RE: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude

2005-04-08 Thread Hirthe, Alexander
Hello, we use it the same way, Imail 8 with Declude Antivirus and Antispam and Popcon Pro from http://www.christensen-software.com/ to pop the Exchange Accounts to our internal Exchange Server. (running on a VMWare Machine on the internal network) You will need all account three times

Re[2]: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude

2005-04-08 Thread Sanford Whiteman
You will need all account three times (Imail/Popcon/Exchange) and you will have another point of failure, but additionally another virus scanner on Popcon (RAV Antivirus) :) You would find my scripts much easier, as you only need to maintain the Exchange (AD) address list, nothing

[Declude.JunkMail] Mailbox stats

2005-04-08 Thread Harry Vanderzand
Does anyone have any simple software to analyze the imail logs and for a domain give stats one number of mails in and out and a list of where mails are coming from and going to?. I have a customer asking for these kind of stats and I suspect there is something out there. Would rather not spend a

RE: [Declude.JunkMail] Mailbox stats

2005-04-08 Thread David Barker
You could look at DLAnalyzer which provides an easy way to generate comprehensive reports on Declude Virus and Junkmail. http://www.invariantsystems.com/dlanalyzer/ David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry

Re: [Declude.JunkMail] Mailbox stats

2005-04-08 Thread Darrell \([EMAIL PROTECTED])
Harry, Imail has a log processor you can download from their utilities page - http://www.ipswitch.com/support/IMail/helperapps.html#loganalysis If your looking for a Declude Junkmail/Virus log processor than our software can do that - http://www.invariantsystems.com

[Declude.JunkMail] WHITELISTFILE Question

2005-04-08 Thread Goran Jovanovic
Hi, I have the following entries in a domain specific WHITELISTFILE [EMAIL PROTECTED] . . . @autocontacter.com Now I realize that the second one includes the first one but I got an e-mail From: [EMAIL PROTECTED] And it did not get recognized by the whitelist file. Now I am going to

RE: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude

2005-04-08 Thread Goran Jovanovic
Darin, I do this same thing as well but I do not use the POP connector from exchange, I just forward it on to them. Why would you want to have the extra burden of holding onto the mail until the Exchange box pops it down? What am I missing here? Goran Jovanovic The LAN Shoppe

Re: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude

2005-04-08 Thread Darin Cox
So you are forwarding to a separate domain? i.e. you host example.net and they host example.com. You forward example.net email to their example.com addresses? The reason you create the domain in IMail and specify the actual email accounts is to avoid the extra load from non-existent email

[Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Dan Horne
I have a customer that is PO'ed at us. We put the recipients of emails into the headers of every email using Declude's %ALLRECIPS% variable. This is so we can identify the people who incorrectly report us as spammers to AOL just because we forward their mail for them. Since AOL strips that out,

[Declude.JunkMail] Tip: Eliminating SPF domains from SpamDomains

2005-04-08 Thread Andy Schmidt
Title: Message Hi, I'm always seeking to eliminate "double failures" for single facts to prevent false positives and then "up" the weight for groups of tests that test the same facts. Several domains that I used to have in SpamDomains (such as "Excite.com") are publishing SPF. I used

RE: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Erik
Dan, we do the same thing. Our terms of service, privacy page and contracts state that we reveal BCC's in the headers. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne Sent: Friday, April 08, 2005 4:17 PM To: Declude.JunkMail@declude.com

Re: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Darin Cox
We ran into a similar issue, though our customer was much easier to work with. In our case, they simply asked about it, we explained why we were doing it, and they understood but said that if they decided it was critical they might need to move to another host. While it's bit more painful to use

Re: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Darrell \([EMAIL PROTECTED])
As far as the legal issues go, I would say there's equal responsibility on his part to not assume that something he thought was confidential actually is confidential, and on your part to inform him of the change would reveal potentially sensitive information in the headers. One would think that

RE: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Andy Schmidt
Hi, With liability disputes it often comes down to what the average reasonable person might expect, whether the result was foreseeable and the damage preventable. (Take it from a total layman, who has no business advising you in any way.) I would say, that most people who are familiar with the

RE: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Andy Schmidt
Darrell, Well, but if that protocol explicitly defines that something is NOT included at all, in fact, the very purpose of the BCC feature being to EXCLUDE it from transmission, then a plaintiff may be able to show a reasonable assumption that this is in fact true. (Not that I know what I'm

Re: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Darin Cox
Certainly true...but in the case of reasonable doubt grin, a good lawyer could use that argument wellbut hopefully it won't come to that. Darin. - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, April 08, 2005 11:00 AM Subject:

RE: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Dan Horne
Thanks to all who replied. We have decided to remove that line from the headers and use the spoolname instead. More work for us, but the customers are happy. -Dan Horne -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, April 08,

Re[2]: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Charles Frolick
Hello Darin, Friday, April 8, 2005, 10:07:51 AM, you wrote: DC Certainly true...but in the case of reasonable doubt grin, a good lawyer DC could use that argument wellbut hopefully it won't come to that. DC Darin. Civil cases do not require 'beyond a reasonable doubt', only criminal. --

Re: Re[2]: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Darin Cox
And that would be why I'm not a lawyer...grin...but I didn't mean to imply this was a guilt or innocence case...just that if the jury is trying to determine a settlement, then a good argument that the plaintiff was partially at fault for revealing the sensitive information would reduce or possible

RE: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Andy Schmidt
Well - I guess my point is that this is a legal matter, there is an argument that could be made - so one cannot simply dismiss this without proper consultation. And THIS list is NOT the right one to get proper consultation on legalities. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20

RE: Re[2]: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Dan Horne
Nick, you bugged my office! There's no other way you could have been privy to the exact conversation my boss had to (not with) me. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Sent: Friday, April 08, 2005 11:59 AM To:

RE: [Declude.JunkMail] WHITELISTFILE Question

2005-04-08 Thread Goran Jovanovic
No it was not the last time. It was in the middle and the system@ was up higher in the file. There was a CRLF after the last line. Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Darrell

RE: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude

2005-04-08 Thread Goran Jovanovic
I scan the mail for example.com and then pass it on to the IP address of their example.com mail server. No POP for me. I have not yet implemented Sandy's alias scripts although I have looked at them. My problem with the scripts is that I have not had enough time to look at them and figure out how

RE: [Declude.JunkMail] MS-Exchange, Store and Forward and Declude

2005-04-08 Thread Colbeck, Andrew
Back in the day, fetching mail for your enterprise via POP was viable. It had everything to do with weak SMTP support and expensive dial on demand style connectivity. Now we have cheap pervasive broadband to the Internet and a heroin-like dependency on email. I didn't think anybody was still

[Declude.JunkMail] OT: Microsoft Update spoof

2005-04-08 Thread Colbeck, Andrew
See: http://www.websensesecuritylabs.com/alerts/alert.php?AlertID=163 courtesy of today's entry at: http://isc.sans.org/diary.php?date=2005-04-08 Going back through my logs, I see quite a few messages from zombie machines that were held. The spam is pretty obvious, and I've been getting them

RE: [Declude.JunkMail] WHITELISTFILE Question

2005-04-08 Thread Ryan Farnsworth
Also make sure there is not a trailing space. I just had one in my Whitelistfile this week. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, April 08, 2005 11:39 AM To: Declude.JunkMail@declude.com Subject: RE:

Re: [Declude.JunkMail] Tip: Eliminating SPF domains from SpamDomains

2005-04-08 Thread Matt (Forums)
FYI, Sniffer also has some tests that are similar to SPAMDOMAINS that were formerly causing me double-hits on false positives on my system. Pete has this stuff seemingly coded up into a group and it can be turned off easily if you request it from him. Matt -- Original Message

Re: [Declude.JunkMail] Legalities of adding header info

2005-04-08 Thread Matt (Forums)
Exposing BCC information is something that I would never think about doing. I have seen too many lists where people use CC's to distribute and then someone else starts using that CC list for thier own purposes. Viruses also tend to harvest from such things, and we haven't even touched on

RE: [Declude.JunkMail] Tip: Eliminating SPF domains from SpamDomains

2005-04-08 Thread Colbeck, Andrew
... Another double-hit involving SPF would be to marry the logic of IPNotInMX and SPF PASS/FAIL; if you have SPF records for the domain, you don't need IPNotInMX. Sorry, no working sample. Putting that into a Declude test has been on my to-do-list for a long time. Andrew 8) -Original

RE: [Declude.JunkMail] Tip: Eliminating SPF domains from SpamDomains

2005-04-08 Thread Andy Schmidt
Well, I spent a good portion of today experimenting with a Filter that could combine Sniffer, invURIBL and NOLEGITCONTENT... However, it seems as if NOLEGITCONTENT is never found in the TESTFAILED list? From what I could see a TESTFAILED CONTAINS NOLEGITCONTENT is never true? So - I wonder

Re: [Declude.JunkMail] Tip: Eliminating SPF domains from SpamDomains

2005-04-08 Thread Darin Cox
Do you have it set to WARN or IGNORE? Darin. - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, April 08, 2005 5:39 PM Subject: RE: [Declude.JunkMail] Tip: Eliminating SPF domains from SpamDomains Well, I spent a good portion of

RE: [Declude.JunkMail] Tip: Eliminating SPF domains from SpamDomains

2005-04-08 Thread Andy Schmidt
Hm... Good point! Not set to anything - just subtracting weight right now... Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, April 08,

Re: [Declude.JunkMail] Tip: Eliminating SPF domains from SpamDomains

2005-04-08 Thread Darin Cox
Probably just need to set it to WARN to see it then. Darin. - Original Message - From: Andy Schmidt [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, April 08, 2005 5:56 PM Subject: RE: [Declude.JunkMail] Tip: Eliminating SPF domains from SpamDomains Hm... Good point!

[Declude.JunkMail] OT: MS-Exchange, Store and Forward and Declude

2005-04-08 Thread Evans Martin
Sorry for the OT but it somewhat relates to this issue. I have a customer that we have been hosting mail for who has set up their own Exchange server. They asked me to point their MX record at their exchange server but still want to use me for their lists. I'm running IMail 7.15. I added an a