[Declude.JunkMail] OT: Switch to control bandwidth

2005-02-10 Thread Matt
Ok, I'll break the ice :) I was wondering what people would recommend as far as a managed switch goes that I can use to either limit bandwidth or at least guarantee bandwidth going out to the router. It might even be nice to do this on a per-IP basis instead of a per-port basis, though that's

Re: [Declude.JunkMail] OT-Microsoft Exchange Tools

2005-02-10 Thread Dan Geiser
Echo!!! - Original Message - From: Mark E. Smith [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, February 09, 2005 6:41 AM Subject: RE: [Declude.JunkMail] OT-Microsoft Exchange Tools Before we moved to HP Openview (very pricy) we used a combination of Big Brother

Re: [Declude.JunkMail] OT: Switch to control bandwidth

2005-02-10 Thread Darrell \([EMAIL PROTECTED])
Matt, I would recommend Cisco for this than again I seem to recommend Cisco for everything. You can get rate limiting in the EMI images of the 2950 series or the SMI images of the 3550 series. What type of other options do you need with this? Straight L2 or L3? Gig uplinks etc? Darrell

[Declude.JunkMail] FW: Is there a variable for this

2005-02-10 Thread Goran Jovanovic
Reposting Goran Jovanovic The LAN Shoppe -Original Message- From: Goran Jovanovic Sent: Thursday, February 10, 2005 12:01 AM To: 'Declude.JunkMail@declude.com' Subject: Is there a variable for this Hi, Is there a variable for: Received: from cc-2 [216.132.135.170] by

RE: [Declude.JunkMail] FW: Is there a variable for this

2005-02-10 Thread John Tolmachoff \(Lists\)
HELOBOGUS already does this by taking the HELO/EHLO and checking to see if it has a valid A or MX record matching it. Of course, if there is no . it will fail. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED]

RE: [Declude.JunkMail] FW: Is there a variable for this

2005-02-10 Thread Colbeck, Andrew
Yes, that's the HELO variable. Your configuration should already be triggering HELOBOGUS on the sample you provided; if you want to be particular about the problem you specified HELO 1 NOTCONTAINS . would do the trick. You will probably penalize as much spam as ham this way, though. Lots of

[Declude.JunkMail] hold and alert combined

2005-02-10 Thread Goebbels, Bernd \(LDS\)
is there a possibility to hold a mail and alert the recipient? our problem is that german law may force us to do this. bernd goebbels ldsnrw

[Declude.JunkMail] Filters and encoded subject lines

2005-02-10 Thread Goran Jovanovic
Hi, If a subject line is encoded like (all on one line): Subject: =?utf-8?B?RndkOiBbYmV0dGVybWVudF0gODYlIG9mZiBWaWNvZGluLiAgY291cmFnZW91c2 x5IHNhdmFnZXJz?= What it really says is: Fwd: [betterment] 86% off Vicodin. courageously savagers And I have a filter that looks for vicodin ANYWHERE

RE: [Declude.JunkMail] OT: Switch to control bandwidth

2005-02-10 Thread Justin Moose
Matt, This might be a little more than what you need, but we use a product called a NetEnforcer for bandwidth limiting at our shop. There are a lot of other monitoring and accounting features as well. You can find information about them at www.allot.com. This will allow you to rate limit based

Re: [Declude.JunkMail] Filters and encoded subject lines

2005-02-10 Thread R. Scott Perry
And I have a filter that looks for vicodin ANYWHERE 2 CONTAINS VICODIN The filter does not find it. I think it is because the subject line is encoded. Is there any way to check it with the filters? Actually, I believe the issue is that ANYWHERE just looks at the subject and body

RE: [Declude.JunkMail] FW: Is there a variable for this

2005-02-10 Thread Goran Jovanovic
Hi Andrew, If I do: HELO 1 NOTCONTAINS . cc-2.example.local Then the example will pass my HELO filter test since it has a . in it. It will fail HELOBOGUS though. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED]

Re: [Declude.JunkMail] Filters and encoded subject lines

2005-02-10 Thread Scott Fisher
Declude will decode declude the subject tests Declude 1.82 found these: I've had hits in =?utf-8?B?Y2hlYXAgb2VtIHNvZnR3YXJlIHNoaXBwaW5nIHdvcmxkd2lkZS4gIHBvdW5jZWQgQ2 hhbmc=?= for SUBJECT 40 CONTAINS OEM Software I wonder if it doesn't decode the subject with an ANYWHERE test? - Original

[Declude.JunkMail] OT - Microsoft Patch Day - Exchange and SMTP updates

2005-02-10 Thread Colbeck, Andrew
Hello, all. Aside from the usual Internet Explorer and Office patches, this patch cycle also includes an update to the October update MS04-035 which affects a DNS query vulnerability in the SMTP handling in Windows 2000/2003 as well as Exchange 2003.

RE: [Declude.JunkMail] Filters and encoded subject lines

2005-02-10 Thread Goran Jovanovic
Great - Fixed. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, February 10, 2005 3:57 PM To: Declude.JunkMail@declude.com Subject: Re:

RE: [Declude.JunkMail] Filters and encoded subject lines

2005-02-10 Thread John Carter
Scott: If ANYWHERE only gets subject and body, then to fully cover everything in the message would we then need ANYWHERE# CONTAINS HEADERS # CONTAINS Thanks John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry

RE: [Declude.JunkMail] Filters and encoded subject lines

2005-02-10 Thread R. Scott Perry
If ANYWHERE only gets subject and body... Sorry, I meant that it covers the headers and body (but not any decoded parts). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra

[Declude.JunkMail] Is there a variable for this

2005-02-10 Thread Goran Jovanovic
Hi, Is there a variable for: Received: from cc-2 [216.132.135.170] by . The cc-2 in this case. This is the mail server that last touched it. I was wondering if it would be a good idea to query the cc-2 and assign it points if it did not have a . in it. It is supposed to be a proper

Re: [Declude.JunkMail] OT: Switch to control bandwidth

2005-02-10 Thread Scott Fosseen
I don't know if this will work the way you want it to, but I saw this company at Networld + Interop last year. It does have manual rate shaping available but it's biggest benefit is that it will automatically rate control connections to ensure no service can run away with too much bandwidth.

Re: [Declude.JunkMail] OT: Switch to control bandwidth

2005-02-10 Thread Darin Cox
Hi Matt, There may be other options, but we settled on Cisco 3350 switches for this. Their rate-limiting is much more granular than most others we looked at (most would only limit to 1Mbps per port, not below), however they are both pricey (~$3500) for 48 10/100 Mbps ports and 2 Gbps ports. You

[Declude.JunkMail] Version 2.0 - Safe to Install

2005-02-10 Thread Andy Schmidt
Title: Message Hi, haven't heard anything since the updated 2.xversion was posted online. Has anyone dared to install? Any luck this time around? Does it appear stable enough? Or is everyone still waiting for everyone else? Best RegardsAndy SchmidtHM Systems Software, Inc.600 East

RE: [Declude.JunkMail] Version 2.0 - Safe to Install

2005-02-10 Thread Barry Simpson
Title: Message There are currently more than 120 installed updates, a mixture of SmarterMail and Imail. Barry From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Thursday, February 10, 2005 6:24 PM To: Declude.JunkMail@declude.com Subject:

Re: [Declude.JunkMail] Version 2.0 - Safe to Install

2005-02-10 Thread Matt
Title: Message Barry, It would be nice to know what the previous issues were related to so that we can keep an eye out for them. E-mail is vitally important to most of our customers and we have become very cautious about making changes in light of recent events. At the same time, there are

RE: [Declude.JunkMail] Version 2.0 - Safe to Install

2005-02-10 Thread John Tolmachoff \(Lists\)
Title: Message The 2 issues I had seen with the first 2.0 released version have been resolved. 2.0.3 has been in use on the 2 servers I actively maintain since Monday night with no issues that I know of. John Tolmachoff Engineer/Consultant/Owner eServices For You

[Declude.JunkMail] Base 64 Encoded messages

2005-02-10 Thread Kevin Bilbee
Does declude decode messages before using filters? I have a domain in a body filter that keeps getting through? Kevin Bilbee --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just

Re: [Declude.JunkMail] Base 64 Encoded messages

2005-02-10 Thread R. Scott Perry
Does declude decode messages before using filters? It does a lot of decoding, yes. I have a domain in a body filter that keeps getting through? Have you checked the raw source to see how it is encoded? -Scott --- Declude JunkMail: The advanced

Re: [Declude.JunkMail] Version 2.0 - Safe to Install

2005-02-10 Thread Darin Cox
Title: Message Excellent points, Matt. I would love to see a customer-only viewable page that lists known issues with a given release, along with estimated patch/upgrade release dates. That way we can judge when to upgrade with less fear of known issues, that we are unaware of, causing

Re: [Declude.JunkMail] Version 2.0 - Safe to Install

2005-02-10 Thread Darrell \([EMAIL PROTECTED])
Title: Message John, Was the install a manual process like we are used to install or an automated installer. Darrell ---Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI

RE: [Declude.JunkMail] Version 2.0 - Safe to Install

2005-02-10 Thread Colbeck, Andrew
Title: Message It's either. You download one InstallShield-style installer, which asks if you want the automated method, or whether you just want to extract the files to a folder you specify. I chose the latter; the application then looked like it was installing, but as promised, all it did

[Declude.JunkMail] AMEX fails routing test

2005-02-10 Thread Marc Catuogno
X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with spam [210f]. X-Declude-Sender: [EMAIL PROTECTED] [193.32.34.73] X-Declude-Spoolname: D465d077100c4763a.SMD X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed:

[Declude.JunkMail] Declude 2.0

2005-02-10 Thread Andy Schmidt
Title: Message Well - I tried... Minutes after install my mail server became unresponsive - after a few minutes, I saw Dr. Watson in the task list - and then found these in the root. Best RegardsAndy SchmidtPhone: +1 201 934-3414 x20 (Business)Fax: +1 201 934-9206 DECLUDE.GP1

RE: [Declude.JunkMail] Version 2.0 - Safe to Install

2005-02-10 Thread Barry Simpson
Title: Message We are working on a page where we will list known issues, bugs and fixes. In the recent past or focus has been stabilizing the release and ensuring that we tested fixes we were working on. In the near future we are looking to ad a number of features to the web site

Re: [Declude.JunkMail] Version 2.0 - Safe to Install

2005-02-10 Thread Darin Cox
Title: Message Wonderful! Thanks, Barry! Darin. - Original Message - From: Barry Simpson To: Declude.JunkMail@declude.com Sent: Thursday, February 10, 2005 8:33 PM Subject: RE: [Declude.JunkMail] Version 2.0 - Safe to Install We are working on a page where we will list known

Re: [Declude.JunkMail] AMEX fails routing test

2005-02-10 Thread Dave Doherty
Hi Marc- I saw NOABUSE, ROUTING, and SPAMHEADERS today with my personal statement from AMEX, which came from the same sender. SPAMHEADERS reports that the sender was bad. -d - Original Message - From: Marc Catuogno [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday,

[Declude.JunkMail] OT Moving from Imail to SmarterMail

2005-02-10 Thread John Moore
We are in the process of moving from Imail to SmarterMail including our Declude setup. We have setup SmarterMail on a new box and have it running in production now. The servers with our Imail 7.15 setup where we are moving the mail domains from will stay in operation as they currently

Re: [Declude.JunkMail] OT: Switch to control bandwidth

2005-02-10 Thread Dave Doherty
Hi Matt- We do this on our Fortigate antivirus firewall, which allows us bandwidth limits and guarantees, both inbound and outbound, on a service and IP basis. -Dave - Original Message - From: Matt [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Thursday, February 10, 2005

RE: [Declude.JunkMail] Base 64 Encoded messages

2005-02-10 Thread Kevin Bilbee
The headers say base64 Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Thursday, February 10, 2005 4:56 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Base 64 Encoded messages Does declude decode

[Declude.JunkMail] FW: Filters and encoded subject lines

2005-02-10 Thread Goran Jovanovic
Sending message again as the first one did not post. Goran Jovanovic The LAN Shoppe -Original Message- From: Goran Jovanovic Sent: Wednesday, February 09, 2005 6:02 PM To: 'Declude.JunkMail@declude.com' Subject: Filters and encoded subject lines Hi, If a subject line is

RE: [Declude.JunkMail] AMEX fails routing test

2005-02-10 Thread Kevin Bilbee
YOU may want to chang your config to use weightrange instean of weight. It will difinitivly choose the actio that will happen and avoid confusion. Why was this message held anyway. Based on the failed tests I would not hold this message on our server. I do not know what filter does. But I would

Re: [Declude.JunkMail] search for spam

2005-02-10 Thread [EMAIL PROTECTED]
Hi, You should be able to find the domain by opening the log file with a text editor and using the search/find function. I just use notepad. Thanks, Andrew Baldwin [EMAIL PROTECTED] http://www.thumpernet.com 315-282-0020 Tuesday, February 8, 2005, 2:50:03 PM, you wrote: We have some users