL PROTECTED] by email 
and destroy all copies of the original message. 

 
 

RE: [Declude.JunkMail] HELP - outlook meeting invitations arell not coming through properly. Please See below - Iam using imail 8.15 - declude 2.0.6

[David Barker]

Best to do both if you have the 
declude.cfg
 
David B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Scott 
FisherSent: Friday, March 31, 2006 5:28 PMTo: 
Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] HELP - 
outlook meeting invitations arell not coming through properly. Please See below 
- Iam using imail 8.15 - declude 2.0.6

There is a switch in declude.cfg for Declude 
3.0.5.21 and up that may help:
 
# Some customers had issues related to Outlook 
meeting requests appearing as text only. # The default for this directive is 
OFF.  INVITEFIX   ON 

  - Original Message - 
  From: 
  Howard Smith 
  (N.O.R.A.D.) 
  To: Declude.JunkMail@declude.com 
  
  Cc: [EMAIL PROTECTED] 
  Sent: Friday, March 31, 2006 4:08 
PM
  Subject: [Declude.JunkMail] HELP - 
  outlook meeting invitations arell not coming through properly. Please See 
  below - Iam using imail 8.15 - declude 2.0.6
  
  
  I have clients that 
  are using outlook appointment scheduling – but the receipts get the 
  following  email error - -
  Original 
  Message-
  From: Bruce Kusens 
  [mailto:[EMAIL PROTECTED]]
  Sent: Thursday, 
  March 30, 2006 9:33 AM
  To: [EMAIL PROTECTED]; 'Therese Adlhoch 
  Smith'; [EMAIL PROTECTED]
  Subject: GoToMeeting 
  Invitation - PDC CD call
  Received: from 
  imf19aec.mail.bellsouth.net [205.152.59.67] by norad06.norad.com with 
  ESMTP
  (SMTPD32-8.15) id 
  A66ABC8D0026; Thu, 30 Mar 2006 12:33:30 -0500
  Received: from 
  ibm60aec.bellsouth.net ([65.8.197.116])
  by 
  imf19aec.mail.bellsouth.net with ESMTP
  id
  <[EMAIL PROTECTED]
  >;
  Thu, 30 Mar 2006 
  12:33:30 -0500
  Received: from BedTV 
  ([65.8.197.116]) by ibm60aec.bellsouth.net with 
  ESMTP
  id 
  <[EMAIL PROTECTED]>;
  Thu, 30 Mar 2006 
  12:33:30 -0500
  Reply-To: 
  <[EMAIL PROTECTED]>
  From: "Bruce Kusens" 
  <[EMAIL PROTECTED]>
  To: 
  <[EMAIL PROTECTED]>,
  "'Therese Adlhoch 
  Smith'" <[EMAIL PROTECTED]>,
  <[EMAIL PROTECTED]>
  Subject: GoToMeeting 
  Invitation - PDC CD call
  Date: Thu, 30 Mar 
  2006 12:33:19 -0500
  Organization: Atrus 
  Inc
  MIME-Version: 
  1.0
  Content-Type: 
  text/calendar; method=REQUEST;
  charset="UTF-8"
  Content-Transfer-Encoding: 
  7bit
  X-Mailer: Microsoft 
  Office Outlook, Build 11.0.6353
  X-MimeOLE: Produced 
  By Microsoft MimeOLE V6.00.2900.2180
  thread-index: 
  AcZUIAkjq1y9Oj2zT7WmqZng/uqKww==
  Message-Id: 
  <[EMAIL PROTECTED]>
  X-Declude-Sender: 
  [EMAIL PROTECTED] [205.152.59.67]
  X-Note: This E-mail 
  was scanned by (www.SecureTrek.com) for Spam and 
  Virus.
  X-Spam-Tests-Failed: 
  Whitelisted [0]
  X-Note: This E-mail 
  was sent from imf19aec.mail.bellsouth.net 
  ([205.152.59.67]).
  X-RCPT-TO: 
  <[EMAIL PROTECTED]>
  Status: 
  U
  X-UIDL: 
  432016717
  BEGIN:VCALENDAR
  PRODID:-//Microsoft 
  Corporation//Outlook 11.0 MIMEDIR//EN VERSION:2.0 METHOD:REQUEST BEGIN:VEVENT 
  ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:[EMAIL PROTECTED]
  ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:[EMAIL PROTECTED]
  ATTENDEE;ROLE=REQ-PARTICIPANT;RSVP=TRUE:MAILTO:[EMAIL PROTECTED]
  ORGANIZER:MAILTO:[EMAIL PROTECTED]
  DTSTART:20060330T18Z
  DTEND:20060330T19Z
  TRANSP:OPAQUE
  SEQUENCE:0
  UID:04008200E00074C5B7101A82E008A0A14A20F653C601
  100
  01E062A20E3BE2D4881466EED97BFF648
  DTSTAMP:20060330T173319Z
  DESCRIPTION:When: 
  Thursday\, March 30\, 2006 1:00 PM-2:00 PM 
  (GMT-05:00)
  Eastern Time (US 
  & Canada).\n\n*~*~*~*~*~*~*~*~*~*\n\nPlease join 
  my
  meeting at\n https://www.gotomeeting.com/join/874812145\nConference 
  Call:
  Dial (319) 
  256-0210\, access code 874-812-145\nMeeting ID:
  874-812-145\n\nGoToMeeting(TM) 
  \nOnline Meetings Made Easy\n SUMMARY:GoToMeeting Invitation - PDC CD 
  call
  PRIORITY:5
  X-MICROSOFT-CDO-IMPORTANCE:1
  CLASS:PUBLIC
  BEGIN:VALARM
  TRIGGER:-PT15M
  ACTION:DISPLAY
  DESCRIPTION:Reminder
  END:VALARM
  END:VEVENT
  END:VCALENDAR
   
   
  ---
  [This E-mail scanned 
  for viruses by www.SecureTrek.com, a 
  N.O.R.A.D.
  Company]
   
   
  ---
  [This E-mail scanned 
  for viruses by www.SecureTrek.com, a N.O.R.A.D. 
  Company]
   
   
   
   
   
  Howard 
  Smith
  N.O.R.A.D. 
  Inc.
  P.O. 
  Box 
  680116
  Miami, 
  Florida 33168  
  
  www.norad.com 
  [EMAIL PROTECTED]
  Office - (305) NETWORK 
  (638-9675)
  Sales - (786) 
  206-0045
  Fax 1 - (305) 
  359-5144
   
  
  Confidentiality 
  Notice: This email message, including any Attachments, is for the sole use of 
  the intended recipient(s) and may contain confidential and privileged 
  information. Any unauthorized review, use, disclosure or distribution is 
  prohibited. If you are not the intended recipient, please contact  
  [EMAIL PROTECTED] by email and destroy all copies of the original 
  message. 
  
   
   

RE: [Declude.JunkMail] SPAMHEADERS question - more confusion

[David Barker]

Hi Dan,

I am not sure that there is a list of codes. I think the codes are generated
and then decoded by the headers page. It is a tool that Scott Perry wrote so
I am not that familiar with it I would have to look into it further.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan
Sent: Tuesday, April 04, 2006 8:40 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] SPAMHEADERS question - more confusion

David,

Pardon the delayed reply, but I'm curious, how many possible codes are there
and is there a comprehensive inventory or list anywhere?

Thanks,
Dan



On Feb 24, 2006, at 5:56, David Barker wrote:

> You can add the following to your global.cfg file under your headers
> section:
>
> XINHEADER X-Declude-Code: %HEADERCODE%
>
> This will produce a code and you can check it on this web page which 
> will explain to you what problem(s) exist with headers that cause E- 
> mails to fail the BADHEADERS or SPAMHEADERS tests in Declude JunkMail.
>
> http://www.declude.com/tools/header.php
>
> David B
> www.declude.com
> 
>
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Orin Wells
> Sent: Friday, February 24, 2006 3:05 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] SPAMHEADERS question - more confusion
>
>
> Thanks Matt.  I don't spend as much time as some of you folks have 
> spent on both iMail and Declude so there is more than a little bit I 
> still have to learn.
>
> I misread your first response and got off on the wrong track by 
> thinking you had said the message-id header WAS inserted by the mail 
> client.  In re-reading you clearly said it was done by iMail.  OK, I 
> know what to do now.
>
> At 10:47 PM 2/23/2006, Matt wrote:
>
>
>   Outlook does not add a Message-ID header.  The difference between 
> these two messages is that the first is one that is using your server 
> as it's SMTP server and you are scanning the message as it came 
> directly from the E-mail client, while the second example is one that 
> passed through another server before coming to yours.  IMail, like 
> most every E-mail
> server, adds a Message-ID header when one isn't already there.   
> Declude
> detects Message-ID headers inserted by your own IMail box (Message-Id:
> <[EMAIL PROTECTED]> in the first example), and treats the 
> message as if it didn't have one since it didn't actually have one 
> when it was received, and this is what triggers SPAMHEADERS for this 
> message.  The
> second example had a Message-ID header before it hit your server.   
> That
> header was inserted by Charter's server.
>   
>   There is a lesser known solution to this that you definitely should 
> add if you are going to stay on IMail 7.07.  You can add 
> "LOOSENSPAMHEADERS ON" to your Global.cfg to disable the Message-ID 
> test in SPAMHEADERS.  I use this even though I don't have the same 
> issue because I get a lot more false positives on SPAMHEADERS when it 
> checks for the Message-ID.  If you use this alternative switch, you 
> will still get other hits such as CMDSPACE and BADHEADERS on some of 
> the same E-mail clients.  It appears that you aren't using CMDSPACE 
> though because that test would hit every directly connecting Outlook 
> client unless it was whitelisted.  CMDSPACE is a great test, 
> especially in combination with other tests that target zombie spam 
> (XBL/CBL, SpamCop, open relay tests, and to some extent Sniffer).
>   
>   The best solution is to upgrade to IMail 8.x or higher and add a 
> setting to your Global.cfg for "WHITELIST AUTH".  This will whitelist 
> all authenticated E-mail, which I assume included the first example 
> that you provided.  This also saves processing power since WHITELIST 
> AUTH disables most tests in JunkMail.
>   
>   Matt
>   
>   
>   
>   
>   
>   Orin Wells wrote:
>   
>
>   Clearly I am missing something here.  I am still wrestling
> with the SPAMHEADERS issue but with a different sender.  This time the
> sender is using Microsoft Office Outlook.  It appears messages  
> coming from
> this sender do not have the Message-ID header.  But when I look at  
> other
> messages sent by others using the same build of this application  
> sometimes
> they DO have the Message-ID.  What is happening here?  Is there  
> anyway that
> this sender can "fix" this problem?
>   
>   Here is a header set from the chap who is "failing"
>   
>   X-

RE: [Declude.JunkMail] This doesnt add up

[David Barker]

To reduce false positives NOLEGITCONTENT and IPNOTINMX are hidden tests,
check your global.cfg you should see the -5

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Todd
Sent: Wednesday, April 05, 2006 12:22 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] This doesnt add up


A lot of spam has been getting through lately and at first I was thinking my
Declude needed some tweaking.  I am seeing some funny stuff though.  I find
emails where emails contain items that should have triggered filters but did
not.  I am on IMail 8.15 and Declude 2.06.

Here is a header of an email where the numbers dont add to the score.  It
should have had a score of 5 + 15 + 15 + 30 = 65 but instead shows 30

My global.cfg has the following entries for the tests that were triggered

SUBJECTSPACES7   subjectspaces 7   x 5 0
SUBJECTSPACES10 subjectspaces 10 x 15 0
SPFPASSspf pass   x 0 0


X-RBL-Warning: SUBJECTSPACES7: Subject with at least 7 spaces found.
X-RBL-Warning: SUBJECTSPACES10: Subject with at least 10 spaces found.
X-RBL-Warning: SPFPASS: SPF returned PASS for this E-mail.
X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 15.
X-RBL-Warning: GIBBERISH: Message failed GIBBERISH test (line 463, weight
30)
X-Declude-Sender: [EMAIL PROTECTED] [69.89.85.90]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: SUBJECTSPACES7, SUBJECTSPACES10, SPFPASS, SPAMCHK,
GIBBERISH, CATCHALLMAILS [30]
X-Note: Total spam weight of this E-mail is 30 .
X-Country-Chain: UNITED STATES->destination
X-Note: This E-mail was sent from eveningtrees.com ([69.89.85.90]).



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] This doesnt add up

[David Barker]

Todd,

I do not see them in the headers ?

X-Spam-Tests-Failed: SUBJECTSPACES7, SUBJECTSPACES10, SPFPASS, SPAMCHK,
GIBBERISH, CATCHALLMAILS [30]

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Todd
Sent: Wednesday, April 05, 2006 12:56 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] This doesnt add up

Thanks David,  both of these tests are not hidden and show up in the
headers.

Todd


- Original Message -
From: "David Barker" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, April 05, 2006 11:47 AM
Subject: RE: [Declude.JunkMail] This doesnt add up


> To reduce false positives NOLEGITCONTENT and IPNOTINMX are hidden tests,
> check your global.cfg you should see the -5
>
> David B
> www.declude.com
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Todd
> Sent: Wednesday, April 05, 2006 12:22 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] This doesnt add up
>
>
> A lot of spam has been getting through lately and at first I was thinking 
> my
> Declude needed some tweaking.  I am seeing some funny stuff though.  I 
> find
> emails where emails contain items that should have triggered filters but 
> did
> not.  I am on IMail 8.15 and Declude 2.06.
>
> Here is a header of an email where the numbers dont add to the score.  It
> should have had a score of 5 + 15 + 15 + 30 = 65 but instead shows 30
>
> My global.cfg has the following entries for the tests that were triggered
>
> SUBJECTSPACES7   subjectspaces 7   x 5 0
> SUBJECTSPACES10 subjectspaces 10 x 15 0
> SPFPASSspf pass   x 0 0
>
>
> X-RBL-Warning: SUBJECTSPACES7: Subject with at least 7 spaces found.
> X-RBL-Warning: SUBJECTSPACES10: Subject with at least 10 spaces found.
> X-RBL-Warning: SPFPASS: SPF returned PASS for this E-mail.
> X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 15.
> X-RBL-Warning: GIBBERISH: Message failed GIBBERISH test (line 463, weight
> 30)
> X-Declude-Sender: [EMAIL PROTECTED] [69.89.85.90]
> X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
> spam.
> X-Spam-Tests-Failed: SUBJECTSPACES7, SUBJECTSPACES10, SPFPASS, SPAMCHK,
> GIBBERISH, CATCHALLMAILS [30]
> X-Note: Total spam weight of this E-mail is 30 .
> X-Country-Chain: UNITED STATES->destination
> X-Note: This E-mail was sent from eveningtrees.com ([69.89.85.90]).
>
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
> just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
> Declude.JunkMail".  The archives can be found at
> http://www.mail-archive.com.
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1

[David Barker]

1. Harry please contact support at declude regarding your 
issue of upgrading.
2. The GUI is independent of the install you do not need 
the full update.
 
David B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Harry 
VanderzandSent: Thursday, April 06, 2006 11:49 AMTo: 
Declude.JunkMail@declude.comSubject: [Declude.JunkMail] changing 
decludeproc from 4.09.4 to 4.1

I have always done 
the updates by stopping the decludeproc service, putting the new decludeproc 
into place and then starting it.
 
When I did this to 
move to 4.1 the end result was that decludeproc was started but nothing was 
being processed.
 
When I reversed the 
steps and put 4.09.4 back everything was ok again.
 
Has something 
changed here?
 
Also is a full 
updated needed to get the new GUI?
 
thank 
you
 
Harry Vanderzand inTown Internet & Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222
 

RE: [Declude.JunkMail] Declude 3.1 and 4.1 Release Notes

[David Barker]

Thanks John. I will continue to do this in the future. Also just FYI we are
currently re-writing the Declude manuals.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Doyle
Sent: Thursday, April 06, 2006 11:51 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 3.1 and 4.1 Release Notes

Love the link in the release notes to the examples in the KB. It makes it
easy to evaluate and if desired adopt.

Thanks!

John


Declude 3.1 and 4.1 Release Notes http://www.declude.com/Articles.asp?ID=122
available.

David B
www.declude.com

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Declude 3.1 and 4.1 Release Notes

[David Barker]

Declude 3.1 and 4.1 Release Notes http://www.declude.com/Articles.asp?ID=122
available.

David B
www.declude.com

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude 3.1 and 4.1 Release Notes

[David Barker]

1. As each test is independent it will receive a -6 (-1+-2+-3)

2. Technically yes 1024 KB = 1 MB 

3. Checks the size of the D file in Imail or .eml file in SmarterMail

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)
Sent: Thursday, April 06, 2006 12:03 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Declude 3.1 and 4.1 Release Notes

http://support.declude.com/Customer/KBArticle.aspx?articleid=54

Question, if a message is 1 MB and there are 3 tests as in the example, does
that message get a negative weight of 3 or 6?

To actually score a message of 1 MB the third column would actually be 1024,
correct?

Is this checking the size of the D file, or calculating the size of the body
of the message with any attachment?

John T
eServices For You

"Seek, and ye shall find!"


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
> [EMAIL PROTECTED] On Behalf Of David Barker
> Sent: Thursday, April 06, 2006 8:32 AM
> To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
> Subject: [Declude.JunkMail] Declude 3.1 and 4.1 Release Notes
> 
> 
> Declude 3.1 and 4.1 Release Notes
http://www.declude.com/Articles.asp?ID=122
> available.
> 
> David B
> www.declude.com
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1

[David Barker]

All downloads are available from the Declude My Account home page
www.declude.com/login.asp the GUI download is titled Declude Graphical User
Interface. And yes the answer is the same as support gave you because I was
the person who answered you I could not figure out why you were posting the
same question to the lists. :)

If decludeproc 4.1 is not working for you phone us so we can help you get it
running. I am not sure what you are doing incorrectly.

David B
www.declude.com



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand
Sent: Thursday, April 06, 2006 12:13 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1


I am waiting for their response.
 
How does one get the GUI?
 
Maybe I am being obtuse here but I am not getting it.
 
Your answer is the same that support gave me.
 
I download decludeproc4.1 and install it. where does the dui come from if I
do not need the full install?
 

Harry Vanderzand 
inTown Internet & Computer Services 
519-741-1222


 




From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, April 06, 2006 11:53 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] changing decludeproc from 4.09.4 to
4.1


1. Harry please contact support at declude regarding your issue of
upgrading.
2. The GUI is independent of the install you do not need the full
update.
 
David B
www.declude.com



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand
Sent: Thursday, April 06, 2006 11:49 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1


I have always done the updates by stopping the decludeproc service,
putting the new decludeproc into place and then starting it.
 
When I did this to move to 4.1 the end result was that decludeproc
was started but nothing was being processed.
 
When I reversed the steps and put 4.09.4 back everything was ok
again.
 
Has something changed here?
 
Also is a full updated needed to get the new GUI?
 
thank you
 

Harry Vanderzand 
inTown Internet & Computer Services 
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Backlogged Proc Folder

[David Barker]

Will,

There is a known issue with certain versions of Imail where the network
stack gets confused and DNS no longer resolves. By stop/starting the
decludeproc service this resets the winsock and therefore corrects the
problem. If you had stop/start the Imail smtp services you would have had
the same result. To fix this bug in Imail we added a directive called
WINSOCKCLEANUP ON which is located in your declude.cfg what this does is
reset the winsock everytime the proc directory reaches 0

Any customer who purchased Declude prior 8 Feb 06 can always run the
software regardless if they have a valid service agreement or not. The
service agreement entitles these customers to the latest version of the
software and customer support.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Thursday, April 20, 2006 3:36 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Backlogged Proc Folder

Imail 8.22 with Declude 3.0.5.22

A few days ago I started having continual problems with my proc folder
backlogging mail.  I would notice that after a while, I could no longer
resolve DNS names or use name resolution of any kind on the server until
restarting the decludeproc service.

I have fought this battle before, which was about six months to a year ago.
At that time, I upgraded declude and created a script to monitor my proc
folder and restart the service if it went over 2000 files.

Having fought this for the last couple days I logged onto declude.com to
update and found that my service agreement expired three days ago.  Odd
coincidence.  Can having a lapses service agreement cause declude to have
scanning issues or process mail slower?

I bought a new service agreement for the hell of it and upgraded.
Purged my proc folder (sorry customers) and now mail seems to be processing
properly.

Lastly, I have junk pro and av pro, but have never used hijack.  Is there
any advantage to using the security suite?

Will


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] How would you create a filter for this?

[David Barker]

I created a filter you can modify it or add as you need too

David B
www.declude.com

BODYEND NOTCONTAINS MSHTML

BODY1   CONTAINS>a<
BODY1   CONTAINS>b<
BODY1   CONTAINS>c<
BODY1   CONTAINS>d<
BODY1   CONTAINS>e<
BODY1   CONTAINS>f<
BODY1   CONTAINS>g<
BODY1   CONTAINS>h<
BODY1   CONTAINS>i<
BODY1   CONTAINS>j<
BODY1   CONTAINS>k<
BODY1   CONTAINS>l<
BODY1   CONTAINS>m<
BODY1   CONTAINS>n<
BODY1   CONTAINS>o<
BODY1   CONTAINS>p<
BODY1   CONTAINS>q<
BODY1   CONTAINS>r<
BODY1   CONTAINS>s<
BODY1   CONTAINS>t<
BODY1   CONTAINS>u<
BODY1   CONTAINS>v<
BODY1   CONTAINS>w<
BODY1   CONTAINS>x<
BODY1   CONTAINS>y<
BODY1   CONTAINS>z<

BODY1   CONTAINS>1<
BODY1   CONTAINS>2<
BODY1   CONTAINS>3<
BODY1   CONTAINS>4<
BODY1   CONTAINS>5<
BODY1   CONTAINS>6<
BODY1   CONTAINS>7<
BODY1   CONTAINS>8<
BODY1   CONTAINS>9<
BODY1   CONTAINS>0<

BODY1   CONTAINS>$<

BODY1   CONTAINS> a <
BODY1   CONTAINS> b <
BODY1   CONTAINS> c <
BODY1   CONTAINS> d <
BODY1   CONTAINS> e <
BODY1   CONTAINS> f <
BODY1   CONTAINS> g <
BODY1   CONTAINS> h <
BODY1   CONTAINS> i <
BODY1   CONTAINS> j <
BODY1   CONTAINS> k <
BODY1   CONTAINS> l <
BODY1   CONTAINS> m <
BODY1   CONTAINS> n <
BODY1   CONTAINS> o <
BODY1   CONTAINS> p <
BODY1   CONTAINS> q <
BODY1   CONTAINS> r <
BODY1   CONTAINS> s <
BODY1   CONTAINS> t <
BODY1   CONTAINS> u <
BODY1   CONTAINS> v <
BODY1   CONTAINS> w <
BODY1   CONTAINS> x <
BODY1   CONTAINS> y <
BODY1   CONTAINS> z <

BODY1   CONTAINS> 1 <
BODY1   CONTAINS> 2 <
BODY1   CONTAINS> 3 <
BODY1   CONTAINS> 4 <
BODY1   CONTAINS> 5 <
BODY1   CONTAINS> 6 <
BODY1   CONTAINS> 7 <
BODY1   CONTAINS> 8 <
BODY1   CONTAINS> 9 <
BODY1   CONTAINS> 0 <

BODY1   CONTAINS> $ < 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Olden
Sent: Tuesday, April 25, 2006 12:25 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] How would you create a filter for this?

Just today, I added some of the following to my checkraw file in Spamchk.
Just testing since a lot of these seem to have the the lowercase letters
hidden in the HTML version by using white fonts.
/font> I  A  G R 
> Michael Graveen writes:
>> Hello,
>> I have checked through the archives and I have not been able to find 
>> anything on creating a filter to block something like V p I t A p G i 
>> R h A g ( where every other letter is used to spell a word).  The 
>> capital letters stay the same from email to email, but the lower case 
>> letters change.  Is there a way to set up a filter line to catch 
>> this?  I am using Declude JunkMail Pro 2.0.6.16 Thanks in advance, 
>> Mike
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> [MSGID=D47f301719d24.smd]
>
>
>
---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Testing the Boards

[David Barker]

PING

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Version control and announcements.

[David Barker]

John,

I understand your frustration and I am working on correcting this and
creating a process for this to be effective. Just a FYI you can always check
the release notes: http://www.declude.com/Articles.asp?ID=122

David B
www.declude.com

 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Shacklett
Sent: Thursday, May 04, 2006 11:00 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Version control and announcements.

Hi. Following along with the theme of the week, I've been using Declude
since 1.10.

I can't say this strongly enough: nothing frustrates me more than being
caught unawares by new versions and new functionality. Every time I read a
post that starts with "hey, I was just on the site and noticed a new
version" I'm steamed. Long time listeners to this radio station know that
we've gone around and around about how new features are announced and
documented, and I don't want to reopen that sealed tin of worms, but version
release surprises don't meet my needs. Now I'm sitting here thinking, "wow,
4.1.0 to 4.2.3, what else have I missed?"

There, I've said it, it won't do any good, but I feel better.


--

John S

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Experience with 4.x

[David Barker]

The purpose of WINSOCKCLEANUPON is to reset the winsock, what
happens when using this setting is that when the \proc directory hit 0
decludeproc will finish processing all the messages in the \work before
checking the \proc again. As WINSOCKCLEANUP is to be used only by those who
experience DNS issues I would suggest running your tests again with
WINSOCKCLEANUP commented out and see how the behavior differs. Also having
the WAITFORMAIL to low can cause the CPU to process very high as it is
constantly checking the \proc I would suggest a minimum of 500-1000

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Monday, May 22, 2006 8:12 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Experience with 4.x

Darrell,

I put up two Windows Explorer windows side-by-side under normal volume 
and the pattern was consistent where the proc folder grows while the 
work folder shrinks until the work folder hits zero at which point the 
proc folder empties out and everything lands in work and then the 
pattern repeats with proc growing while work shrinks.

My settings are as follows:

THREADS50
WAITFORMAIL100
WAITFORTHREADS10
WAITBETWEENTHREADS50
WINSOCKCLEANUPON
AUTOREVIEWON
INVITEFIXON

Matt




Darrell ([EMAIL PROTECTED]) wrote:

>> It's a faulty design that leaves more than half a server's CPU 
>> capacity unused due to the mere fact that they wait for all threads 
>> to complete before moving in a new batch.
>
>
> I can't speak to what you see on your server, but that is not how it 
> is running on my server.  I just double checked again to make sure I 
> am not crazy, but as I watch the thread count on my server 
> (decludeproc) the threads fluctuate between 7 - 30 ( threads currently 
> set to 50).  It is not uncommon to see the threads move as follow: 
> 11,8,10,7,15,  While I was watching it I never seen a case where 
> it went down low enough for the WAITFORMAIL setting to kick in.  
> Watching the proc/work directory you can see files moving in and out, 
> but never really emptying out.  Its possible what I am seeing is an 
> anomaly or maybe I am interpreting it wrong.
>
> Maybe David can comment on this.
>
> Darrell
> 
> invURIBL - Intelligent URI filtering plug-in for Declude, mxGuard, and 
> ORF. Stop spam at the source the spamvertised domain.  More effective 
> than traditional RBL's.  Try it today - http://www.invariantsystems.com
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
>
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Experience with 4.x

[David Barker]

Mike,

1. The  WINSOCKCLEANUPON activates when the \Proc reaches 0
2. If Decludeproc stops unexpectedly files it is busy with are move to the
\review
3. You can use AUTOREVIEW   ON to have these move back to the \proc
4. Be aware though if there is a real problem message you may find that the
message gets looped
5. Make sure you have the latest version of decludeproc ... There should be
a release later today or tommorow.

David B
www.declude.com


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike N
Sent: Tuesday, May 23, 2006 10:23 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Experience with 4.x

I found that WINSOCKCLEANUP ON would force a reset if the \proc directory 
never hits 0.   In this case, files build up in the \review subfolder which 
require manual processing.

- Original Message -
From: "David Barker" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, May 23, 2006 7:34 AM
Subject: RE: [Declude.JunkMail] Experience with 4.x


> The purpose of WINSOCKCLEANUPON is to reset the winsock, what
> happens when using this setting is that when the \proc directory hit 0
> decludeproc will finish processing all the messages in the \work before
> checking the \proc again.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] New version - any hints

[David Barker]

4 items .. Releasing tomorrow morning:

1. Increased performance for the AVG DB updates
2. AVG virus name reporting fixed
3. Configurable times for AVG updates
4. Buffer overflow fix caused by format of certain 'broken' emails

David B
www.declude.com  

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
Sent: Tuesday, May 23, 2006 11:56 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] New version - any hints

Hi David,

You said:

5. Make sure you have the latest version of decludeproc ... There should be
a release later today or tommorow.

Any ints as to what is in this version?

Goran Jovanovic
Omega Network Solutions
---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Experience with 4.x

[David Barker]

Andrew,

In certain cases we found that Imail would stop resolving, it seemed that
stop/starting the decludeproc or smtp service fixed the problem by resetting
the winsock. So we added WINSOCKCLEANUP to deal with this specific Imail
issue. 

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Tuesday, May 23, 2006 3:45 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Experience with 4.x

David, is there a proactive way to detect if an installation would benefit
from the WINSOCKCLEANUP ON directive in declude.cfg?

I would rather be able to detect this while it's happening than to react
when I find that spam is leaking or that the proc folder is continually
growing.

Andrew.


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
> Sent: Tuesday, May 23, 2006 7:48 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Experience with 4.x
> 
> Mike,
> 
> 1. The  WINSOCKCLEANUPON activates when the \Proc reaches 0
> 2. If Decludeproc stops unexpectedly files it is busy with are move to 
> the \review
> 3. You can use AUTOREVIEW ON to have these move back to the \proc
> 4. Be aware though if there is a real problem message you may find 
> that the message gets looped 5. Make sure you have the latest version 
> of decludeproc ... There should be a release later today or tommorow.
> 
> David B
> www.declude.com
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Mike N
> Sent: Tuesday, May 23, 2006 10:23 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Experience with 4.x
> 
> I found that WINSOCKCLEANUP ON would force a reset if the \proc 
> directory
> never hits 0.   In this case, files build up in the \review 
> subfolder which
> require manual processing.
> 
> - Original Message -
> From: "David Barker" <[EMAIL PROTECTED]>
> To: 
> Sent: Tuesday, May 23, 2006 7:34 AM
> Subject: RE: [Declude.JunkMail] Experience with 4.x
> 
> 
> > The purpose of WINSOCKCLEANUPON is to reset the 
> winsock, what
> > happens when using this setting is that when the \proc
> directory hit 0
> > decludeproc will finish processing all the messages in the \work 
> > before checking the \proc again.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> 
---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Stranded header files

[David Barker]

1. I have not seen this issue in Declude 4.2 do you have a ticket number for
me to follow up on ? 

2. Are you running any type of on access scanner that may be locking the
file so we can't move it ?

3. Do you hav any DEBUG log entries for a message where this occurs ?

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Robertson
Sent: Tuesday, May 23, 2006 5:55 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Stranded header files

Is anyone else seeing the problem where .hdr files are getting stuck in the
Declude work folder?  

Under the latest version of SmarterMail 3.2 and Declude 4.2, Declude strands
several messages a day by processing the .eml file, prepending the x to the
file name and moving the file to the Spool folder.  The .hdr file, however,
is left stuck in the work directory.  We had to check that folder several
times a day to look for stranded files, change their file name and move them
back into the spool, at which point the message delivers normally.

We contacted Declude about this awhile back. Finally asked SmarterMail about
it and they confirmed it is a Declude issue.  This was several versions ago.
Is a fix in the works?

After annoying a few customers whose messages were delayed overnight, I
finally wrote a program that scans the work directory every hour and moves
stranded headers back to the spool when necessary.  It helps prevent really
long delays, but it isn't the best solution.

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
> [EMAIL PROTECTED] On Behalf Of David Barker
> Sent: Tuesday, May 23, 2006 3:00 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] New version - any hints
> 
> 4 items .. Releasing tomorrow morning:
> 
> 1. Increased performance for the AVG DB updates 2. AVG virus name 
> reporting fixed 3. Configurable times for AVG updates 4. Buffer 
> overflow fix caused by format of certain 'broken' emails
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Goran 
> Jovanovic
> Sent: Tuesday, May 23, 2006 11:56 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] New version - any hints
> 
> Hi David,
> 
> You said:
> 
> 5. Make sure you have the latest version of decludeproc ... There 
> should be a release later today or tommorow.
> 
> Any ints as to what is in this version?
> 
> Goran Jovanovic
> Omega Network Solutions
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Experience with 4.x

[David Barker]

The only way that we have detected this was with Imail and mail being stuck
in the spool. "...network stack causing loss of functionality for basic
network operations" is generic but if I remember correctly when this
happened the admin was not even able to ping an outside server, which would
suggest to me other IP communications fail as well.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Tuesday, May 23, 2006 6:26 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Experience with 4.x

Thanks, David.

I've read all of the support forum emails that have been posted on the
WINSOCKCLEANUP and even reviewed them again via the mail archive website
before my own implementation.

What I haven't been able to tell is whether I can diagnose this issue if I
have it before it becomes an outage.

Can it only be detected by it's side-effect of filling up the proc folder?

If I have a mechanism on my IMail server that does DNS queries... Will they
fail when the WinSock needs being cleaned up?  I think not, as at least one
posting specifically mentioned that IMail IP4R tests worked when DecludeProc
IP4R tests timed out.

Your official description for "WINSOCKCLEANUP ON" says "...network stack
causing loss of functionality for basic network operations"; is this
deliberately generic so that you don't have to explain what a DNS test is,
or does it imply that other IP communications will also fail, e.g.
SMTP and (critically for me) RDP?

Andrew.



> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
> Sent: Tuesday, May 23, 2006 3:12 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Experience with 4.x
> 
> Andrew,
> 
> In certain cases we found that Imail would stop resolving, it seemed 
> that stop/starting the decludeproc or smtp service fixed the problem 
> by resetting the winsock. So we added WINSOCKCLEANUP to deal with this 
> specific Imail issue.
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, 
> Andrew
> Sent: Tuesday, May 23, 2006 3:45 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Experience with 4.x
> 
> David, is there a proactive way to detect if an installation would 
> benefit from the WINSOCKCLEANUP ON directive in declude.cfg?
> 
> I would rather be able to detect this while it's happening than to 
> react when I find that spam is leaking or that the proc folder is 
> continually growing.
> 
> Andrew.
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of
> David Barker
> > Sent: Tuesday, May 23, 2006 7:48 AM
> > To: Declude.JunkMail@declude.com
> > Subject: RE: [Declude.JunkMail] Experience with 4.x
> > 
> > Mike,
> > 
> > 1. The  WINSOCKCLEANUPON activates when the \Proc reaches 0
> > 2. If Decludeproc stops unexpectedly files it is busy with
> are move to
> > the \review
> > 3. You can use AUTOREVIEW   ON to have these move back to the \proc
> > 4. Be aware though if there is a real problem message you may find 
> > that the message gets looped 5. Make sure you have the
> latest version
> > of decludeproc ... There should be a release later today or
> tommorow.
> > 
> > David B
> > www.declude.com
> > 
> > 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Mike N
> > Sent: Tuesday, May 23, 2006 10:23 AM
> > To: Declude.JunkMail@declude.com
> > Subject: Re: [Declude.JunkMail] Experience with 4.x
> > 
> > I found that WINSOCKCLEANUP ON would force a reset if the \proc 
> > directory
> > never hits 0.   In this case, files build up in the \review 
> > subfolder which
> > require manual processing.
> > 
> > - Original Message -
> > From: "David Barker" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Tuesday, May 23, 2006 7:34 AM
> > Subject: RE: [Declude.JunkMail] Experience with 4.x
> > 
> > 
> > > The purpose of WINSOCKCLEANUPON is to reset the 
> > winsock, what
> > > happens when using this setting is that when the \proc
> > directory hit 0
> > > decludeproc will finish processing all the messages in the \work 
> > > before checking the \proc again.
> > 
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To 
> > unsubscribe, just send an E-mail to [EMAIL PROT

RE: [Declude.JunkMail] Experience with 4.x

[David Barker]

Thanks for the help. Any feedback appreciated.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Tuesday, May 23, 2006 6:36 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Experience with 4.x

David, that sounds like the case I saw that noted that "his firewall wasn't
allowing outbound DNS" and also noted that implementing WINSOCKCLEANUP ON
worked for him.  I wasn't at all sure that the winsock fix was relevant for
him!

I'll keep watching my folders.  Perhaps I'll get lucky enough to need to the
fix and may offer some further insight here.

Andrew.


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
> Sent: Tuesday, May 23, 2006 3:30 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Experience with 4.x
> 
> The only way that we have detected this was with Imail and mail being 
> stuck in the spool. "...network stack causing loss of functionality 
> for basic network operations" is generic but if I remember correctly 
> when this happened the admin was not even able to ping an outside 
> server, which would suggest to me other IP communications fail as 
> well.
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, 
> Andrew
> Sent: Tuesday, May 23, 2006 6:26 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Experience with 4.x
> 
> Thanks, David.
> 
> I've read all of the support forum emails that have been posted on the 
> WINSOCKCLEANUP and even reviewed them again via the mail archive 
> website before my own implementation.
> 
> What I haven't been able to tell is whether I can diagnose this issue 
> if I have it before it becomes an outage.
> 
> Can it only be detected by it's side-effect of filling up the proc 
> folder?
> 
> If I have a mechanism on my IMail server that does DNS queries... Will 
> they fail when the WinSock needs being cleaned up?  I think not, as at 
> least one posting specifically mentioned that IMail IP4R tests worked 
> when DecludeProc IP4R tests timed out.
> 
> Your official description for "WINSOCKCLEANUP ON" says "...network 
> stack causing loss of functionality for basic network operations"; is 
> this deliberately generic so that you don't have to explain what a DNS 
> test is, or does it imply that other IP communications will also fail, 
> e.g.
> SMTP and (critically for me) RDP?
> 
> Andrew.
> 
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of
> David Barker
> > Sent: Tuesday, May 23, 2006 3:12 PM
> > To: Declude.JunkMail@declude.com
> > Subject: RE: [Declude.JunkMail] Experience with 4.x
> > 
> > Andrew,
> > 
> > In certain cases we found that Imail would stop resolving,
> it seemed
> > that stop/starting the decludeproc or smtp service fixed
> the problem
> > by resetting the winsock. So we added WINSOCKCLEANUP to
> deal with this
> > specific Imail issue.
> > 
> > David B
> > www.declude.com
> > 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, 
> > Andrew
> > Sent: Tuesday, May 23, 2006 3:45 PM
> > To: Declude.JunkMail@declude.com
> > Subject: RE: [Declude.JunkMail] Experience with 4.x
> > 
> > David, is there a proactive way to detect if an installation would 
> > benefit from the WINSOCKCLEANUP ON directive in declude.cfg?
> > 
> > I would rather be able to detect this while it's happening than to 
> > react when I find that spam is leaking or that the proc folder is 
> > continually growing.
> > 
> > Andrew.
> > 
> > 
> > > -Original Message-
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED] On Behalf Of
> > David Barker
> > > Sent: Tuesday, May 23, 2006 7:48 AM
> > > To: Declude.JunkMail@declude.com
> > > Subject: RE: [Declude.JunkMail] Experience with 4.x
> > > 
> > > Mike,
> > > 
> > > 1. The  WINSOCKCLEANUPON activates when the \Proc 
> reaches 0
> > > 2. If Decludeproc stops unexpectedly files it is busy with
> > are move to
> > > the \review
> > > 3. You can use AUTOREVIEW ON to have these move back to the \proc
> > > 4. Be aware though if there is a real problem message you
> may find
> > > that t

RE: [Declude.JunkMail] Experience with 4.x

[David Barker]

We have not seen this issue with SmarterMail.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jay Sudowski -
Handy Networks LLC
Sent: Wednesday, May 24, 2006 4:00 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Experience with 4.x

In light of this reference to WINSOCKCLEANUP being an iMail only issue, do I
even need to enable this on our SmarterMail servers?

-Jay


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Tuesday, May 23, 2006 6:30 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Experience with 4.x

The only way that we have detected this was with Imail and mail being stuck
in the spool. "...network stack causing loss of functionality for basic
network operations" is generic but if I remember correctly when this
happened the admin was not even able to ping an outside server, which would
suggest to me other IP communications fail as well.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Tuesday, May 23, 2006 6:26 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Experience with 4.x

Thanks, David.

I've read all of the support forum emails that have been posted on the
WINSOCKCLEANUP and even reviewed them again via the mail archive website
before my own implementation.

What I haven't been able to tell is whether I can diagnose this issue if I
have it before it becomes an outage.

Can it only be detected by it's side-effect of filling up the proc folder?

If I have a mechanism on my IMail server that does DNS queries... Will they
fail when the WinSock needs being cleaned up?  I think not, as at least one
posting specifically mentioned that IMail IP4R tests worked when DecludeProc
IP4R tests timed out.

Your official description for "WINSOCKCLEANUP ON" says "...network stack
causing loss of functionality for basic network operations"; is this
deliberately generic so that you don't have to explain what a DNS test is,
or does it imply that other IP communications will also fail, e.g.
SMTP and (critically for me) RDP?

Andrew.



> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
> Sent: Tuesday, May 23, 2006 3:12 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Experience with 4.x
> 
> Andrew,
> 
> In certain cases we found that Imail would stop resolving, it seemed 
> that stop/starting the decludeproc or smtp service fixed the problem 
> by resetting the winsock. So we added WINSOCKCLEANUP to deal with this

> specific Imail issue.
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, 
> Andrew
> Sent: Tuesday, May 23, 2006 3:45 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Experience with 4.x
> 
> David, is there a proactive way to detect if an installation would 
> benefit from the WINSOCKCLEANUP ON directive in declude.cfg?
> 
> I would rather be able to detect this while it's happening than to 
> react when I find that spam is leaking or that the proc folder is 
> continually growing.
> 
> Andrew.
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of
> David Barker
> > Sent: Tuesday, May 23, 2006 7:48 AM
> > To: Declude.JunkMail@declude.com
> > Subject: RE: [Declude.JunkMail] Experience with 4.x
> > 
> > Mike,
> > 
> > 1. The  WINSOCKCLEANUPON activates when the \Proc reaches 0
> > 2. If Decludeproc stops unexpectedly files it is busy with
> are move to
> > the \review
> > 3. You can use AUTOREVIEW   ON to have these move back to the \proc
> > 4. Be aware though if there is a real problem message you may find 
> > that the message gets looped 5. Make sure you have the
> latest version
> > of decludeproc ... There should be a release later today or
> tommorow.
> > 
> > David B
> > www.declude.com
> > 
> > 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of Mike N
> > Sent: Tuesday, May 23, 2006 10:23 AM
> > To: Declude.JunkMail@declude.com
> > Subject: Re: [Declude.JunkMail] Experience with 4.x
> > 
> > I found that WINSOCKCLEANUP ON would force a reset if the \proc 
> > directory
> > never hits 0.   In this case, files build up in the \review 
> > subfolder which
> > require manual processing.
> > 
> > - Original Message -
> > 

RE: [Declude.JunkMail] PREWHITELIST

[David Barker]

Yes.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)
Sent: Thursday, May 25, 2006 1:01 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] PREWHITELIST

Is this option still available in the Global.CFG?

John T
eServices For You

"Seek, and ye shall find!"


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Version 4.2 Build 12

[David Barker]

Michael,

The full setup needs to be done for versions 4.2 build 3 onwards because of
the integrated AVG. The latest version that you can just replace the
decludeproc is 4.1

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michael Hoyt
Sent: Friday, May 26, 2006 10:36 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Version 4.2 Build 12

I am running Declude Security Suite 4 (diag.txt shows "Declude 4.2.3
Diagnostics") and was wondering if I needed to update my whole Declude
install or just the decludeproc.exe file to be current (4.2 Build 12)?

Thank you,

Michael Hoyt

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Mail Backlogging

[David Barker]

Will,

I am not sure what you mean by country command, but this may be helpful
http://support.declude.com/Customer/KBArticle.aspx?articleid=6

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Tuesday, May 30, 2006 3:18 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Mail Backlogging

I am using hijack with its default settings.  My Declude seems to function
just fine as I'm watching but every other or third weekend it seems like I
come in on a Monday to see a couple hundred thousand messages in the proc
folder.  I only allow 50 recipients per message, have no loops, no catchall
aliases.  Looks like I typically receive around 140,000 per day so it is
pretty strange to come in after two days and see 500,000 messages.  However,
it was a holiday weekend...

A report for one of my normal days can be seen here:
http://mail.ncats.net/report.html

My global.cfg is attached

I'm a little confused about the syntax of the country command.  Is there any
official documentation or examples available?  I have been searching for
them with little luck.

It would be nice to have a declude log analyzer that would display a list of
IP's organized by spam counts so I could start blacklisting some subnets, If
that would be at all helpful to me.

Will
 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds
Sent: Tuesday, May 30, 2006 11:33 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Mail Backlogging
Importance: High

 
I would also recommend the declude hijack filter.

It has saved me a couple of times.

Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com
E : [EMAIL PROTECTED]
 
Marbella Guide Web Portal
W: www.marbellaguide.com
E: [EMAIL PROTECTED]
 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Tuesday, May 30, 2006 5:10 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Mail Backlogging

Will,

Do you have any catch-all (nobody) aliases for any of your domains?  If so,
a single such domain can overwhelm a server when under dictionary attack.
Catch-alls must be removed.  The traffic will disappear immediately if this
is the case.

Also, it is definitely not uncommon for a business like yours to have
clients using your server for bulk-mailing.  You should set reasonable
recipient limits per message (like 50 or so) and watch for people that have
automated software that sends out even more.

Looping can cause issues like this as well.

Lastly, you may need to tweak your Declude.cfg settings in order to handle
the normal traffic that you see.  It seems that a lot of the higher volume
servers backup when using the default settings, so this effect may be
different from what you were seeing in the past.  Maybe you could share your
normal and peak volume along with your Declude.cfg settings with the list
and get some feedback.

Matt



Will wrote:

>I have had a problem with my Imail server backlogging mail for years
now
>where the spool directory will fill with hundreds of thousands of 
>messages.  Now it's the proc folder with the new version of declude.
>This issue has been ongoing throughout the years as I have upgraded
both
>Imail and Declude.  It has come to the point where I have to purge 
>500,000 messages to get my mail server running again.
>
>I'm not sure what to do, as I need the virus and spam protection.
>
>Is there a way to block all mail from Romania and china?
>
>Will
>
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To 
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
>"unsubscribe Declude.JunkMail".  The archives can be found at 
>http://www.mail-archive.com.
>
>
>  
>
---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
[ This E-mail has been scanned for Spam and Viruses by Declude ] [ Thank You
For Using 123 Marbella Internet ]




---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] No action taken

[David Barker]

Ok, so you prompted me to a knee-jerk reaction ... Yes, we are still in
business :)

Currently investigating the problem. Again it is a high priority and we will
notify you as soon as we have found the cause of the problem.

Thanks
David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Heimir
Eidskrem
Sent: Wednesday, June 07, 2006 4:29 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] No action taken

No response from Declude yet?
Its been days.

Are they still in business?



Heimir Eidskrem wrote:
> Why would no action been taken on this email.
> We hold on 100.
>
>
> From Declude log:
>
> 06/04/2006 17:38:44.987 q60eb0182d92b.smd Triggered COUNTRIES 
> CONTAINS filter COUNTRYFILTER on ES [weight->10].
> 06/04/2006 17:38:45.003 q60eb0182d92b.smd Filter: Set max weight 
> to 60.
> 06/04/2006 17:38:45.112 q60eb0182d92b.smd Filter: Set max weight 
> to 70.
> 06/04/2006 17:38:45.159 q60eb0182d92b.smd Filter REVDNSBLACKLIST: 
> Skipping E-mail with a current weight of 245 (>=80)
> 06/04/2006 17:38:45.159 q60eb0182d92b.smd Filter BADWORDFILTER: 
> Skipping E-mail with a current weight of 245 (>=30)
> 06/04/2006 17:38:45.159 q60eb0182d92b.smd SPAMCOP:70 FIVETENSRC:30
> SORBS-DUL:35 COUNTRYFILTER:10 SNIFFERGETRICH:100 .  Total weight = 245.
> 06/04/2006 17:38:45.159 q60eb0182d92b.smd Cumulative action(s) 
> taken on this email = NO ACTIONS WERE TAKEN
>
>
>
> Received: from jose-mih7wjftkx [62.42.134.246] by xxx with 
> ESMTP
>  (SMTPD-8.22) id A0EC1404; Sun, 04 Jun 2006 17:38:36 -0500
> Date: Sun, 4 Jun 2006 22:38:39 -0060
> From: "Rene Benjamin" [EMAIL PROTECTED]
> X-Mailer: The Bat! (3.69.9) Personal
> Reply-To: [EMAIL PROTECTED]
> X-Priority: 3 (Normal)
> Message-ID: <[EMAIL PROTECTED]>
> To: 
> Subject: Under The Radar Equity Alert
> MIME-Version: 1.0
> Content-Type: text/plain; charset=us-ascii
> Content-Transfer-Encoding: 7bit
> X-Declude-Sender: <> [62.42.134.246]
> X-Declude-Spoolname: D60eb0182d92b.smd
> X-Spam-Tests-Failed: SPAMCOP, FIVETENSRC, SORBS-DUL, NOLEGITCONTENT, 
> IPNOTINMX, COUNTRYFILTER, SNIFFERGETRICH, WEIGHT75, WEIGHT100, 
> CATCHALLMAILS [245]
> X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) 
> for spam.
> X-RCPT-TO: <[EMAIL PROTECTED]>
> Status: U
> X-UIDL: 440029386
>
>
> X-IMail-ThreadID: 60eb0182d92b
>
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
>
>

[This E-mail scanned for viruses by Declude EVA]



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.Virus] Growing Pains

[David Barker]

To all Declude users:

I wanted to send out a message to address some of the concerns being raised
by our user base. Before I get down to specifics, let me give you some
information about the general direction of the company.  

Declude is still a small company. Like any business, we want to grow, create
better products, keep you our customers happy and enjoy what we do. Growth
requires a certain amount of change. In our case that means hiring a number
of new people to expand our customer support group and provide better
service. It means looking for new partners such as AVG and CommTouch to make
our software work even harder as security threats become faster and more
sophisticated. It means finding a bigger, more productive space to work in.
And it means that we need to explore opportunities to make our products
available to more people.

Trying to accomplish many of those things inevitably leads to making a few
mistakes. Frankly, we made some seriously dumb ones over the last few weeks
and we apologize for any problems we may have caused. Despite some of these
unintentional screw ups, we still know who we are. Scott Perry established
Declude as small company that really listened to its users and created
flexible, powerful solutions that allowed them to customize Declude for
their individual needs. It was also a company that was responsive to its
users. Despite a momentary hiatus, that is the Declude that you will see
again, and very soon.

Now, on to specifics:

Q - Why have we been so slow to respond to tech requests?

A:  Ironically, in an effort to expand both tech support and engineering to
deliver faster response and better solutions we have expanded staffing in
both areas significantly. We all know that that our software is powerful,
but it's also complex and takes time to truly master its nuances.  We
underestimated the time it would take and the resources required to get our
people in both areas up to speed.   Our mistake.  We are now past that area
of concern and ready to be responsive to your needs.

Q. - Are there issues or problems with the product?  

A. -  No, just the opposite.  The fact of the matter is we are working
aggressively to offer an industry leading, fully integrated solution that is
both powerful and affordable.  The AVG announcement is one example as is our
upcoming addition of Commtouch to that suite is another. Integrating those
solutions, while expanding staffing, moving and training was a result of
biting off a bit more than we could chew at once. Timing was hardly perfect,
but we have finalized the CommTouch integration and learned some hard
lessons in the process.

Like it or not, when small companies make mistakes, they really stand out.
I guess for a few weeks we forgot that we are a small company and that we,
like many of you, have limitations. You have our word that we will go above
and beyond to make Declude a company you can depend on. Thanks for your
patience.

Q - It seems some people have left the company that we were used to
communicating with.  Why has Declude been silent on those departures. 

A - The short answer is that we are bound to respect the privacy of all our
employees.  It is up to them to provide that information. Our job, like
yours, is to protect and secure the privacy of individuals and the
enterprise, we won't make an exception in this case.  

David Barker
Product Manager
Declude is Cybercom Security  - Email. Voice. Messaging.
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Growing Pains

[David Barker]

To all Declude users:

I wanted to send out a message to address some of the concerns being raised
by our user base. Before I get down to specifics, let me give you some
information about the general direction of the company.  

Declude is still a small company. Like any business, we want to grow, create
better products, keep you our customers happy and enjoy what we do. Growth
requires a certain amount of change. In our case that means hiring a number
of new people to expand our customer support group and provide better
service. It means looking for new partners such as AVG and CommTouch to make
our software work even harder as security threats become faster and more
sophisticated. It means finding a bigger, more productive space to work in.
And it means that we need to explore opportunities to make our products
available to more people.

Trying to accomplish many of those things inevitably leads to making a few
mistakes. Frankly, we made some seriously dumb ones over the last few weeks
and we apologize for any problems we may have caused. Despite some of these
unintentional screw ups, we still know who we are. Scott Perry established
Declude as small company that really listened to its users and created
flexible, powerful solutions that allowed them to customize Declude for
their individual needs. It was also a company that was responsive to its
users. Despite a momentary hiatus, that is the Declude that you will see
again, and very soon.

Now, on to specifics:

Q - Why have we been so slow to respond to tech requests?

A:  Ironically, in an effort to expand both tech support and engineering to
deliver faster response and better solutions we have expanded staffing in
both areas significantly. We all know that that our software is powerful,
but it's also complex and takes time to truly master its nuances.  We
underestimated the time it would take and the resources required to get our
people in both areas up to speed.   Our mistake.  We are now past that area
of concern and ready to be responsive to your needs.

Q. - Are there issues or problems with the product?  

A. -  No, just the opposite.  The fact of the matter is we are working
aggressively to offer an industry leading, fully integrated solution that is
both powerful and affordable.  The AVG announcement is one example as is our
upcoming addition of Commtouch to that suite is another. Integrating those
solutions, while expanding staffing, moving and training was a result of
biting off a bit more than we could chew at once. Timing was hardly perfect,
but we have finalized the CommTouch integration and learned some hard
lessons in the process.

Like it or not, when small companies make mistakes, they really stand out.
I guess for a few weeks we forgot that we are a small company and that we,
like many of you, have limitations. You have our word that we will go above
and beyond to make Declude a company you can depend on. Thanks for your
patience.

Q - It seems some people have left the company that we were used to
communicating with.  Why has Declude been silent on those departures. 

A - The short answer is that we are bound to respect the privacy of all our
employees.  It is up to them to provide that information. Our job, like
yours, is to protect and secure the privacy of individuals and the
enterprise, we won't make an exception in this case.  

David Barker
Product Manager
Declude is Cybercom Security  - Email. Voice. Messaging.
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Test - can I post?

[David Barker]

Erik,

We have just migrated our servers, and the DNS is in the process of being
updated.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Erik
Sent: Wednesday, June 14, 2006 10:00 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Test - can I post?

If you have ever "whitelisted" the REVDNS of:   .declude.com  (like it has
been in the past - for several years); you will need to change this.  We had
too.  Before, Declude always had the "correct" REVDNS based on their domain
but since their move to a new location and provider... Their new REVDNS is:
.xiolink.com (nothing relating to Declude or CPHZ.COM)

To me, this is ironic considering that Declude is in the SPAM business
control.  And the .xiolink.com full text lookup returns a dotted/dashed IP
address used by most dialup/residential customers and for most of us; we use
filters and external filters to detect the dotted/dashed IP.  (Full REVDNS
for the current Declude is:   63-246-31-248.xiolink.com ([63.246.31.248]))

Whitelisting based just on a to/from/return address is not enough as these
can be forged.  In the past we used both the to/from/return address AND the
REVDNS as the "whitelisting".

-Erik



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc
Catuogno
Sent: Wednesday, June 14, 2006 3:28 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Test - can I post?


Checking to see if I can post...



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Test - can I post?

[David Barker]

Andrew,

I am fully aware of the situation, and I posted a response yesterday. If
would like to discuss this further please feel free to contact me offline.

David B
www.declude.com


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck,
Andrew
Sent: Wednesday, June 14, 2006 12:41 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Test - can I post?

David, have you heard the phrase "Caesar's wife must be above reproach"?

A company that sells email based products has to do a superlative job in
their own field.

I've already got a fulltime job thanks, but I just can't help getting pulled
into the forum and paying attention to what Declude is doing when Declude is
doing such a hack job.

I've had my own issues with tech support and have been flabbergasted at the
snail's pace of production.

We've been waiting a very long time for native URI support.

Heck, we've been waiting a long time for proper MIME decoding, never mind
the lack of robust body decoding whose bug was mentioned yesterday by Matt,
and never mind the similar problem with header decoding when the header has
non-RFC compliant line terminators.

We can all accept that a company undergoing changes is going to face
difficulties, but when you combine the lack of communication along with
technical difficulties in managing your own product... it just can't look
worse.

It's very disheartening to see Declude behaving this way; similar to what
has been said earlier, I put in a Declude gateway and considered that IMail
was necessary baggage to go with it.

My company specifically wanted a Windows based antispam gateway, and Declude
was the best game in town.  Well, the competition has grown up while Declude
has been napping and I've got choices.

Andrew. 


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> David Barker
> Sent: Wednesday, June 14, 2006 7:16 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] Test - can I post?
> 
> Erik,
> 
> We have just migrated our servers, and the DNS is in the process of 
> being updated.
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> Erik
> Sent: Wednesday, June 14, 2006 10:00 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] Test - can I post?
> 
> If you have ever "whitelisted" the REVDNS of:   .declude.com  
> (like it has
> been in the past - for several years); you will need to change this.  
> We had too.  Before, Declude always had the "correct" REVDNS based on 
> their domain but since their move to a new location and provider... 
> Their new REVDNS is:
> .xiolink.com (nothing relating to Declude or CPHZ.COM)
> 
> To me, this is ironic considering that Declude is in the SPAM business 
> control.  And the .xiolink.com full text lookup returns a 
> dotted/dashed IP address used by most dialup/residential customers and 
> for most of us; we use filters and external filters to detect the 
> dotted/dashed IP.
> (Full REVDNS
> for the current Declude is:   63-246-31-248.xiolink.com 
> ([63.246.31.248]))
> 
> Whitelisting based just on a to/from/return address is not enough as 
> these can be forged.  In the past we used both the to/from/return 
> address AND the REVDNS as the "whitelisting".
> 
> -Erik
> 
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> Marc Catuogno
> Sent: Wednesday, June 14, 2006 3:28 PM
> To: declude.junkmail@declude.com
> Subject: [Declude.JunkMail] Test - can I post?
> 
> 
> Checking to see if I can post...
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> 
> 


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] HOLD action and %DATE% variable

[David Barker]

Currently the only date format available is %DATE% which is 
ddmmm I have added the request for different date formats to development 
wishlist.
David 
B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Goran JovanovicSent: 
Friday, June 16, 2006 9:53 PMTo: 
declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] HOLD 
action and %DATE% variable


Can anyone from Declude 
confirm this?
 

Goran 
Jovanovic
Omega Network 
Solutions
 





From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell 
([EMAIL PROTECTED])Sent: Friday, June 16, 2006 9:32 
PMTo: 
declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] HOLD action 
and %DATE% variable
 

To the best of my knowledge there is 
no way to customize the date.

 

Darrell

fpReview 
- The easy way to review false positives.

http://www.invariantsystems.com

 

- Original Message - 

  
  From: Goran Jovanovic 
  
  
  To: declude.junkmail@declude.com 
  
  
  Sent: Friday, 
  June 16, 2006 8:55 PM
  
  Subject: 
  [Declude.JunkMail] HOLD action and %DATE% variable
  
   
  Hi,
   
  When you 
  specify
   
  HOLD 
  F:\Hold\%DATE%
   
  The date shows up as 
  ddMMM
   
  Is there a way to 
  have this show up as mmdd as it is much easier to sort and keep 
  track?
   
  Thanks
   
  
  Goran 
  Jovanovic
  Omega Network 
  Solutions
  ---This E-mail came from the Declude.JunkMail 
  mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype 
  "unsubscribe Declude.JunkMail". The archives can be foundat 
  http://www.mail-archive.com. ---This E-mail came from the 
  Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
  [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
  can be foundat http://www.mail-archive.com. 
---This E-mail came from the 
Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
can be foundat http://www.mail-archive.com. ---This E-mail came from 
the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
can be foundat http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

RE: [Declude.JunkMail] HOLD action and %DATE% variable

[David Barker]

The manual indicates that these are for Email notifications 
NOT for the spam hold folder which is what was being referred to.David 
B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Goran JovanovicSent: 
Monday, June 19, 2006 9:57 AMTo: 
declude.junkmail@declude.comCc: 
[EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] HOLD action and 
%DATE% variable


David,
 
This is not a 
development wish list item it is a bug. Please have it put on the bug list for 
fixing.
 
Your own manual says 
that these variables are available. BTW so does the 3.0.5 
manual.
 
From the 4.0.8 
manual
 
14. E-mail 
Notifications
There are 
also a number of variables that you can use: 

  
  

  Variable

  Description
  
  

  %ALLRECIPS%

  Recipients of the E-mail
  

  %BANEXT%

  Shows 
  the file extension that was banned (for banned 
  attachments)
  

  %DATE%

  Today's date DD MMM 
  

  %EURDATE%

  Today's date DD/MM/
  

  %HEADERS%

  Inserts the headers of the E-mail with the 
  virus
  

  %INOROUT%

  "incoming" or "outgoing"
  

  %ISODATE%

  Today's date 
  -MM-DD
 
 

Goran 
Jovanovic
Omega Network 
Solutions
Tel: 416 
322-0333
Cell: 416 805-HELP 
(4357)
[EMAIL PROTECTED] 

 
 





From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David BarkerSent: Monday, June 19, 2006 8:34 
AMTo: 
declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] HOLD action 
and %DATE% variable
 
Currently the only date 
format available is %DATE% which is ddmmm I have added the request for 
different date formats to development wishlist.
David 
B
www.declude.com
 



From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran JovanovicSent: Friday, June 16, 2006 9:53 
PMTo: 
declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] HOLD action 
and %DATE% variable
Can anyone from Declude 
confirm this?
 

Goran 
Jovanovic
Omega Network 
Solutions
 





From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell 
([EMAIL PROTECTED])Sent: Friday, June 16, 2006 9:32 
PMTo: 
declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] HOLD action 
and %DATE% variable
 

To the best of my knowledge there is 
no way to customize the date.

 

Darrell

fpReview 
- The easy way to review false positives.

http://www.invariantsystems.com

 

- Original Message - 

  
  From: Goran Jovanovic 
  
  
  To: declude.junkmail@declude.com 
  
  
  Sent: Friday, 
  June 16, 2006 8:55 PM
  
  Subject: 
  [Declude.JunkMail] HOLD action and %DATE% variable
  
   
  Hi,
   
  When you 
  specify
   
  HOLD 
  F:\Hold\%DATE%
   
  The date shows up as 
  ddMMM
   
  Is there a way to 
  have this show up as mmdd as it is much easier to sort and keep 
  track?
   
  Thanks
   
  
  Goran 
  Jovanovic
  Omega Network 
  Solutions
  ---This E-mail came from the Declude.JunkMail 
  mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype 
  "unsubscribe Declude.JunkMail". The archives can be foundat 
  http://www.mail-archive.com. ---This E-mail came from the 
  Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
  [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
  can be foundat http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail 
mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], 
andtype "unsubscribe Declude.JunkMail". The archives can be foundat 
http://www.mail-archive.com. ---This E-mail came from the 
Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
can be foundat http://www.mail-archive.com. 
---This E-mail came from the 
Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
can be foundat http://www.mail-archive.com. ---This E-mail came from 
the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
can be foundat http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

RE: [Declude.JunkMail] compatibility question

[David Barker]

Declude 4.2 is fully compatible with iMail 
8.22
David 
B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Robert ShubertSent: 
Monday, June 19, 2006 11:45 AMTo: 
declude.junkmail@declude.comSubject: [Declude.JunkMail] compatibility 
question


Sorry if this is waste 
of time, but I want to be absolutely sure before I do anything to my 
server.
 
Is Declude 4.2 fully 
compatible with iMail 8.22?
 
Thanks,
 
Robert---This 
E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send 
an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". 
The archives can be foundat http://www.mail-archive.com. ---This 
E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send 
an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". 
The archives can be foundat http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

RE: [Declude.JunkMail] compatibility question

[David Barker]

Nick,
 
Here is a list of what the development team are currently working on.
Remember in each case these issues have been experienced by a relatively
small percentage of our customers and are NOT known issues, as one has to
take into account the environment and how Declude is used and configured.
 
SPAM Weights - (hold, delete actions not working under certain conditions)
Decludeproc crashing/hanging (GP1 & GP 2 errors)
Broken Images (e-mail is not scanned)
XOUTHEADER / XINHEADER incorrectly reported

* ALLOWVULNERABILITIESFROM works with user only not domain (fixed)

David B
www.declude.com
 



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick
Hayer
Sent: Monday, June 19, 2006 1:04 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] compatibility question


Hi David [Barker],

Is there a list, or would you kindly post one of the known issues with
Declude?  I'm still on 2x because of all the problems reported and what I
perceive as them not being resolved.

Thanks!

-Nick


John Doyle wrote: 

Robert
 
I"m running 8.22 hf2 and Declude 4.1.
I would not suggest going to 4.2 as I was getting some "leakage" of
mail that seemingly had not 
been scanned by declude. I could not find any record in either the
declude, or the virus log files.
I found that the headers had no declude entries. That was version
4.2 Build 12.
 
I reverted back to 4.09 and the problem resolved itself, I later
moved back to 4.1 and things still
are working well. 
 
I'd stay away from 4.2 until there is a fix.  This was reported as
not being an Imail problem, only
smartermail, but I had the same thing happen with Ipswitch. (this is
my opinion, I could be wrong)
 
I have a firewall blocking "broken" and non compliant addresses, but
still got maybe
4 or 5 per day out of 200 for my address. So I'm not sure of the
root cause. I was most worried about
no record of the email in the virus log. I still can't figure out
how they got delivered if Declude didn't 
process the mail.
 
 
John
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Behalf Of Robert Shubert
Sent: Monday, June 19, 2006 8:45 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] compatibility question



Sorry if this is waste of time, but I want to be absolutely
sure before I do anything to my server.

Is Declude 4.2 fully compatible with iMail
8.22?

Thanks,

Robert


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type "unsubscribe Declude.JunkMail". The archives can be
found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
and
type "unsubscribe Declude.JunkMail". The archives can be
found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] can't post again?

[David Barker]

Let me check and I will see if I can find the message.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc
Catuogno
Sent: Friday, June 23, 2006 8:05 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] can't post again?

I sent a sample of spam that I got to the list yesterday and it never made
it on the list... can I not post AGAIN??



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT: Declude confirm...

[David Barker]

Chuck,

Please check if the file is available now.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck
Schick
Sent: Thursday, June 22, 2006 12:54 PM
To: Declude. JunkMail
Subject: [Declude.JunkMail] OT: Declude confirm...

I was going to run Declude confirm for the list server.  It is still listed
on the Declude website as a free tool but when I go to the download the
confirm.cfg link I get a page not found error.

http://www.declude.com/version/Release/Confirm.cfg

Could someone send me the proper link or a copy of the confirm.cfg file.


Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] can't post again?

[David Barker]

I did not find the file want to try posting again ?

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc
Catuogno
Sent: Friday, June 23, 2006 8:05 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] can't post again?

I sent a sample of spam that I got to the list yesterday and it never made
it on the list... can I not post AGAIN??



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Verify code needed

[David Barker]

That's correct.

David 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(Lists)
Sent: Monday, June 26, 2006 6:53 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Verify code needed

Just to verify, when using Declude 4.x with the appropriate code, you do not
need a separate code for the Global.CFG or Virus.cfg or Hijack.cfg files,
the code is only in the declude.cfg file, correct?

John T
eServices For You

"Seek, and ye shall find!"





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Verify code needed

[David Barker]

LOL talk about being late ... *Blush*

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Tuesday, June 27, 2006 8:44 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Verify code needed

That's correct.

David 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(Lists)
Sent: Monday, June 26, 2006 6:53 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Verify code needed

Just to verify, when using Declude 4.x with the appropriate code, you do not
need a separate code for the Global.CFG or Virus.cfg or Hijack.cfg files,
the code is only in the declude.cfg file, correct?

John T
eServices For You

"Seek, and ye shall find!"





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Increasing Spool size after upgrade to 2006

[David Barker]

Will,

Yes it is how many threads are you running ?

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Friday, June 30, 2006 9:33 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Increasing Spool size after upgrade to 2006

I've upgraded to Imail 2006 and my spool directory is incrementing at the
rate of four messages per minute.  Over the last twelve hours I have
accumulated a little over 4000 message.

Is Declude compatible with Imail 2006?  I'm using Declude 4.2.12

Will




---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Increasing Spool size after upgrade to 2006

[David Barker]

If you happen to reboot your system while a message is being received, IMail
MAY leave behind the T* and the D* files. (Any R* files are orphaned 'Q'
files.) These files are not deleted automatically. 

http://support.ipswitch.com/kb/IM-19981110-DD08.htm 

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Friday, June 30, 2006 11:44 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Increasing Spool size after upgrade to 2006

Will, 

SMTPD is the process that "receives" the mail in IMAIL.  It's way before
Declude ever touches it. 

The files that you see left behind start with a "T"?  If so that means
during the smtpd process something is happening and causing the connection
to close or abort leaving those files stranded.  Can you confirm what files
are being left behind? 

Darrell 


Will writes: 

> The messages in question have similar log entries, which are as follows: 
> 
> 20060630 010514 127.0.0.1   SMTPD (b109023f8a32) [199.176.228.5]
> connect 200.79.243.42 port 4591
> 20060630 010521 127.0.0.1   SMTPD (b109023f8a32) [200.79.243.42]
> HELO 199.176.228.5
> 20060630 010527 127.0.0.1   SMTPD (b109023f8a32) [200.79.243.42]
> MAIL FROM: <[EMAIL PROTECTED]>
> 20060630 010530 127.0.0.1   SMTPD (b109023f8a32) [200.79.243.42]
> RCPT TO: <[EMAIL PROTECTED]>
> 20060630 010614 127.0.0.1   SMTPD (b109023f8a32) [200.79.243.42]
> E:\IMAIL\spool\Db109023f8a32.SMD 16903
> 
> They seem to end at this point and the D and sometimes T files are left. 
> 
> As I look at my spool directory I see about three to six files each 
> minute left behind.  All other mail is being processed and messages I 
> have sent in test have all been processed.
> 
> Will
> 
>  
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> Darrell ([EMAIL PROTECTED])
> Sent: Friday, June 30, 2006 10:57 AM
> To: declude.junkmail@declude.com
> Subject: Re: [Declude.JunkMail] Increasing Spool size after upgrade to
> 2006
> 
> Declude 4.x is compatible with 2006.  With 4000 messages in spool 
> something obviously is a miss.  Have you opened some of those messages 
> are the legit messages?  Are they outbound messages to other domains 
> or for local domains?
> If you search one of those message ID's in the IMAIL log are they 
> being attempted for delivery?  Were there any error messages for them?
> 
> Darrell
>  ---
> Check out http://www.invariantsystems.com for utilities for Declude, 
> Imail, and SmarterMail.  IMail/Declude Overflow Queue Monitoring, 
> SURBL/URI integration, MRTG Integration, and Log Parsers.
> 
> 
> Will writes:  
> 
>> It's processing mail for certain and the queue manager service is 
>> running.  It just leaves behind a few messages each minute.
>> 
>> Will
>> 
>> 
>> -Original Message-
>> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
>> Craig Edmonds
>> Sent: Friday, June 30, 2006 9:41 AM
>> To: declude.junkmail@declude.com
>> Subject: RE: [Declude.JunkMail] Increasing Spool size after upgrade 
>> to
>> 2006
>> Importance: High
>> 
>> Sure the queue manager in imail is working?  
>> 
>> 
>> Kindest Regards
>> Craig Edmonds
>> 123 Marbella Internet
>> W: www.123marbella.com
>> E : [EMAIL PROTECTED]
>>
>> 
>> 
>> -Original Message-
>> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
> Will
>> Sent: Friday, June 30, 2006 3:33 PM
>> To: declude.junkmail@declude.com
>> Subject: [Declude.JunkMail] Increasing Spool size after upgrade to
> 2006
>> 
>> I've upgraded to Imail 2006 and my spool directory is incrementing at 
>> the rate of four messages per minute.  Over the last twelve hours I 
>> have accumulated a little over 4000 message.
>> 
>> Is Declude compatible with Imail 2006?  I'm using Declude 4.2.12
>> 
>> Will
>> 
>>   
>> 
>> 
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To 
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
>> "unsubscribe Declude.JunkMail".  The archives can be found at 
>> http://www.mail-archive.com.
>> 
>>   
>> 
>>   
>> 
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To 
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
>> "unsubscribe Declude.JunkMail".  The archives can be found at 
>> http://www.mail-archive.com.
>> 
>>   
>> 
>> 
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To 
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
>> "unsubscribe Declude.JunkMail".  The archives can be found at 
>> http://www.mail-archive.com.
>> 
>  
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> 
>  
> 
> 
> ---
> 

RE: [Declude.JunkMail] New Version working so far...

[David Barker]

I don't want to get too excited just yet. I just want to get it right. Let
me know so if there is something else going on with this I can push to get
it resolved. Let me know.

David

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS -
Systems Eng. (Karl Drugge)
Sent: Thursday, July 06, 2006 5:04 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] New Version working so far...

Installed the new version this afternoon (thanks for the heads-up David !).

So far, I am doing pretty good. All messages in the error directory are
SPAM, and SPAM that would have dropped through. So, good news there !

I will probably script something that will rename the files to something
with the senders name-domain to aid in sorting out garbage.

Also, after all the beating Declude has taken over the past two months, a
well deserved 'Hell Yeah!' . We all would have liked it sooner, but I'll
take later.

It took a while, but it looks like we're all back on track. I'll know for
myself tomorrow morning. I may even turn Hijack back on


Karl Drugge
 
 
 




---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] New Version working so far...

[David Barker]

Yes this version is compatible with the latest version of IMail

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William
Stillwell
Sent: Thursday, July 06, 2006 7:03 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] New Version working so far...


Does the new version work with the new version of Imail?  


William Stillwell
Systems Architect
Professional Staffing-ABTS,Inc.
Clearwater, FL


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Thursday, July 06, 2006 5:07 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] New Version working so far...

I don't want to get too excited just yet. I just want to get it right. Let
me know so if there is something else going on with this I can push to get
it resolved. Let me know.

David

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS -
Systems Eng. (Karl Drugge)
Sent: Thursday, July 06, 2006 5:04 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] New Version working so far...

Installed the new version this afternoon (thanks for the heads-up David !).

So far, I am doing pretty good. All messages in the error directory are
SPAM, and SPAM that would have dropped through. So, good news there !

I will probably script something that will rename the files to something
with the senders name-domain to aid in sorting out garbage.

Also, after all the beating Declude has taken over the past two months, a
well deserved 'Hell Yeah!' . We all would have liked it sooner, but I'll
take later.

It took a while, but it looks like we're all back on track. I'll know for
myself tomorrow morning. I may even turn Hijack back on


Karl Drugge
 
 
 




---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Gaylisting

[David Barker]

 Funny Subject if only there was such a test... Anyways the new Declude
Gateway product will have the ability to do greylisting. But this is not
available in Declude for SM or IM

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Will
Sent: Friday, July 07, 2006 11:59 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Gaylisting

Can Declude be used to graylist?

Will




---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] ZEROHOUR

[David Barker]

ZEROHOUR is for the upcoming integration with CommTouch, we will be putting
out an email about it soon. For now it can just be ignored.

David 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Friday, July 07, 2006 2:28 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] ZEROHOUR

What is the ZEROHOUR test?  I see it in the X-Declude headers, but I don't
have it defined in any of my config files.  I don't see it mentioned in any
of the manuals either.

Gary





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

[David Barker]

Gary,

This is a SmarterMail issue. When they fail to complete the .hdr file they
write "Failed" in the .hdr as this was causing major spam leakage for
declude we decided to move  incomplete messages to the \error folder. You
could try changing the "Failed" to Written and drop the messages in the
\spool.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Monday, July 10, 2006 2:52 PM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

Now that I've installed 4.2.20, I'm getting a lot of messages in the error
folder (I'm running SmarterMail 3.3.2369).  Most of them seem to be spam,
but there are some good messages in there.  Am I now going to have to scan
this folder for false positives just like the held spam folder?

Here is an example of the .hdr file for a message that was good:

Failed
[EMAIL PROTECTED]
[EMAIL PROTECTED]
cmdspc: false
helo: ivmail1.fcc.es

What does "Failed" mean?  Is there something I can look for in the headers
of the message (in the .eml file) that would indicate this?  Is there any
way to requeue this message?


---- Original Message 
> From: "David Barker" <[EMAIL PROTECTED]>
> Sent: Friday, July 07, 2006 11:01 AM
> To: Declude.Virus@declude.com>,  Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> EVA   ADD New NONSTANDARDHDR vulnerability test. Messages found to
> have broken headers are moved to the \virus folder
> 
> EVA   FIX ALLOWVULNERABILITIESFROM (for user)
> 
> EVA   FIX BANEXT buffer overflow
> 
> SMADD When an error is found in the envelope (.hdr) file the
> message is moved to the \error folder
> 
> SMADD Decludeproc will not start without a valid domainlist.xml
> 
> SMFIX QUEUEFILE_SAVEFILE the log is showing the correct directory
> path
> 
> SMFIX Allows admin to set VIRDIR to any directory path in the
> virus.cfg
> 
> David Barker
> Product Manager
> Your Email security is our businessT
> 978.499.2933 office
> 978.988.1311 fax
> [EMAIL PROTECTED]
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

[David Barker]

Not sure who you spoke to at SmarterTools but I do NOT believe this is true.


Declude will not pick up a message until it is completed writing both the
.hdr and .eml files, that is the reason why SmarterMail while writing the
header will have the .eml file as .em_ (while writing) so that when the .hdr
is complete ie. Written then and only then will Declude pick up the file to
process it. Also you will see clearly, that the SM logs indicate a problem
long before we receive the message. 

This was a new problem introduced by SmarterMail - 4.2.20 provided a fix for
this. Again coming back to a previous post I made talking about the effects
of the Mail server on Declude. The question always comes back to who should
provide the fix, in this case we did as it was causing messages not being
scanned by Declude for spam.

I am trying to get a better understanding to the problem from SM and as soon
as I have some answers from them I will post to the lists. 

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 11, 2006 3:13 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

Here is SmarterTools take on the problem:

> Failed is written to the .hdr if the message was not succesfully 
> recieved via SMTP. For instance, if the connection is closed mid 
> transmission. These(and corresponding .emls) are normally just deleted 
> by SmarterMail. The only reason you are noticing them is because of
Declude storing them in the error folder.

The implication is that Declude is interrupting part of SmarterMail's
normail process.  Now I know this is essentially what Declude does anyway,
but shouldn't Declude know the difference between a message that has
finished SMTP and SmarterMail is ready to deliver, and a message that is
incomplete in the SMTP process and an SMTP retry is occurring so this failed
message should be ignored?  Otherwise we are going to get thousands of
unneccessary incomplete messages dumped into the error folder that is going
to do nothing other than to take up disk space.  Not to mention that if some
other type of error occurs that puts a message in the error folder, we'll
never find it because its buried under all these other superfluous messages.
Before 4.2.20, this wasn't a problem.



 Original Message 
> From: "David Barker" <[EMAIL PROTECTED]>
> Sent: Monday, July 10, 2006 3:24 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> Gary,
> 
> This is a SmarterMail issue. When they fail to complete the .hdr file 
> they write "Failed" in the .hdr as this was causing major spam leakage 
> for declude we decided to move  incomplete messages to the \error 
> folder. You could try changing the "Failed" to Written and drop the 
> messages in the \spool.
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> Gary Steiner
> Sent: Monday, July 10, 2006 2:52 PM
> To: declude.junkmail@declude.com
> Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> Now that I've installed 4.2.20, I'm getting a lot of messages in the 
> error folder (I'm running SmarterMail 3.3.2369).  Most of them seem to 
> be spam, but there are some good messages in there.  Am I now going to 
> have to scan this folder for false positives just like the held spam
folder?
> 
> Here is an example of the .hdr file for a message that was good:
> 
> Failed
> [EMAIL PROTECTED]
> [EMAIL PROTECTED]
> cmdspc: false
> helo: ivmail1.fcc.es
> 
> What does "Failed" mean?  Is there something I can look for in the 
> headers of the message (in the .eml file) that would indicate this?  
> Is there any way to requeue this message?
> 
> 
>  Original Message 
> > From: "David Barker" <[EMAIL PROTECTED]>
> > Sent: Friday, July 07, 2006 11:01 AM
> > To: Declude.Virus@declude.com>,  > Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> > 
> > EVA ADD New NONSTANDARDHDR vulnerability test. Messages
found to
> > have broken headers are moved to the \virus folder
> > 
> > EVA FIX ALLOWVULNERABILITIESFROM (for user)
> > 
> > EVA FIX BANEXT buffer overflow
> > 
> > SM  ADD When an error is found in the envelope (.hdr) file the
> > message is moved to the \error folder
> > 
> > SM  ADD Decludeproc will not start without a valid domainlist.xml
> > 
> > SM  FIX QUEUEFILE_SAVEFILE the log is showing the correct directory
> > path
> > 
&

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

[David Barker]

That is exactly what was happening prior to the fix and it created a deluge
of spam ending up in SmarterMail inboxes.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin
Bilbee
Sent: Tuesday, July 11, 2006 3:49 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

How about if the message has failed in the .hdr file declude just ignores
the file to let SmarterMail process it as it see fit??? 


Kevin Bilbee

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> David Barker
> Sent: Tuesday, July 11, 2006 12:26 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> Not sure who you spoke to at SmarterTools but I do NOT believe this is 
> true.
> 
> 
> Declude will not pick up a message until it is completed writing both 
> the .hdr and .eml files, that is the reason why SmarterMail while 
> writing the header will have the .eml file as .em_ (while writing) so 
> that when the .hdr is complete ie. Written then and only then will 
> Declude pick up the file to process it. Also you will see clearly, 
> that the SM logs indicate a problem long before we receive the message.
> 
> This was a new problem introduced by SmarterMail - 4.2.20 provided a 
> fix for this. Again coming back to a previous post I made talking 
> about the effects of the Mail server on Declude. The question always 
> comes back to who should provide the fix, in this case we did as it 
> was causing messages not being scanned by Declude for spam.
> 
> I am trying to get a better understanding to the problem from SM and 
> as soon as I have some answers from them I will post to the lists.
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> Gary Steiner
> Sent: Tuesday, July 11, 2006 3:13 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> Here is SmarterTools take on the problem:
> 
> > Failed is written to the .hdr if the message was not succesfully 
> > recieved via SMTP. For instance, if the connection is closed mid 
> > transmission. These(and corresponding .emls) are normally just
> deleted
> > by SmarterMail. The only reason you are noticing them is because of
> Declude storing them in the error folder.
> 
> The implication is that Declude is interrupting part of SmarterMail's 
> normail process.  Now I know this is essentially what Declude does 
> anyway, but shouldn't Declude know the difference between a message 
> that has finished SMTP and SmarterMail is ready to deliver, and a 
> message that is incomplete in the SMTP process and an SMTP retry is 
> occurring so this failed message should be ignored?  Otherwise we are 
> going to get thousands of unneccessary incomplete messages dumped into 
> the error folder that is going to do nothing other than to take up 
> disk space.  Not to mention that if some other type of error occurs 
> that puts a message in the error folder, we'll never find it because 
> its buried under all these other superfluous messages.
> Before 4.2.20, this wasn't a problem.
> 
> 
> 
>  Original Message 
> > From: "David Barker" <[EMAIL PROTECTED]>
> > Sent: Monday, July 10, 2006 3:24 PM
> > To: declude.junkmail@declude.com
> > Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> >
> > Gary,
> >
> > This is a SmarterMail issue. When they fail to complete the .hdr 
> > file they write "Failed" in the .hdr as this was causing major spam
> leakage
> > for declude we decided to move  incomplete messages to the \error 
> > folder. You could try changing the "Failed" to Written and drop the 
> > messages in the \spool.
> >
> > David B
> > www.declude.com
> >
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> > Gary Steiner
> > Sent: Monday, July 10, 2006 2:52 PM
> > To: declude.junkmail@declude.com
> > Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> >
> > Now that I've installed 4.2.20, I'm getting a lot of messages in the 
> > error folder (I'm running SmarterMail 3.3.2369).  Most of them seem
> to
> > be spam, but there are some good messages in there.  Am I now going
> to
> > have to scan this folder for false positives just like the held spam
> folder?
> >
> > Here is an example of the .hdr file for a message t

RE: [Declude.JunkMail] Country tests

[David Barker]

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N
Sent: Tuesday, July 11, 2006 3:57 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Country tests

I looked in the 4.x Junkmail manual, and couldn't find an authoritative 
definition of the Country tests.   I have found a number of archived 
messages, but it is tricky to know if the reason that things are documented
is that they are being deprecated or whatever.

   Is there a Kbase article or Manual page on COUNTR*.* tests, variables,
and filter options?

   Thanks,



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Country tests

[David Barker]

http://support.declude.com/Customer/KBSearch.aspx?search=COUNTRY&categoryid=
0

David B
www.declude.com
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N
Sent: Tuesday, July 11, 2006 3:57 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Country tests

I looked in the 4.x Junkmail manual, and couldn't find an authoritative 
definition of the Country tests.   I have found a number of archived 
messages, but it is tricky to know if the reason that things are documented
is that they are being deprecated or whatever.

   Is there a Kbase article or Manual page on COUNTR*.* tests, variables,
and filter options?

   Thanks,



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20

[David Barker]

No version 3 is still 3.10 are you experiencing any of the 
same problems exhibited by 4 ?
David 
B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Mark ReimerSent: 
Tuesday, July 11, 2006 4:01 PMTo: 
declude.junkmail@declude.comSubject: [Declude.JunkMail] Has a 3. 
version been released with the same fixes as 4.2 build 20


David,
Has a 3. version been released with 
the same fixes as in 4.2 build 20?
 
 
Mark 
Reimer
IT Project Manager
American CareSource
214-596-2464
 ---This 
E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send 
an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". 
The archives can be foundat http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20

[David Barker]

Yes there will be further 3.x fixes for a period of time. 
However we have encouraged customers to move to 4.x as that is where future 
development will be focused.
 
David


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: 
Tuesday, July 11, 2006 4:36 PMTo: 
declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] Has a 3. 
version been released with the same fixes as 4.2 build 20

Will there be any more 3.x releases?

  - Original Message - 
  From: 
  David 
  Barker 
  To: declude.junkmail@declude.com 
  
  Sent: Tuesday, July 11, 2006 3:07 
PM
  Subject: RE: [Declude.JunkMail] Has a 3. 
  version been released with the same fixes as 4.2 build 20
  
  No version 3 is still 3.10 are you experiencing any of 
  the same problems exhibited by 4 ?
  David 
  B
  www.declude.com
  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Mark ReimerSent: 
  Tuesday, July 11, 2006 4:01 PMTo: declude.junkmail@declude.comSubject: 
  [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 
  build 20
  
  
  David,
  Has a 3. version been released 
  with the same fixes as in 4.2 build 20?
   
   
  Mark 
  Reimer
  IT Project Manager
  American CareSource
  214-596-2464
   ---This 
  E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just 
  send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe 
  Declude.JunkMail". The archives can be foundat 
  http://www.mail-archive.com. ---This E-mail came from the 
  Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
  [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
  can be foundat http://www.mail-archive.com. ---This 
E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send 
an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". 
The archives can be foundat http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

[David Barker]

Gary,

>From time to time I feel like the Declude pinyada but in this instance we
have provided a solution for what is happening in SM. And as I have said we
are working with them to resolve this between us.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 11, 2006 5:31 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

I don't have an answer to this question.  I just know that it is a problem.


But what I find amusing is, here is another instance of two vendors of
interacting software products who point the finger at each other, both
saying "it's the other guy's fault."



 Original Message 
> From: "John T \(Lists\)" <[EMAIL PROTECTED]>
> Sent: Tuesday, July 11, 2006 5:21 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> Although I do not use SmarterMail, my take is these are like T files 
> in Imail where it is not a complete message, but for some reason 
> SmarterMail is allowing Declude to have them even though they are not
complete.
> 
> John T
> eServices For You
> 
> "Seek, and ye shall find!"
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> > Gary Steiner
> > Sent: Tuesday, July 11, 2006 12:13 PM
> > To: declude.junkmail@declude.com
> > Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> > 
> > Here is SmarterTools take on the problem:
> > 
> > > Failed is written to the .hdr if the message was not succesfully
> recieved via SMTP.
> > For
> > > instance, if the connection is closed mid transmission. These(and
> corresponding
> > .emls) are
> > > normally just deleted by SmarterMail. The only reason you are 
> > > noticing
> them is
> > because of
> > > Declude storing them in the error folder.
> > 
> > The implication is that Declude is interrupting part of 
> > SmarterMail's
> normail process.
> > Now I know this is essentially what Declude does anyway, but 
> > shouldn't
> Declude know
> > the difference between a message that has finished SMTP and 
> > SmarterMail is
> ready to
> > deliver, and a message that is incomplete in the SMTP process and an 
> > SMTP
> retry is
> > occurring so this failed message should be ignored?  Otherwise we 
> > are
> going to get
> > thousands of unneccessary incomplete messages dumped into the error 
> > folder
> that is
> > going to do nothing other than to take up disk space.  Not to 
> > mention that
> if some
> > other type of error occurs that puts a message in the error folder, 
> > we'll
> never find it
> > because its buried under all these other superfluous messages.  
> > Before
> 4.2.20, this
> > wasn't a problem.
> > 
> > 
> > 
> >  Original Message 
> > > From: "David Barker" <[EMAIL PROTECTED]>
> > > Sent: Monday, July 10, 2006 3:24 PM
> > > To: declude.junkmail@declude.com
> > > Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> > >
> > > Gary,
> > >
> > > This is a SmarterMail issue. When they fail to complete the .hdr 
> > > file
> they
> > > write "Failed" in the .hdr as this was causing major spam leakage 
> > > for declude we decided to move  incomplete messages to the \error
folder.
> You
> > > could try changing the "Failed" to Written and drop the messages 
> > > in the \spool.
> > >
> > > David B
> > > www.declude.com
> > >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf 
> > > Of Gary Steiner
> > > Sent: Monday, July 10, 2006 2:52 PM
> > > To: declude.junkmail@declude.com
> > > Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> > >
> > > Now that I've installed 4.2.20, I'm getting a lot of messages in 
> > > the
> error
> > > folder (I'm running SmarterMail 3.3.2369).  Most of them seem to 
> > > be
> spam,
> > > but there are some good messages in there.  Am I now going to have 
> > > to
> scan
> > > this folder for false positives just like the held spam folder?
> > >
> > > Here is an example of the .hdr file for a message that was good:
> > >
> >

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

[David Barker]

Gary,

If we gave you the option to delete these messages (as SmarterMail should be
doing) rather than move them to the \error directory would that solve your
problem ?

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Wednesday, July 12, 2006 3:41 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

As far as I'm concerned it's not a solution.  SmarterMail deleting these
messages was not a problem for me, Declude dumping them into the error
folder is.  I wasn't having a problem before 4.2.20, now I am.

Everyone in support has their stint as the piñada.  My users don't know who
SmarterTools or Declude are, they just know when they don't get their
messages or messages they send don't reach their destination.  But they know
who I am, so I have to hold their hands and hear their cries and then take
it back to SmarterTools and Declude.  And believe me, my users really know
how to hit a piñada because most of them are Spanish. :)

Another interesting thing is, before the decision was made to put this "fix"
in a release version, didn't anyone foresee that dumping all these
previously deleted files into the error folder would cause a problem?  As
soon as all those messages started showing up in my error directory it
became pretty obvious.  Seems that this work you mention that Declude is
doing with SmarterMail to resolve this problem should have been done before
the "fix" was put into 4.2.20.


---- Original Message 
> From: "David Barker" <[EMAIL PROTECTED]>
> Sent: Tuesday, July 11, 2006 5:49 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> Gary,
> 
> From time to time I feel like the Declude pinyada but in this instance 
> we have provided a solution for what is happening in SM. And as I have 
> said we are working with them to resolve this between us.
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> Gary Steiner
> Sent: Tuesday, July 11, 2006 5:31 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> I don't have an answer to this question.  I just know that it is a
problem.
> 
> 
> But what I find amusing is, here is another instance of two vendors of 
> interacting software products who point the finger at each other, both 
> saying "it's the other guy's fault."
> 
> 
> 
>  Original Message 
> > From: "John T \(Lists\)" <[EMAIL PROTECTED]>
> > Sent: Tuesday, July 11, 2006 5:21 PM
> > To: declude.junkmail@declude.com
> > Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> > 
> > Although I do not use SmarterMail, my take is these are like T files 
> > in Imail where it is not a complete message, but for some reason 
> > SmarterMail is allowing Declude to have them even though they are 
> > not
> complete.
> > 
> > John T
> > eServices For You
> > 
> > "Seek, and ye shall find!"
> > 
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf 
> > > Of Gary Steiner
> > > Sent: Tuesday, July 11, 2006 12:13 PM
> > > To: declude.junkmail@declude.com
> > > Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> > > 
> > > Here is SmarterTools take on the problem:
> > > 
> > > > Failed is written to the .hdr if the message was not succesfully
> > recieved via SMTP.
> > > For
> > > > instance, if the connection is closed mid transmission. 
> > > > These(and
> > corresponding
> > > .emls) are
> > > > normally just deleted by SmarterMail. The only reason you are 
> > > > noticing
> > them is
> > > because of
> > > > Declude storing them in the error folder.
> > > 
> > > The implication is that Declude is interrupting part of 
> > > SmarterMail's
> > normail process.
> > > Now I know this is essentially what Declude does anyway, but 
> > > shouldn't
> > Declude know
> > > the difference between a message that has finished SMTP and 
> > > SmarterMail is
> > ready to
> > > deliver, and a message that is incomplete in the SMTP process and 
> > > an SMTP
> > retry is
> > > occurring so this failed message should be ignored?  Otherwise we 
> > > are
> > going to 

RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

[David Barker]

The Program Files\Declude is a temp directory that can be 
deleted after the install. The original purpose of this directory was to make 
available the latest configs as we do not overwrite your configs. This has since 
been removed in version 4.x where you will find a \Declude\Resources directory 
which has the same purpose.
David 
B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Andy SchmidtSent: 
Wednesday, July 12, 2006 2:36 PMTo: 
Declude.JunkMail@declude.comSubject: [Declude.JunkMail] Trying to 
install Declude 3.1.20 anew

Hi,
 
I'm trying to set up a server from scratch and thus 
downloaded and ran:
 
Declude_IM_N310.exe
 
and chose the option to let it do its install (rather than 
the option for "experienced" admins). 
PS - that screen has a typo!
 
The setup created a 

 
    C:\Program Files\Declude 

 
folder that contains just the 5 config files it also 
created the SAME files in:
 
    
D:\Imail\Declude
 
together with binaries and the various other Declude 
files.
 
I'm at loss! 
 
Which location is the "right" one for the config files 
(I'm assuming the D:\Imail\Declude)?
 
What's the point of creating a "dummy" Folder in 
the C:\Program Files\ that contains no programs and that contains files that are 
not being used at all (assuming that being the 
case)?
 
Should I be deleting this Program Files folder to avoid 
confusion when someone else maintains this 
server?
 
Come on, the cold war has been over since Reagan - are 
we still trying to confuse the Russians?

Best 
RegardsAndy SchmidtPhone:  +1 201 934-3414 x20 
(Business)Fax:    +1 201 934-9206 
 


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of 
MattSent: Tuesday, May 23, 2006 03:25 PMTo: 
Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] 
Experience with 4.x
Andrew,Thanks for your notes and their history.I'm 
using the following settings right now:
THREADS        
  30WAITFORMAIL    500WAITFORTHREADS    
      200WAITBETWEENTHREADS    
  100WINSOCKCLEANUP        
  OFFINVITEFIX    ONAUTOREVIEW    
      ONThere are a few reasons for trying these 
values.
THREADS 30 - I'm pretty confident that dual 3.2 Ghz Xeons 
  and RAID can only handle 30 threads with average messages.  In reality, 
  one single message can spike the system to 100%, but these are uncommon.  
  I figure that if I open this up too wide and I am dealing with a backup or 
  something, launching more threads when at 100% CPU utilization will actually 
  slow the system down.  This was the same with 2.x and before.  There 
  is added overhead to managing threads and you don't want that to happen on top 
  of 100% CPU utilization.  I am going to back up my server later tonight 
  to see if I can't find what the magic number is since I don't want to be below 
  that magic number, and it would probably be best to be a little above 
  it.WAITFORMAIL 500 - On my server, this never kicks in, but if 
  it did, it wouldn't make sense to delay for too long because I could build up 
  messages.  A half second seems good.WAITFORTHREADS 200 - 
  This apparently kicks in only when I reach my thread limit; sort of like a 
  throttle.  I don't want it to be too long because this should only happen 
  when I am hammered, but it is wise not to keep hammering when you are at 
  100%.  Sort of a mixed bag choice here.WAITBETWEENTHREADS 
  100 - I see this setting as being the biggest issue with sizing a 
  server.  Setting it at 100 ms means that I can only handle 10 messages 
  per second, and this establishes an upper limit for what the server can 
  do.   I currently average about 5 messages per second coming from my 
  gateways at peak hours, so I figured that to be safe, I should double that 
  value.INVITEFIX ON - I have it on because it comes on by 
  default and I don't know any better.  I know nothing about the cause for 
  needing this outside of brief comments.  It seems strange that my Declude 
  setup could ruin an invitation unless I was using footers.  If this is 
  only triggered by footer use, I would like to know so that I could turn it 
  off.  I would imagine that this causes extra load to do the 
  check.AUTOREVIEW ON - I have this on for the same reason that 
  Andrew pointed out.  When I restart Decludeproc, messages land in my 
  review folder, and I don't wish to keep manually fishing things out.  If 
  there is an issue with looping, it would be wise for Declude to make this only 
  trigger say every 15 minutes instead of more regularly.Feel 
free to add to this if you 
want.MattColbeck, Andrew 
wrote: 

  
  I'd second that... on both the observed behaviour and the 
  request for documentation.
   
  I'm attaching my highly commented declude.cfg 
  as a reasonable sample.
   
  Andrew 8)
   
   
  


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]] 
On Behalf Of MattSent: Tuesday, May 23, 2006 10:36 
AMTo: Declude.JunkMail@declude.comSubject: 
Re: [Declude.JunkMail] 

RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

[David Barker]

Andy,
 
BANEZIPEXTS
This option has one parameter, ON, which indicates that Declude Virus should
look within encrypted .ZIP files to see if there are files whose extensions
are blocked with the BANEXT option. If so, they are banned.

This is still available in Declude and I will update the virus.cfg

AUTOFORGE   
his option has one parameter, ON, which is called by the ScanFiles function
for E-mails that contain a virus.  This function checks with our Forging
Virus Database to see if the virus that was detected is a forging virus, to
determine if E-mail notifications should be sent. 

As far as I know this still works, although majority of customers do not
send virus notifications.

David B
www.declude.com


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 3:09 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


Hi Dave,
 
thanks.
 
Next question:
 
I noticed that your Virus.CFG is missing two options from Version 2:
 
AUTOFORGE ON
 
BANEZIPEXTS ON
 
 
If I recall correctly, the idea was that:
BANZIPEXTS OFF
# BANEXT  EZIP
BANEZIPEXTS ON
 
would PERMIT banned extensions inside zipped files (where they could be
scanned), but DENY banned extensions if they were contained inside encrypted
zipped files.
 
Where those options forgotten in your config file - or are they no longer
available in Version 3?


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 

 



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Wednesday, July 12, 2006 02:43 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


The Program Files\Declude is a temp directory that can be deleted after the
install. The original purpose of this directory was to make available the
latest configs as we do not overwrite your configs. This has since been
removed in version 4.x where you will find a \Declude\Resources directory
which has the same purpose.

David B
www.declude.com



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 2:36 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


Hi,
 
I'm trying to set up a server from scratch and thus downloaded and ran:
 
Declude_IM_N310.exe
 
and chose the option to let it do its install (rather than the option for
"experienced" admins). 
PS - that screen has a typo!
 
The setup created a 
 
C:\Program Files\Declude 
 
folder that contains just the 5 config files it also created the SAME files
in:
 
D:\Imail\Declude
 
together with binaries and the various other Declude files.
 
I'm at loss! 
 
Which location is the "right" one for the config files (I'm assuming the
D:\Imail\Declude)?
 
What's the point of creating a "dummy" Folder in the C:\Program Files\ that
contains no programs and that contains files that are not being used at all
(assuming that being the case)?
 
Should I be deleting this Program Files folder to avoid confusion when
someone else maintains this server?
 
Come on, the cold war has been over since Reagan - are we still trying to
confuse the Russians?


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 

 



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Tuesday, May 23, 2006 03:25 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Experience with 4.x


Andrew,

Thanks for your notes and their history.

I'm using the following settings right now:


THREADS30
WAITFORMAIL500
WAITFORTHREADS200
WAITBETWEENTHREADS100
WINSOCKCLEANUPOFF
INVITEFIXON
AUTOREVIEWON


There are a few reasons for trying these values.


THREADS 30 - I'm pretty confident that dual 3.2 Ghz Xeons and RAID
can only handle 30 threads with average messages.  In reality, one single
message can spike the system to 100%, but these are uncommon.  I figure that
if I open this up too wide and I am dealing with a backup or something,
launching more threads when at 100% CPU utilization will actually slow the
system down.  This was the same with 2.x and before.  There is added
overhead to managing threads and you don't want that to happen on top of
100% CPU utilization.  I am going to back up my server later tonight to see
if I can't find what the magic number is since I don't want to be below that
magic number, and it would probably be best to be a little above it.

WAITFORMAIL 500 - On my server, this never kicks in, but if it did,
it wouldn't make sen

RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

[David Barker]

When the decludeproc services start under your windows services and the
first email is processed. A file call diags.txt is created in your \Declude
directory.
This should contain the version and diagnostics. The valid options on
decludeproc from the cmd prompt are:

Decludeproc -v   displays the version and build

Decludeproc -i   installs the decludeproc service

Decludeproc -u   uninstalls the decludeproc service

David B
www.declude.com


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 3:43 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


Dave - 
 
That's what I call catch 22:
 
D:\IMail>decludeproc -diag
Invalid command line parameter:
-install Install Declude
-diagPrint diagnostics

Hm - so let's see, after "-install", I used "-diag" to figure out what's
wrong. But, "-diag" is invalid. The ony valid parameters are... "-install"
and "-diag"?


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 

 



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 03:09 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


Hi Dave,
 
thanks.
 
Next question:
 
I noticed that your Virus.CFG is missing two options from Version 2:
 
AUTOFORGE ON
 
BANEZIPEXTS ON
 
 
If I recall correctly, the idea was that:
BANZIPEXTS OFF
# BANEXT  EZIP
BANEZIPEXTS ON
 
would PERMIT banned extensions inside zipped files (where they could be
scanned), but DENY banned extensions if they were contained inside encrypted
zipped files.
 
Where those options forgotten in your config file - or are they no longer
available in Version 3?


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 

 

____

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Wednesday, July 12, 2006 02:43 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


The Program Files\Declude is a temp directory that can be deleted after the
install. The original purpose of this directory was to make available the
latest configs as we do not overwrite your configs. This has since been
removed in version 4.x where you will find a \Declude\Resources directory
which has the same purpose.

David B
www.declude.com



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 2:36 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


Hi,
 
I'm trying to set up a server from scratch and thus downloaded and ran:
 
Declude_IM_N310.exe
 
and chose the option to let it do its install (rather than the option for
"experienced" admins). 
PS - that screen has a typo!
 
The setup created a 
 
C:\Program Files\Declude 
 
folder that contains just the 5 config files it also created the SAME files
in:
 
D:\Imail\Declude
 
together with binaries and the various other Declude files.
 
I'm at loss! 
 
Which location is the "right" one for the config files (I'm assuming the
D:\Imail\Declude)?
 
What's the point of creating a "dummy" Folder in the C:\Program Files\ that
contains no programs and that contains files that are not being used at all
(assuming that being the case)?
 
Should I be deleting this Program Files folder to avoid confusion when
someone else maintains this server?
 
Come on, the cold war has been over since Reagan - are we still trying to
confuse the Russians?


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 

 



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Tuesday, May 23, 2006 03:25 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Experience with 4.x


Andrew,

Thanks for your notes and their history.

I'm using the following settings right now:


THREADS30
WAITFORMAIL500
WAITFORTHREADS200
WAITBETWEENTHREADS100
WINSOCKCLEANUPOFF
INVITEFIXON
AUTOREVIEWON


There are a few reasons for trying these values.


THREADS 30 - I'm pretty confident that dual 3.2 Ghz Xeons and RAID
can only handle 30 threads with average messages.  In reality, one single
message can spike the system to 100%, but these are uncommon.  I figure that
if I open this up too wide and I am dealing with a backup or something,
launching more threads when at 100% CPU utilization will actually slow the
system down.  This was the same with 2.x and before.  There i

RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

[David Barker]

Let me clarify what you are asking... Are you running version 3.x or 4.x of
Declude ? 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 4:03 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

Hi,

No - it's NOT in the Declude.cfg.

In fact, your sample Declude.cfg doesn't have anyplace to put the config
code:

THREADS 15
WAITFORMAIL 5000
#INVITEFIX  ON
#WAITFORTHREADS 1500
#WAITBETWEENTHREADS 1
#AUTOREVIEW ON


I was first trying to get the virus portion to work. So I ONLY had the code
in VIRUS.CFG as per your sample file:

# This Code is only required for IMail
CODE I924x----4887

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 


-Original Message-----
From: David Barker [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 12, 2006 03:55 PM
To: 'Andy Schmidt'
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

It should cover virus. Is your code in the declude.cfg ? Can you send me
your diags.txt

David 

-Original Message-
From: Andy Schmidt [mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 12, 2006 3:48 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

Hi Dave:

This one off-list - since it includes the product key.

I got this off your web site:

 Host Name: MAIL..COM   
 Product/KeyI924x----4887 

Result in Console.txt:

 07/12/2006 15:45:50.078 q516901790351.smd
 Error: Invalid Declude Virus activation code
[I924x----4

Does this particular license code NOT cover Declude Virus?

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 






---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

[David Barker]

If it is incorrect as you have pointed out, yes it will need to be fixed.

David 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 4:09 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

Hi Dave,

Uh - okay, in the meantime I n noticed the Diag.txt.  

Am I misunderstanding -- or is the DecludeProc.exe prompt incorrect and
needs to be fixed as well?

If only -v, -i and -u are valid command line options, then it's little help
text:

 Invalid command line parameter:
 -install Install Declude
 -diagPrint diagnostics

is not factual?

It should read:

 Invalid command line parameter. Valid options are:
 -v   displays the version and build
 -i   installs the decludeproc service
 -u   uninstalls the decludeproc service



Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Wednesday, July 12, 2006 03:53 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

When the decludeproc services start under your windows services and the
first email is processed. A file call diags.txt is created in your \Declude
directory.
This should contain the version and diagnostics. The valid options on
decludeproc from the cmd prompt are:

Decludeproc -v   displays the version and build

Decludeproc -i   installs the decludeproc service

Decludeproc -u   uninstalls the decludeproc service

David B
www.declude.com


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 3:43 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


Dave - 
 
That's what I call catch 22:
 
D:\IMail>decludeproc -diag
Invalid command line parameter:
-install Install Declude
-diagPrint diagnostics

Hm - so let's see, after "-install", I used "-diag" to figure out what's
wrong. But, "-diag" is invalid. The ony valid parameters are... "-install"
and "-diag"?


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 

 



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 03:09 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


Hi Dave,
 
thanks.
 
Next question:
 
I noticed that your Virus.CFG is missing two options from Version 2:
 
AUTOFORGE ON
 
BANEZIPEXTS ON
 
 
If I recall correctly, the idea was that:
BANZIPEXTS OFF
# BANEXT  EZIP
BANEZIPEXTS ON
 
would PERMIT banned extensions inside zipped files (where they could be
scanned), but DENY banned extensions if they were contained inside encrypted
zipped files.
 
Where those options forgotten in your config file - or are they no longer
available in Version 3?


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 

 

____

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David
Barker
Sent: Wednesday, July 12, 2006 02:43 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


The Program Files\Declude is a temp directory that can be deleted after the
install. The original purpose of this directory was to make available the
latest configs as we do not overwrite your configs. This has since been
removed in version 4.x where you will find a \Declude\Resources directory
which has the same purpose.

David B
www.declude.com



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 2:36 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Trying to install Declude 3.1.20 anew


Hi,
 
I'm trying to set up a server from scratch and thus downloaded and ran:
 
Declude_IM_N310.exe
 
and chose the option to let it do its install (rather than the option for
"experienced" admins). 
PS - that screen has a typo!
 
The setup created a 
 
C:\Program Files\Declude 
 
folder that contains just the 5 config files it also created the SAME files
in:
 
D:\Imail\Declude
 
together with binaries and the various other Declude files.
 
I'm at loss! 
 
Which location is the "right" one for the config files (I'm assuming the
D:\Imail\Declude)?
 
What's the point of creating a "dummy" Folder in the C:\Program Files\ that
contains no programs and that contains files that are not being used at all
(assuming that being the case)?
 
Should I be deleting this Program Files folder to avoid confusion when
someone else maintains this server?
 
Come on

RE: [Declude.JunkMail] Latest Global.cfg / Virus.cfg

[David Barker]

Check if you have a \Declude\Resource directory.

David 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: Wednesday, July 12, 2006 4:25 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Latest Global.cfg / Virus.cfg

I just did the "upgrade" version to 4.2.20 and it did not drop a copy of the
new config files into a c:\/d:\/e:\ program files directory. 

David - is there a place where I can grab a copy of these for review? 

Darrell 

 ---
Check out http://www.invariantsystems.com for utilities for Declude, Imail,
mxGuard, and ORF.  IMail/Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers.


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Trying to install Declude 4.2.20

[David Barker]

The built in scanner works as scanner "0" so that your scanner 1 and 2 would
be as it has always been.

If you are just running MacAfee as you show try using:

SCANFILEC:\Progra~1\Common~1\Networ~1\Engine\SCAN.EXE
VIRUSCODE   13
REPORT  Found
 
Im not sure what the  /LOAD D:\IMAIL\Declude\SCAN.CFG is used for ?

David

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
Schmidt
Sent: Wednesday, July 12, 2006 5:21 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Trying to install Declude 4.2.20

 
Hi Dave,

Okay - another try...

A) Is the "built-in" scanner considered the scanner #1 and any additional"
scanner have to be set up as the #2 scanner, etc.  Or are the "external"
scanners counting from 1?

B) I defined McAfee as the external scanner

SCANFILE2   C:\Progra~1\Common~1\Networ~1\Engine\SCAN.EXE /LOAD
D:\IMAIL\Declude\SCAN.CFG
VIRUSCODE2  13
REPORT2 Found

I copied and pasted the executable to the command line window confirm that
it is being found:

D:\IMail>C:\Progra~1\Common~1\Networ~1\Engine\SCAN.EXE
McAfee VirusScan for Win32 v4.40.0
Copyright (c) 1992-2004 Networks Associates Technology Inc. All rights
reserved.
(408) 988-3832  EVALUATION COPY - Sep 23 2004

Scan engine v4.4.00 for Win32.
Virus data file v4804 created Jul 11 2006 Scanning for 200919 viruses,
trojans and variants.

However, Declude reports:

07/12/2006 17:11:51.000 q6590017100aa.smd Vulnerability flags = 0
07/12/2006 17:11:51.484 q6590017100aa.smd Your virus scanner DOES NOT
EXIST (at  C:\IMail\spool\proc\work\D65900~1.VIR\); NOT SCANNING
ATTACHMENTS! [2] Error String: [The system cannot find the file specified.]
07/12/2006 17:11:51.500 q6590017100aa.smd Scanned: Error starting
scanner


Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

[David Barker]

Who's your Daddy!! 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick
Hayer
Sent: Wednesday, July 12, 2006 5:11 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

Andy Schmidt wrote:

>Hi Dave,
>
>Sorry everyone -- my mistake. 
>  
>
no biggie. That is what David, our pinada, is for.  :)

-Nick



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

[David Barker]

This is the answer from SmarterTools:

"Messages with a “failed” status we would recommend just deleting those.
They represent messages that didn’t finish coming in via SMTP for a variety
of reasons – one could be that the connection terminated before the message
was transferred, another could be that the message violated the max message
size for the server."

So rather than move these messages to the Declude\Error folder in the next
release we will delete these messages as suggested by SmarterTools.

David B
www.declude.com
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Wednesday, July 12, 2006 4:04 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

I don't know.  I'm still trying to understand the "problem".  Declude added
a "fix" to 4.2.20 that moves files to the error directory that they say were
coming through as spam leakage.  SmarterTools says these files are normally
deleted by SmarterMail, and and the only reason I see them in the error
directory is that Declude puts them there before SmarterMail has a chance to
delete them.  Now these two statements contradict each other.  Either
SmarterMail was deleting these files or it was not.  Since I never saw them
before 4.23.20, I have to assume that SmarterMail was deleting them.  So if
SmarterMail was deleting the files, then why did Declude decide to intercept
them in 4.2.20 and prevent SmarterMail from deleting them?

Hopefully, since as you say Declude is working with SmarterTools "to resolve
this between us" we will see a new fix soon that will make this issue moot.



---- Original Message 
> From: "David Barker" <[EMAIL PROTECTED]>
> Sent: Wednesday, July 12, 2006 7:48 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> Gary,
> 
> If we gave you the option to delete these messages (as SmarterMail 
> should be
> doing) rather than move them to the \error directory would that solve 
> your problem ?
> 
> David B
> www.declude.com
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> Gary Steiner
> Sent: Wednesday, July 12, 2006 3:41 AM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> As far as I'm concerned it's not a solution.  SmarterMail deleting 
> these messages was not a problem for me, Declude dumping them into the 
> error folder is.  I wasn't having a problem before 4.2.20, now I am.
> 
> Everyone in support has their stint as the piñada.  My users don't 
> know who SmarterTools or Declude are, they just know when they don't 
> get their messages or messages they send don't reach their 
> destination.  But they know who I am, so I have to hold their hands 
> and hear their cries and then take it back to SmarterTools and 
> Declude.  And believe me, my users really know how to hit a piñada 
> because most of them are Spanish. :)
> 
> Another interesting thing is, before the decision was made to put this
"fix"
> in a release version, didn't anyone foresee that dumping all these 
> previously deleted files into the error folder would cause a problem?  
> As soon as all those messages started showing up in my error directory 
> it became pretty obvious.  Seems that this work you mention that 
> Declude is doing with SmarterMail to resolve this problem should have 
> been done before the "fix" was put into 4.2.20.
> 
> 
>  Original Message 
> > From: "David Barker" <[EMAIL PROTECTED]>
> > Sent: Tuesday, July 11, 2006 5:49 PM
> > To: declude.junkmail@declude.com
> > Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> > 
> > Gary,
> > 
> > From time to time I feel like the Declude pinyada but in this 
> > instance we have provided a solution for what is happening in SM. 
> > And as I have said we are working with them to resolve this between us.
> > 
> > David B
> > www.declude.com
> > 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> > Gary Steiner
> > Sent: Tuesday, July 11, 2006 5:31 PM
> > To: declude.junkmail@declude.com
> > Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> > 
> > I don't have an answer to this question.  I just know that it is a
> problem.
> > 
> > 
> > But what I find amusing is, here is another instance of two vendors 
> > of interacting software products who point the finger at each other, 
> > both say

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

[David Barker]

SmarterMail was not deleting these files and were handing them to Declude.
That is what was causing the problem. Yes you are correct they should not
have been handing these messages to Declude in the first place.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(Lists)
Sent: Wednesday, July 12, 2006 5:36 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

So SmarterMail says they were deleting them. My question is when? Files
related to an incomplete e-mail session should be deleted right away at the
close of the session, not left lying around for another program to pick them
up.

Could that be what is happening, SmarterMail was deleting them on a cycle or
time basis rather than properly at the close of the "failed" session?

John T
eServices For You

"Seek, and ye shall find!"

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> Gary Steiner
> Sent: Wednesday, July 12, 2006 1:04 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> 
> I don't know.  I'm still trying to understand the "problem".  Declude
added a "fix" to
> 4.2.20 that moves files to the error directory that they say were 
> coming
through as
> spam leakage.  SmarterTools says these files are normally deleted by
SmarterMail,
> and and the only reason I see them in the error directory is that 
> Declude
puts them
> there before SmarterMail has a chance to delete them.  Now these two
statements
> contradict each other.  Either SmarterMail was deleting these files or 
> it
was not.  Since
> I never saw them before 4.23.20, I have to assume that SmarterMail was
deleting
> them.  So if SmarterMail was deleting the files, then why did Declude
decide to
> intercept them in 4.2.20 and prevent SmarterMail from deleting them?
> 
> Hopefully, since as you say Declude is working with SmarterTools "to
resolve this
> between us" we will see a new fix soon that will make this issue moot.
> 
> 
> 
>  Original Message 
> > From: "David Barker" <[EMAIL PROTECTED]>
> > Sent: Wednesday, July 12, 2006 7:48 AM
> > To: declude.junkmail@declude.com
> > Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> >
> > Gary,
> >
> > If we gave you the option to delete these messages (as SmarterMail
should be
> > doing) rather than move them to the \error directory would that 
> > solve
your
> > problem ?
> >
> > David B
> > www.declude.com
> >
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> > Gary Steiner
> > Sent: Wednesday, July 12, 2006 3:41 AM
> > To: declude.junkmail@declude.com
> > Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> >
> > As far as I'm concerned it's not a solution.  SmarterMail deleting 
> > these messages was not a problem for me, Declude dumping them into 
> > the error folder is.  I wasn't having a problem before 4.2.20, now I am.
> >
> > Everyone in support has their stint as the piñada.  My users don't 
> > know
who
> > SmarterTools or Declude are, they just know when they don't get 
> > their messages or messages they send don't reach their destination.  
> > But they
know
> > who I am, so I have to hold their hands and hear their cries and 
> > then
take
> > it back to SmarterTools and Declude.  And believe me, my users 
> > really
know
> > how to hit a piñada because most of them are Spanish. :)
> >
> > Another interesting thing is, before the decision was made to put 
> > this
"fix"
> > in a release version, didn't anyone foresee that dumping all these 
> > previously deleted files into the error folder would cause a problem?
As
> > soon as all those messages started showing up in my error directory 
> > it became pretty obvious.  Seems that this work you mention that 
> > Declude is doing with SmarterMail to resolve this problem should 
> > have been done
before
> > the "fix" was put into 4.2.20.
> >
> >
> >  Original Message 
> > > From: "David Barker" <[EMAIL PROTECTED]>
> > > Sent: Tuesday, July 11, 2006 5:49 PM
> > > To: declude.junkmail@declude.com
> > > Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
> > >
> > > Gary,
> > >
> > > From time to time I feel like the Declude pinyada but in this 
> >

RE: [Declude.JunkMail] F-Prot Licensing

[David Barker]

4.2.20 With integrated AVG and included with the 
Service Agreement / Subscription
David B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Markus GuflerSent: 
Friday, July 14, 2006 6:34 PMTo: 
declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] F-Prot 
Licensing

This 
pricing is just another way of saying "Go Away".
Suggestions?
 
Markus---This E-mail came from the 
Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives 
can be foundat http://www.mail-archive.com. 

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

RE: [Declude.JunkMail] I Must Be Blind

[David Barker]

Rob,

1. "Tomorrow, July 18th, we will be announcing the integration of Commtouch"
this is a pre-notification, the prices will be there tommorow, for those who
have valid service agreements.

2. This service is both competitive and complementary to Message Sniffer, in
the way that one can still continue to use Message Sniffer with CommTouch,
but CommTouch provides real time spam protection much like Message Sniffer
and more.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert
Grosshandler
Sent: Monday, July 17, 2006 11:50 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] I Must Be Blind

1) Commtouch offering - I got to My Account, and I don't see anything to
give me a hint on pricing.  Pointer requested!
2) Is this service competitive or complementary to Message Sniffer?

Thanks,

Rob



---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] [Fwd: [0A6-0C4E22B9-4D5B] ZEROHOUR]

[David Barker]

Nick,
 
ZERHOUR currently cannot be removed from the Headers. I 
have put in for this change.
David 
B
www.declude.com


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Nick HayerSent: 
Monday, July 17, 2006 12:18 PMTo: 
Declude.JunkMail@declude.comSubject: [Declude.JunkMail] [Fwd: 
[0A6-0C4E22B9-4D5B] ZEROHOUR]
David of Declude-Do you know how to remove ZEROHOUR from the 
headers?  I obviously do not have this test in my config and HIDETESTS does 
not work.-Nick Original Message  

  
  
Subject: 
[0A6-0C4E22B9-4D5B] ZEROHOUR
  
Date: 
Mon, 17 Jul 2006 10:37:02 -0500
  
From: 
[EMAIL PROTECTED]
  
Reply-To: 
[EMAIL PROTECTED]
  
To: 
<[EMAIL PROTECTED]>Nick:Comment 
out the test in your global.cfg and default.junkmail file. Thanks!If you 
have any further questions, please do not hesitate to contact me either by email 
or call Toll free 1-866-332-5833 Ext.7008Linda PagilloTechnical 
Support EngineerDeclude - 
Your Email 
security is our 
businessT978.499.2933 office978.477.8930 
efax[EMAIL PROTECTED]www.declude.com

From: Nick Hayer <[EMAIL PROTECTED]>Sent: 
Mon, 17 Jul 2006 10:28:09 -0500To: [EMAIL PROTECTED]Subject: 
ZEROHOURHow can this me eliminated from the headers?-Nick 
---This E-mail came from the Declude.JunkMail mailing list. 
Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype 
"unsubscribe Declude.JunkMail". The archives can be foundat 
http://www.mail-archive.com.

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.

RE: [Declude.JunkMail] F-Prot Licensing

[David Barker]

Just a comment on this Licensing thread

F-Prot like all virus companies charge the extra $ because of the different
process used when scanning email as opposed to regular scanning. Declude has
this process and functionality built in to the Declude product which enables
customers to use a command line scanners like ClamWin to scan their email in
the same way, as virus companies mail server versions. 

Not to mention AVG which is built into Declude Security Suite, which
hopefully customers will now begin to really understand the value and
financial benefits to this integration.

David B
www.declude.com







From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave
Beckstrom
Sent: Monday, July 17, 2006 2:22 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] F-Prot Licensing



I sent an email to F-Prot telling them that I am not renewing because of
their price change.  They replied back basically saying they didn't care and
audios.

 

They are going to lose a lot of customers.  I guess they would rather not
have a little money from a lot of customers instead of no money from a few
customers.

 

 

 



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Monday, July 17, 2006 9:25 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] F-Prot Licensing

 

Clamav with the runclamd service.

 

Free. Fast. and the Sanesecurity anti-phish signatures.

- Original Message - 

From: Markus Gufler   

To: declude.junkmail@declude.com 

Sent: Friday, July 14, 2006 5:33 PM

Subject: RE: [Declude.JunkMail] F-Prot Licensing

 

This pricing is just another way of saying "Go Away".

Suggestions?

 

Markus


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude 4.3

[David Barker]

There are restrictions on CommTouch being used by Service Providers we had
to ensure that NEW customers (ie. Service Providers After 1 June 06)
understand the licensing restrictions.

Current Service Providers (ie. Before 1 June 06) are under no restrictions
for using Declude; only the CommTouch add-in component.

However we have managed to come to an agreement with CommTouch to enable our
legacy customers (ie. Service Providers Before 1 June 06) to take advantage
of CommTouch under a revenue share program, this program is not being forced
onto legacy customers but will be an opportunity for us to help you increase
revenues in your business, by providing you with new product like the
Declude Gateway which would be independent of Imail/SmarterMail and will
include CommTouch.

David B
www.declude.com



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(Lists)
Sent: Tuesday, July 18, 2006 3:02 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Declude 4.3

I guess we all missed the following paragraph in the license agreement:

3.2.6 sub-license, rent, sell, lease, distribute, or otherwise transfer the
Licensed Program save as provided under this End-User License Agreement
unless You obtain a separate License from Declude, Inc. for such purposes
(for example, You may not embed the Licensed Program into another
application and then distribute such to third parties unless You first
acquire an OEM License from Declude, Inc.). As of June 1, 2006, ISP's and
other service providers are not permitted to use Declude software to clean
and forward mail to customers unless a separate revenue share agreement has
been established with Declude.

http://www.declude.com/Articles.asp?ID=121

Is Declude trying to put us out of business? We pay for the software and now
have to pay them some of your meager profits?

John T
eServices For You

"Seek, and ye shall find!"

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> Gary Steiner
> Sent: Tuesday, July 18, 2006 11:24 AM
> To: declude.junkmail@declude.com
> Subject: [Declude.JunkMail] Declude 4.3
> 
> I guess someone is going to make an official announcement today about
Declude 4.3?
> I see that its downloadable in my account, but it would be nice to 
> know
what I'm
> getting before I install it, especially the new Commtouch stuff.
> 
> The "Restrictions" listed next to the Add Commtouch section are 
> especially
confusing.
> 
> https://www.declude.com/articles.asp?ID=205
> 
> Who would use Declude and not fit the definitions of the restrictions?
Based on my
> reading of the Restrictions, nobody who uses Declude will ever be able 
> to
use
> Commtouch.  If I am misreading this, would someone please explain it 
> to
me?
> 
> Gary
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude 4.3

[David Barker]

Gary,

1. Server Providers who use CommTouch as an add-in to Declude will be in
violation of CommTouch's Terms of service. 

2. Some of the benefits of CommTouch are Zero Hour virus protection and
additional spam identifying technology such as Recurrent Pattern Detection
Technology (RPD) recognized by key industry analysts as a leading technology
in email outbreak detection.

3. We are in the process of defining the revenue share program and will
provide the details to this when it is ready.

David B
www.declude.com



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 18, 2006 4:09 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Declude 4.3

So, that being said, under what conditions can a legacy customer use
Commtouch?

Since it would seem that Commtouch is being offered as an add-on, what are
the benefits of having Commtouch?  What does it do that Declude alone does
not?  

And of course it would be nice if this "revenue share program" was spelled
out somewhere.



 Original Message ----
> From: "David Barker" <[EMAIL PROTECTED]>
> Sent: Tuesday, July 18, 2006 3:57 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] Declude 4.3
> 
> There are restrictions on CommTouch being used by Service Providers we 
> had to ensure that NEW customers (ie. Service Providers After 1 June 
> 06) understand the licensing restrictions.
> 
> Current Service Providers (ie. Before 1 June 06) are under no 
> restrictions for using Declude; only the CommTouch add-in component.
> 
> However we have managed to come to an agreement with CommTouch to 
> enable our legacy customers (ie. Service Providers Before 1 June 06) 
> to take advantage of CommTouch under a revenue share program, this 
> program is not being forced onto legacy customers but will be an 
> opportunity for us to help you increase revenues in your business, by 
> providing you with new product like the Declude Gateway which would be 
> independent of Imail/SmarterMail and will include CommTouch.
> 
> David B
> www.declude.com
> 
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> John T
> (Lists)
> Sent: Tuesday, July 18, 2006 3:02 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] Declude 4.3
> 
> I guess we all missed the following paragraph in the license agreement:
> 
> 3.2.6 sub-license, rent, sell, lease, distribute, or otherwise 
> transfer the Licensed Program save as provided under this End-User 
> License Agreement unless You obtain a separate License from Declude, 
> Inc. for such purposes (for example, You may not embed the Licensed 
> Program into another application and then distribute such to third 
> parties unless You first acquire an OEM License from Declude, Inc.). 
> As of June 1, 2006, ISP's and other service providers are not 
> permitted to use Declude software to clean and forward mail to 
> customers unless a separate revenue share agreement has been established
with Declude.
> 
> http://www.declude.com/Articles.asp?ID=121
> 
> Is Declude trying to put us out of business? We pay for the software 
> and now have to pay them some of your meager profits?
> 
> John T
> eServices For You
> 
> "Seek, and ye shall find!"
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> > Gary Steiner
> > Sent: Tuesday, July 18, 2006 11:24 AM
> > To: declude.junkmail@declude.com
> > Subject: [Declude.JunkMail] Declude 4.3
> > 
> > I guess someone is going to make an official announcement today 
> > about
> Declude 4.3?
> > I see that its downloadable in my account, but it would be nice to 
> > know
> what I'm
> > getting before I install it, especially the new Commtouch stuff.
> > 
> > The "Restrictions" listed next to the Add Commtouch section are 
> > especially
> confusing.
> > 
> > https://www.declude.com/articles.asp?ID=205
> > 
> > Who would use Declude and not fit the definitions of the restrictions?
> Based on my
> > reading of the Restrictions, nobody who uses Declude will ever be 
> > able to
> use
> > Commtouch.  If I am misreading this, would someone please explain it 
> > to
> me?
> > 
> > Gary
> > 
> > 
> > 
> > 
> > 
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To 
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> > "unsubscribe Declude.JunkMail".  The archives can be found at 
> > http://www.mail-

RE: [Declude.JunkMail] Declude 4.3

[David Barker]

John,

These are all very important questions which we will answer with the revenue
share program. Please understand we are not forcing any existing customers
to change, but rather are offering an alternative, this is why CommTouch is
an add-on so that we do not place you in a position that will effect your
current business model negatively. You will still have the choice of taking
us up on our offer or not.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(Lists)
Sent: Tuesday, July 18, 2006 4:40 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Declude 4.3

David, lets say for the sake of discussion I wanted to use/purchase/license
the Declude Gateway product with CommTouch as a "legacy" customer. Who and
how is the revenue projected or actual derived from use of the CommTouch
software/feature? Is Declude going to pay some one to audit my accounting?
Do I have to pay some one to audit my accounting? Who or how is revenue
going to be defined? If you ask my clients, it will depend. If their
wife/husband/friend/associate at another company is getting lots and spam
and he/she is not, they will say the service is valuable. But in the next
second, if that important e-mail telling them about a change to the
proposition they have been working on for 2 months is delayed, they will say
the service is worthless. Are we going to have to keep a diary of when the
service is valuable and when it is worthless to determine the percentage of
revenue? And exactly how is that percentage going to be determined? Without
spam filtering, our service is meaningless, yet it is by far not the only
cost associated with our service. Or I am going to have to purchase some
kind of software that will create a report showing by percentage how much
spam was caught by the CommTouch software/feature compared to other tests?
But what about spam that gets caught by a lot of different tests?

John T
eServices For You

"Seek, and ye shall find!"


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> David Barker
> Sent: Tuesday, July 18, 2006 12:42 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] Declude 4.3
> 
> There are restrictions on CommTouch being used by Service Providers we 
> had to ensure that NEW customers (ie. Service Providers After 1 June 
> 06) understand the licensing restrictions.
> 
> Current Service Providers (ie. Before 1 June 06) are under no 
> restrictions for using Declude; only the CommTouch add-in component.
> 
> However we have managed to come to an agreement with CommTouch to 
> enable
our
> legacy customers (ie. Service Providers Before 1 June 06) to take
advantage
> of CommTouch under a revenue share program, this program is not being
forced
> onto legacy customers but will be an opportunity for us to help you
increase
> revenues in your business, by providing you with new product like the 
> Declude Gateway which would be independent of Imail/SmarterMail and 
> will include CommTouch.
> 
> David B
> www.declude.com
> 
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> John T
> (Lists)
> Sent: Tuesday, July 18, 2006 3:02 PM
> To: declude.junkmail@declude.com
> Subject: RE: [Declude.JunkMail] Declude 4.3
> 
> I guess we all missed the following paragraph in the license agreement:
> 
> 3.2.6 sub-license, rent, sell, lease, distribute, or otherwise 
> transfer
the
> Licensed Program save as provided under this End-User License 
> Agreement unless You obtain a separate License from Declude, Inc. for 
> such purposes (for example, You may not embed the Licensed Program 
> into another application and then distribute such to third parties 
> unless You first acquire an OEM License from Declude, Inc.). As of 
> June 1, 2006, ISP's and other service providers are not permitted to 
> use Declude software to clean and forward mail to customers unless a 
> separate revenue share agreement
has
> been established with Declude.
> 
> http://www.declude.com/Articles.asp?ID=121
> 
> Is Declude trying to put us out of business? We pay for the software 
> and
now
> have to pay them some of your meager profits?
> 
> John T
> eServices For You
> 
> "Seek, and ye shall find!"
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
> > Gary Steiner
> > Sent: Tuesday, July 18, 2006 11:24 AM
> > To: declude.junkmail@declude.com
> > Subject: [Declude.JunkMail] Declude 4.3
> >
> > I guess someone is going to make an official announcement today 
> > about
> Declude 4.3?
> > I see that its downloadable