[Declude.JunkMail] Need Help Optimizing Junkmail

2005-10-12 Thread Orillia ProNet Administration
Hi everyone. Need some help with optimizing my global.cfg for Junkmail. Processing is really slow and bogging down the mail server. I remove Declude from the picture and everything is fine. Here is my current config [IMail 815HF2 running Declude 1.81: LOGFILE

Re: [Declude.JunkMail] Need Help Optimizing Junkmail

2005-10-12 Thread Darrell \([EMAIL PROTECTED])
From a quick glance you have no filters defined which are the most cpu intensive assuming those filters are of type body. What is your mail volume and hardware? Are you running sniffer in persistent mode? Darrell --- DLAnalyzer - Comprehensive

Re[2]: [Declude.JunkMail] Need Help Optimizing Junkmail

2005-10-12 Thread Orillia ProNet Administration
Wednesday, October 12, 2005, 10:33:40 AM, you wrote: From a quick glance you have no filters defined which are the most cpu Dsic intensive assuming those filters are of type body. What is your mail Dsic volume and hardware? Are you running sniffer in persistent mode? P4 2Ghz with 512RAM.

CBL:Re: [Declude.JunkMail] IP Blacklist

2005-10-12 Thread Richard Farris
Anyone have a testimony using this product...before and after installation maybe? I would like some input before I spend $500+ more on spam reduction... Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet - Original Message

[Declude.JunkMail] Hijack question

2005-10-12 Thread Dave Doherty
Hi all, Running Declude version 1.82 with Hijack... One of my customers go caught by Hijack a couple of days ago as a result of some activity with mailing list software he was trying out. Needless to say, he now has a thorough understanding of our UCE policy. But ever since, everything he

[Declude.JunkMail] Authenicated User

2005-10-12 Thread Ncl Admin
I am having a problem with an authenicated user that has an IP that is major big-time on the spam lists. Is there anyway to strip off his originating ip info and not pass it along? Guess that T-Mobile has finally started at least cleaning up there address space but this person needs to get his

Re: [Declude.JunkMail] Hijack question

2005-10-12 Thread Nick Hayer
Dave, You need to stop/start deccon.exe That wil reset the counter so to speak. Question to Declude support - How does this work with Declude 3x? Thanks! -Nick Dave Doherty wrote: Hi all, Running Declude version 1.82 with Hijack... One of my customers go caught by Hijack a couple of

Re: [Declude.JunkMail] Hijack question

2005-10-12 Thread Dave Doherty
That was it! The one thing I didn't try. (Of course!) -d - Original Message - From: Nick Hayer [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, October 12, 2005 12:52 PM Subject: Re: [Declude.JunkMail] Hijack question Dave, You need to stop/start deccon.exe

RE: [Declude.JunkMail] Hijack question

2005-10-12 Thread David Barker
Stop/restart the decludeproc service David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Wednesday, October 12, 2005 12:53 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack question Dave,

Re: [Declude.JunkMail] Hijack question

2005-10-12 Thread Nick Hayer
Thanks ! -Nick David Barker wrote: Stop/restart the decludeproc service David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Wednesday, October 12, 2005 12:53 PM To: Declude.JunkMail@declude.com Subject: Re:

[Declude.JunkMail] Local Users Should be Whitelisted, right?

2005-10-12 Thread Kevin Rogers
We have a user on one of our domains who sent an email to someone else at the same domain. Shouldn't this message automatically be whitelisted? Here's a log snippet: 10/11/2005 10:39:38 QF8BA082193B2 CMDSPACE:8 SPAMHEADERS:3 . Total weight = 11. 10/11/2005 10:39:38 QF8BA082193B2

Re: [Declude.JunkMail] Local Users Should be Whitelisted, right?

2005-10-12 Thread Darrell \([EMAIL PROTECTED])
It all depends on how you have your software configured. Did the user auth? Do you have whitelist auth? Are you whitelisting the IP address they came from? Let us know how you are configured. Darrell --- invURIBL - Intelligent URI Filtering. Stops the

Re: [Declude.JunkMail] Local Users Should be Whitelisted, right?

2005-10-12 Thread Kevin Rogers
I'm checking to see if they use our server to send. If they did, they had to AUTH. And we do use whitelist auth. We don't whitelist the IP they are coming from. If they used a different outgoing server, then it would be treated just like any other email address, right? But if they did

[Declude.JunkMail] External Filter - Can we check the sender's IP address?

2005-10-12 Thread Kevin Rogers
I know that you can make your own filters with the PRO version. I'd like to check to see if the message is coming from a certain IP address - if it is I want to subtract 5 from the weight. Is this how I do it? FILTERFILE.txt -- REMOTEIP IS xxx.xxx.xxx.xxx

Re: [Declude.JunkMail] External Filter - Can we check the sender's IP address?

2005-10-12 Thread Darrell \([EMAIL PROTECTED])
You can do it multiple ways and I am sure there is more [1] Use an IPFILE filter [2] You can use the method you propose below, but you will need to adjust your syntax. In your global.cfg set the filter to 0 and in the filter add in the weight REMOTEIP -5 IS xxx.xxx.xxx.xxx This way you can

Re: [Declude.JunkMail] Local Users Should be Whitelisted, right?

2005-10-12 Thread Darrell \([EMAIL PROTECTED])
Assuming you are running a version of Imail 8.x. Are you running an older version of Imail? Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail Queue Monitoring, Declude Overflow Queue Monitoring, SURBL/URI

Re: [Declude.JunkMail] Authenicated User

2005-10-12 Thread Sanford Whiteman
I am having a problem with an authenicated user that has an IP that is major big-time on the spam lists. Is there anyway to strip off his originating ip info and not pass it along? Are you talking about Declude parsing the IP and assigning weight that you want to counteract, or remote

Re: [Declude.JunkMail] Local Users Should be Whitelisted, right?

2005-10-12 Thread Kevin Rogers
8.21 BTW - thanks for your help Darrell. Darrell ([EMAIL PROTECTED]) wrote: Assuming you are running a version of Imail 8.x. Are you running an older version of Imail? Darrell --- Check out http://www.invariantsystems.com for utilities for Declude

RE: [Declude.JunkMail] spamheaders

2005-10-12 Thread John T \(Lists\)
Are you forcing users to authenticate to Imail before sending, otherwise known as SMTP Authentication? If so, just put a line in the Global.CFG file like WHITELIST AUTH and those uses that authenticate will pass all tests. And yes, this requires Imail 8.x. John T eServices For You

RE: Re: [Declude.JunkMail] IP Blacklist

2005-10-12 Thread John T \(Lists\)
Well, the company is founded and/or run and/or owned by a gentleman that hates spam and has put a lot of time and effort into creating products/services to help out in the war on spam, especially for parents. A couple of years ago, they created a product to work in conjunction with Declude that

RE: [Declude.JunkMail] Hijack question

2005-10-12 Thread John T \(Lists\)
A clarification on how to reset Hijack: For Declude versions 2.x and below, you need to end the Deccon.exe process. It is also best to do this with Imail SMTP and Queue Manager service stopped and no Declude.exe processes running to ensure that no process will try to call Deccon.exe during the