Title: Filter text: out of the frying pan and into the fire
I think the processing order of the filter text has changed between JunkMail v1.65 and v1.66i. Specifically, I saw high scores on an innocent message due to my spam hint rule.
What I intended to do was search for obfuscation
Title: CPU Usage
Hi
Were seeing Declude today take up loads of CPU Usage and making Imail unstable
Has anyone seen this before or a way of limiting how many processes Declude will open
Cpu usage it will use
Cheers in advance
Were seeing Declude today take up loads of CPU Usage and making Imail
unstable
Has anyone seen this before or a way of limiting how many processes
Declude will open
Cpu usage it will use
Have you gone to the Processes tab of the Task Manager, and clicked on the
CPU button to sort the
I'm running Junkmail Pro, latest BETA.
How do I turn off Declude for outgoing mail or is that even possible?
I've got all the tests, marked as for outgoing only, commented out.
If you have commented out all the tests in the global.cfg file where the
outgoing actions are listed (IE changing
Feature request: instead of dec.log, can the log file name be more
configurable like decMMDDHH.log. When I do a debug, the log files get very
big and it is too cumbersome to open. if the 'HH' is included, at least the
log files are broken down to hourly logs.
This has been added to our
I think the processing order of the filter text has changed between
JunkMail v1.65 and v1.66i. Specifically, I saw high scores on an innocent
message due to my spam hint rule.
What I intended to do was search for obfuscation attempts, e.g. www%_2E
but v1.66i is hitting on www. OR www%_2E in
Hi Scott:
If he is referring to what we have on the list- then it is this:
BODY 10 CONTAINS www%2e
Hope this helps.
Regards,
Kami
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Thursday, January 23, 2003 8:57 AM
To: [EMAIL
Title: Message
Gareth,
We
sometimes see Declude using 100% CPU however, this is normal when someone is
sending a lot of mail through the server i.e a large mail shot. It normally
doesn't pose a problem, except mail delivery might be slower than normal until
the queue is cleared. You can
It is like that - all commented out, but I saw the following in the
log:
01/23/2003 06:42:52 Qe3470e4 E-mail whitelisted - automatically passing all spam
tests [64.90.56.]
01/23/2003 06:42:52 Qe3470e4 Subject: Re: Altran Stuff
01/23/2003 06:42:52 Qe3470e4 From: [EMAIL PROTECTED] To: [EMAIL
Have you gone to the Processes tab of the Task Manager, and clicked on the
CPU button to sort the processes by CPU usage? Most likely, it isn't
Declude.exe (or isn't just Declude.exe) causing the high CPU usage.
Ah yeah there's load of processes but I was wrong its more SMTP and
iwebmsg.exe
By
Which looks like it is scanning outbound mail . . . .
Scott has explained before that all mail, outbound and inbound, will be
scanned always.
What he said was that by commenting out the test actions in the Global.cfg,
no actions will be taken, but the mail will still be scanned.
Also, if there
recently all declude lists emails started to get caught as spam
i have not made any config changes before
what is going on ?
Precedence: bulk
Sender: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
X-RBL-Warning: HELOBOGUS: Domain declude.com has no MX or A records.
X-RBL-Warning: MAILFROM: Domain
Have you gone to the Processes tab of the Task Manager, and clicked on the
CPU button to sort the processes by CPU usage? Most likely, it isn't
Declude.exe (or isn't just Declude.exe) causing the high CPU usage.
Ah yeah there's load of processes but I was wrong its more SMTP and
iwebmsg.exe
By
recently all declude lists emails started to get caught as spam
i have not made any config changes before
what is going on ?
It sounds like your DNS server is broken:
X-RBL-Warning: HELOBOGUS: Domain declude.com has no MX or A records.
X-RBL-Warning: MAILFROM: Domain declude.com has no MX or
Hello,
It seems this morning that we have several dictionary attacks happening on
one of Imail servers. Is there an easy to stop the person doing this? I have
looked through the log files and cannot easily spot the person(s) doing
this.
Is there software that will prevent people from performing
It seems this morning that we have several dictionary attacks happening on
one of Imail servers. Is there an easy to stop the person doing this? I have
looked through the log files and cannot easily spot the person(s) doing
this.
Is there software that will prevent people from performing
I am in the process of working on a Log analyzer for Declude that can
provide me with the information I need to report on each month. I
wanted to include a Spam Subject reporting feature.
In any of the log files (declude or Imail) I have been unable to find
any references to subject. I have
Title: Message
Hi;
I thought of an
idea that when tested resulted in some good catches...
We experimented
with using our Blacklist fromfile not only with DELETE action but also as a
filter file. The same with our Free Email fromfile.
In essence while
those that we blacklist keep changing
1.) When writing an external test for declude is their anything I should
avoid doing. Is their any best tips or practices to follow?
You should be able to do just about anything you want in an external
test. We recently added a bit more flexibility, so that you can alter or
even delete the
We started running BlackICE last month and it has been working nice for us. It
requires a few config changes to get it to auto-block IPs that send you dictionary
attacks, but it is definitely a good solution.
Bill
-Original Message-
From: R. Scott Perry
Sent: Thu, 23 Jan 2003
Title: Message
Check this
out...
To: [EMAIL PROTECTED]Subject:
~2914[IMail Forum] iMail and Antivirus options?Date: Thu, 23 Jan
2003 9:42:03 -0800MIME-Version: 1.0Content-Type: text/plain;
charset=ISO-8859-1Content-Transfer-Encoding: 8bitMessage-ID: [EMAIL
Bill,
Also running BI as of few weeks ago and tinkering with firewal.ini.
Would you mind sharing the .ini changes you made. You can e-mail me off
list. Thanks.
Sincerely,
Don Schreiner
CompBiz, Inc.
www.compbiz.net
407-322-8654
800-408-3688
-Original Message-
From: [EMAIL PROTECTED]
I wanted to post
yesterdays results of Declude Junkmail:
We hold on a
weight of 20 and delete at 40.
Messages held are
reviewed using Spam Review software.
There were no
False Positives in the messages deleted. This was reviewed by manually going
through the Declude Junkmail log for
Scott,
Do you think it would be better to extract the info through a declude
external test or bump up the logging?
Darrell
Darrell LaRock
Information Systems Analyst
Gannett Television
716-849-2272
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R.
Do you think it would be better to extract the info through a declude
external test or bump up the logging?
It would probably be easier just to bump up the logging, in my opinion.
-Scott
---
[This E-mail was scanned for viruses by Declude Virus
Hi Scott,
I read about this Bayesian filtering/scanning at some other forum as well.
Is this something that Declude Junkmail does right now or will do in the
(near) future? Would be nice if it were a feature of the scanner on the
server in stead of changing all mail client software? ;-)
I read about this Bayesian filtering/scanning at some other forum as well.
Is this something that Declude Junkmail does right now or will do in the
(near) future? Would be nice if it were a feature of the scanner on the
server in stead of changing all mail client software? ;-)
There was a very
(ahem) Errr. Never mind.
I jumped the gun. My innocent sample(s) was using both www.example.com
as well as the escaped version of . and for / in their URLs. In my
haste to make things right, I only saw the normal text URLs.
The message I saw held fell in to two categories: the newsletter
John,
From your post I gathered that your log level is atleast mid.
Is this a normal configuration or just a one time deal to look at the mail.
Darrell
Darrell LaRock
Information Systems Analyst
Gannett Television
716-849-2272
-Original
Message-
From:
[EMAIL
Reply to: Don Schreiner
Re: [Declude.JunkMail] OT: Dictionary Attacks on Thursday 11:51:25 AM
From an earlier msg:
Our servers are very stable with this firewall. It does not
autoblock these but you can manually block them. I noticed that
they do not show up in the log any more,
30 matches
Mail list logo
