Will ROUTETO work to an external domain that is one not held on Imail?
Example: Message addressed to [EMAIL PROTECTED] Sfdomain.com is not hosted
on Imail, but Imail is doing SF for it.
That message triggers a test called SFDOMAINREROUTE with a ROUTETO action to
[EMAIL PROTECTED] Again,
What specifically in the header triggered the 'BADHEADER', and how can
the customer fix it?
Thanks
MB
-Original Message-
From: Mike Moloney
[mailto:[EMAIL PROTECTED]
Sent: Wednesday, July 23, 2003 6:43 PM
To: Mike Barnett
Subject: Bad headers?
MB:
Below, in the headers, it indicates
Title: Message
Hi;
It seems like with
all the spammish domains being taken now more more we see domains with
lots of dashes..
Double
dashes!
-
@ADULT---WEB-CAM.COM
- @CHINA--V.COM
- @girls--panties.com
Single dashes!
- @home-loan-quotes-direct.com
- @horny-wild-girls.us
-
Title: Message
Does anyone know if I install the ms03-026 then sp4 do I have to resintall
the security patch thanks.
What specifically in the header triggered the 'BADHEADER', and how can
the customer fix it?
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail
client [802c].
Going to http://www.declude.com/tools and using the 'BADHEADER Lookup' for
802c shows This E-mail has a bogus
From: Mike Moloney
[mailto:[EMAIL PROTECTED]
Kami will want to take note of this domain. :)
Yep, but I would still have to agree with Kami. In my review there are very
few legitimate domains that use more than on dash - symbol for their
e-mail domains, and never two dashes -- together.
Title: Message
My experience has
been that NT4-era service packs will overwrite hotfixes. W2K and W2K3 (and
Office XP, too) service packs will leave patches intact, i.e. they will not
overwritecomponents newer than themselves.
Doing a
repair/re-install from the Recovery CD or from the
Title: Re: [Declude.JunkMail] dashes in domains
Seems like if there was a wildcard character we could use in the filter files then you could do
HELO 8 CONTAINS -*-
MAILFROM 8 CONTAINS -*-*@
Assuming * was our wildcard then that would do it no? But since * is valid in an email youd have to
Title: Re: [Declude.JunkMail] dashes in domains
Damn... Gotta stop emailing while I work... The 2nd example is flawed...
MAILFROM 8 CONTAINS @*-*-
Above is what I meant tho the example below would catch mail... Probably list confirmations which frequently have -s in the address.
-Josh
From:
I have two dashes in my domain. If this test is going to be used, you may want to look
for three or more dashes, or consecutive dashes.
Regards,
Bill
Kami, I totally agree, I think this would be a very good test.
Bill
- Original Message -
From: Kami Razvan
To:
[EMAIL
Hi,
What is the correct implementation of the BODYISBLANK filter? Can
someone provide an example?
Thanks!
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to
Hi..
I recall we had this idea discussed a while back.
When I suggested this among many others we were getting a lot of email with
no content Blank body simply appearing as spammers are testing the email
addresses.
A single email with no content..
Since there are no content then the body
I'm seeing more and more of this all the time. Someone inquired about this
recently and maybe I missed any responses hanging head down in shame
The generic header reads...
Received from mydomain.com (xxx.xxx.xxx.xxx) by mail.mydomain.com.. etc
From: someone myemailaddy
To: myemailaddy
where
Title: Message
Kami,
Please
whitelist my Almost-On-Line.com domain which I use for AOL convertees and also
use as a honey pot.
George KulmanPartnerRidge Systems,
L.L.C.
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Kami RazvanSent:
We are evaluating declude and have noticed a considerable increase in the
cpu cycles associated with mail delivery. Is there anyway have it run in
an isolated cpu instance? since there are multiple instances of
declude.exe running, I would guess it would be hard to lock it down.
How many
Title: Message
That would not be a good idea, especially since
this is a public list and if he did that anyone could spam his users by setting
their return address to [EMAIL PROTECTED].
I think people are missing the point here. We
are not talking about blacklisting anyone with multiple
Title: Message
Mark, it may be
interesting for you to note that we don't set the number of instances of
Decludedirectly. Instead, the "max processes" limit in your IMail
SMTP advanced settings is what governs the total number ofIMail and
declude.exe instances.
Also, an
important
Title: RE: [Declude.JunkMail] Declude using 50% cpu
On a good day we rev 19000 local deliveries + send 8000 per day.
It hits the machine hard average cpu time before was around 44% then when declude was installed it jumped to over 90% average. The version is 1.75
-Original Message-
Title: RE: [Declude.JunkMail] Declude using 50% cpu
Where is your DNS server you are using
in Imail?
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Title: RE: [Declude.JunkMail] Declude using 50% cpu
BTW, with an average CPU usage of 44%
before Declude, you may be reaching the saturation point of the server. Not
critical, but from my understanding if average CPU usage is at 50%, you need to
start looking at things.
John
Title: Message
Thanks
for that info Andrew, however I am looking at the task manager for my box and
even 1 declude process was taking 50% then it popped up another process with 45%
granted these go away when the messages are finished, however this server passes
a LOT of traffic, so the
On a good day we rev 19000 local deliveries + send 8000 per day.
It hits the machine hard average cpu time before was around 44% then when
declude was installed it jumped to over 90% average. The version is 1.75
The problem here is most likely that your server is reaching its limit. If
it was
Title: RE: [Declude.JunkMail] Declude using 50% cpu
Scott, is there any threshold for the number of custom filters vs the amount of time/cpu power required to parse such filters? I think that I may be passing it through to many filters before sending it out.
-Original Message-
From:
Title: RE: [Declude.JunkMail] Declude using 50% cpu
Also, can we ask what hardware / OS this is running
on?
Jason
- Original Message -
From:
John Tolmachoff (Lists)
To: [EMAIL PROTECTED]
Sent: Thursday, July 24, 2003 3:03
PM
Subject: RE: [Declude.JunkMail]
Title: RE: [Declude.JunkMail] Declude using 50% cpu
win2k
sp3 dual 933 512K ram, but memory was never a problem, its a dedicated mail
server nothing else
-Original Message-From: Jason Newland
[mailto:[EMAIL PROTECTED]Sent: Thursday, July 24, 2003 4:22
PMTo: [EMAIL
Title: Message
Hi;
Let me share our
experience and what we did to help it.
1: We put
all the IP4r tests in IMail (of course version 8 if you have
it)
2: Created a
weight XHeader file and gave the header that appears for each test a
weight. The following is a snapshot of what we have for
Scott, is there any threshold for the number of custom filters vs the
amount of time/cpu power required to parse such filters? I think that I
may be passing it through to many filters before sending it out.
That depends mostly on the type of filters -- for example, a filter that
uses BODY
Title: RE: [Declude.JunkMail] Declude using 50% cpu
This
server is slammed during buisness hours but it was making due with dual 933,
declude just kills it. What portion of custom filters vs rdns checks should I
look at to reduce this processing strain?
-Original Message-From:
Title: Message
Kami, you've
mentioned your approach before but never so succinctly; thanks for
sharing. I've been meaning to ask you why youadopted
techniques1) and 2). Surely this is a longer way to do the same
thing as IP4R/RBL tests in JM?
3) Does make good
sense to me. I wonder if the
Title: RE: [Declude.JunkMail] Declude using 50% cpu
I am
very sorry but I have to ask, how did you get win2k to run on 512K
of ram. :)
On the
serious side though, I really think there is an underlying problem here.
Our mail server is a p4 1.6 with 1Gig of ram, with scsi hdds(Raid 5 with
Title: Re: [Declude.JunkMail] dashes in domains
Question on SpamDomains...
X-RBL-Warning: SPAMDOMAINS: Spamdomain 'netscape.' found: Address of [EMAIL PROTECTED] sent from invalid
r2d2.aoltw.net
The above header was in an email to me from a netscape employee I work
with. (changed it to
Title: Re: [Declude.JunkMail] dashes in domains
Joshua,
What about...
netscape. .aol
?
Dan
- Original Message -
From:
Joshua
Levitsky
To: [EMAIL PROTECTED]
Sent: Thursday, July 24, 2003 6:26
PM
Subject: [Declude.JunkMail] Spamdomains
question
Title: Re: [Declude.JunkMail] dashes in domains
Oh that is smart... cool... I think that will do it
for me.
-Josh
- Original Message -
From:
Dan
Geiser
To: [EMAIL PROTECTED]
Sent: Thursday, July 24, 2003 6:42
PM
Subject: Re: [Declude.JunkMail]
Spamdomains
This server is slammed during buisness hours but it was making due with
dual 933, declude just kills it. What portion of custom filters vs rdns
checks should I look at to reduce this processing strain?
A dual 933 should be able to process at about 200,000 E-mails/day complete
with virus and
I am running single P3 1.0 Ghz with 2 scsi HD
1st Drive OS
2nd Drive Imail.
Win2k , Sp4 , Imail 8.x with latest patches.
Declude JunkPro , Virus with f-prot. ver 1.75
Webmail+pop3+smtp+imap4+DNS server
Processor usage around 30% ,40%
I didnt made any stats about the email volume , but more
Title: Message
Mark, you might
check if your C:\IMail\Spool\Overflow contains may Q*.SMD files, which will tell
you whether you have a mail processing backlog.
A busy server is
one thing, and a burdened server is another.
You can
read:
http://www.declude.com/dq.htm
for the how and
why
Title: Message
FYI, I have a
single mail relay with no mail boxes. RunsIMail like a champin a stripped
down Windows XPin a SCSI based
Compaqserver PII 333 MHz and
160 MB of RAM (plenty), but with the text filtering we do, we get a
consistentoverflow every day during peak hours. We've
37 matches
Mail list logo
