RE: [Declude.JunkMail] No one at Declude?

2013-04-17 Thread John Doyle
hammered with spam. Reminds me of the days, many years ago, before I happened upon Declude... Todd -Original Message- On Sunday, April 14, 2013 10:24 PM, John Doyle wrote: I have reverted to a system that works. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe

RE: [Declude.JunkMail] ***DECLUDE NO-AUTHENTICATION KEY***

2013-04-17 Thread John Doyle
Matt I've been told if you have sniffer running and you block SNF RETURN CODE 049 AND 055 you block most virus's. I ended up putting different weights for the return codes years ago. I score them high enough to delete on weight only and as well delete on the names Here is my setup from global

[Declude.JunkMail] No one at Declude?

2013-04-14 Thread John Doyle
Web site is indeed back up mail list seems to be back too. I was able to log on to my customer account. My account number however in diag.txt returns as not valid. I have reverted to a system that works. I'll try in the morning to see if they have the validation server running. As of now,

RE: [Declude.JunkMail] No one at Declude?

2013-04-13 Thread John Doyle
Did the mail list just come alive ??? -Original Message- From: Pete McNeil [mailto:madscient...@microneil.com] Sent: Wednesday, April 10, 2013 3:17 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] No one at Declude? On 2013-04-10 16:21, John Dobbin wrote: With all

RE: [Declude.JunkMail] No one at Declude?

2013-04-10 Thread John Doyle
Randy the web site is now down. AVG has not been updating since last month. Commtouch will begin to fail soon. Sounds like they went upside down. You may never hear another word from them. once bills don't get taken care things will stop. Search for David's email a few days ago and get the

RE: [Declude.JunkMail] No one at Declude?

2013-04-10 Thread John Doyle
Robert look in the declude log file, for CT-BULK or CT-SPAM (depending on how you set it up in your global.cfg file AT 2:18 Pacific time today mine was still working Use the links below and download the data. John From: Robert Grosshandler

RE: [Declude.JunkMail] How to send notices about email held by HiJack

2011-03-26 Thread John Doyle
John T I took an old copy from a backup, renamed it, and stuck it in an obscure folder. If I get hacked, and they get to my Declude scripts, I'm screwed, but most likely it'll be the least of my worries. My recollection is that the worry is that that program can be fired off via an Ipswitch

Re: [Declude.JunkMail] We have opened up truncate.gbudb.net

2010-04-30 Thread John Doyle
While we're at it what is the difference between the two results below SNIFIP4R=WARN[5] SNIFIP4R=IGNORE[5] Thanks John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe

RE: [Declude.JunkMail] Question about Declude

2008-08-19 Thread John Doyle
Are you running the Declude AVG or other virus scanner and you are getting leakage? Or do you not have any anti-virus running? John From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Tuesday, August 19, 2008 11:06 AM To:

RE: [Declude.JunkMail] Question on mailbox action...

2008-04-30 Thread John Doyle
Chuck I recall for that for Declude to move the message to a spam folder for the user based on weight, You need to use the declude MAILBOX action. So something like WEIGHT20 MAILBOX Spam, as you have below. (this may only work for Imail?) However, I think you need to, for each domain, check the

[Declude.JunkMail] Attachments

2007-07-25 Thread John Doyle
Good morning Our Imail server is behind a Watchguard firebox firewall. It is very good about stripping off nasty attachments. When it does, it blocks the message and creates one sent to the recipient with an attachment, always the same name, and always the same single line of text in the

RE: [Declude.JunkMail] frustration

2007-07-18 Thread John Doyle
Uwe If you are running declude alone (without ZEROHOUR) you will find yourself pretty busy tweaking. I've added decludes zerohour, as well as invURIBL, and Sniffer. With basically the stock global config, and those 3 additional tests, we see very little get through. If you are strapped for cash

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-16 Thread John Doyle
for the SOSDG version of ClamAV: SCANFILE1 C:\clamav-devel\thirdparty\runclamscan\runclamscan.exe log=2 C:\clamav-devel\bin\clamdscan.exe --quiet -l report.txt VIRUSCODE1 1 REPORT1 FOUND Original Message From: John Doyle [EMAIL PROTECTED] Sent: Saturday, July 14, 2007 9:31 AM

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-16 Thread John Doyle
priviledge. I experienced some strange problems with permissions after I made this error. Original Message From: John Doyle [EMAIL PROTECTED] Sent: Monday, July 16, 2007 7:39 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] AntiVirus Recommendations Gary

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-14 Thread John Doyle
to take advantage of Clamd, and I've never had a problem with CPU usage. http://www.sosdg.org/clamav-win32 The latest version of SmarterMail now incorporates ClamAV (much like Declude and AVG), and they are using the SOSDG port. Gary Original Message From: John Doyle [EMAIL

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-13 Thread John Doyle
Don I ran F-Prot and Clam for years. Then when Declude added built in AV we turned that on and I dropped F-Prot when the licensing changed,So I ran Declude and Clam for about a year. I noticed at some point ClamAV was slamming the cpu and timing out. I had to turn it off. I'm not sure at what

RE: [Declude.JunkMail] Version and hardware move

2007-05-30 Thread John Doyle
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Tuesday, May 29, 2007 6:34 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Version and hardware move Sensitivity: Personal Andy If the old box is 8.22 and the new one is 2006.2, is it safe

[Declude.JunkMail] Version and hardware move

2007-05-29 Thread John Doyle
Morning all I spent the weekend firing up a new W 2003 server and installing Imail 2006.21 on it. I think I've delt with most of the installation issues. I would like to move clients over a domain at a time w/o doing using the technique of upgrading the old 8.22 machine and copying over the

RE: [Declude.JunkMail] Version and hardware move

2007-05-29 Thread John Doyle
Sorry guys, It was a long weekend and I meant this for the Ipswitch forum. John Morning all I spent the weekend firing up a new W 2003 server and installing Imail 2006.21 on it. I think I've delt with most of the installation issues. I would like to move clients over a domain at a time

RE: [Declude.JunkMail] Version and hardware move

2007-05-29 Thread John Doyle
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Tuesday, May 29, 2007 12:39 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Version and hardware move Sensitivity: Personal Sorry guys, It was a long weekend and I meant this for the Ipswitch forum. John

RE: [Declude.JunkMail] Imail Anti-spam

2007-04-11 Thread John Doyle
Chuck We've been running declude with Sniffer and invURIBL for a couple of years. We recently added ZEROHOUR and have been very happy with the results. I have not done an analysis of how we'd be with only Sniffer or ZEROHOUR or the various combinations of the three. We also run a pretty much

RE: [Declude.JunkMail] Need hep - mail server sending out stock reports email

2007-02-07 Thread John Doyle
Howard What version of Declude? Do you have Hijack? If so turn it on. Do your delcude logs show anything? Are you scanning all outgoing mail as well? If you are behind a firewall, ( you better be) shut down imail and check the firewall logs for outgoing smtp traffic. Perhaps even disallow

RE: [Declude.JunkMail] On RFC Violation - Declude allows attachments and Virus to pass through untouched and unscanned

2006-10-20 Thread John Doyle
Michael Can you share your RFC violations filter with us to block this type of attack? Thanks for the heads up and the testing you did. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Michael Thomas - Mathbox Sent: Thursday, October 19, 2006 7:52 PM

RE: [Declude.JunkMail] Blocking these?

2006-10-05 Thread John Doyle
Dave For goodness sake, call sniffer up, they offer a monthy subscription for I think less than 30 dollars. Put it on your credit card and get your company to reimburse you next month and send them a check for the 12 months and it's done. I'd hate to think what's getting though without some sort

[Declude.JunkMail] Gateway question

2006-08-23 Thread John Doyle
Good morning Can anyone recommend a program to strip user and password data to assist in loading a gateway. username, domain and password. I know this has come up in the past several times, but I'm looking for a recommendation by someone who has actually used it. Thanks John --- This

RE: [Declude.JunkMail] Gateway question

2006-08-23 Thread John Doyle
] Gateway question For what mail server? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Wednesday, August 23, 2006 11:07 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Gateway question Good morning Can anyone

RE: [Declude.JunkMail] Gateway question

2006-08-23 Thread John Doyle
Sandy I'm looking for something to extract to a file, will this do it? John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Sanford Whiteman Sent: Wednesday, August 23, 2006 12:04 PM To: John Doyle Subject: Re: [Declude.JunkMail] Gateway question I know

RE: [Declude.JunkMail] Ping

2006-08-11 Thread John Doyle
pong -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David Barker Sent: Friday, August 11, 2006 8:31 AM To: declude.virus@declude.com; declude.junkmail@declude.com Subject: [Declude.JunkMail] Ping Ping --- This E-mail came from the Declude.JunkMail

RE: [Declude.JunkMail] Fw: New ClamAV scam database

2006-08-07 Thread John Doyle
Bill Thank you for the heads up. In the process of reviewing this, I discovered I'd not updated my download scripts to reflect the .gz extension and my last update had occurred last month. I vaguely recall someone pointing this out some time ago. I rewrote my script to download asnd unzip the

RE: [Declude.JunkMail] 4.3 Upgrade

2006-07-24 Thread John Doyle
Mark I upgraded last week. I'd had a leakage issue with 4.2 build 12 and went back to 4.09. I have had no problems since going back upto 4.3. I'm running Imail 8.22 hf2 On an unrelated issue. My AVG virus defs were not getting updated. It took a while to troubleshoot, but I got great

RE: [Declude.JunkMail] Hijack: Blocklist feature request

2006-07-20 Thread John Doyle
Check the archives for an old solution for hold notification. There is a vbs script that will do what your looking for. I have scheduled every 15 min. If there are any files in hold2, it emails me. I use something similar for the outgoing queue in case of a backup. The issue of outgoing mail has

RE: [Declude.JunkMail] Speaking of Decludes AVG scanner

2006-07-18 Thread John Doyle
are receiving an invalid key code error. If not try this: http://support.declude.com/Customer/KBArticle.aspx?articleid=57 Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Monday, July 17, 2006 5:38 PM To: declude.junkmail@declude.com

RE: [Declude.JunkMail] Speaking of Decludes AVG scanner

2006-07-18 Thread John Doyle
Nick Good catch, at the bottom of my diags.txt file I see 2 INVALID KEY entries. My firewall does not allow domain names to be entered as source or destination addresses, only IP addresses. I had an old entry for 63.246.13.84 entered on march 06, doing an nslookup for keys.declude.com I now

[Declude.JunkMail] Speaking of Decludes AVG scanner

2006-07-17 Thread John Doyle
None of the db files have ever updated. Does anyone know what ports, protocols, whatever is used to do the update. Either Declude is not requesting the db update, or our firewall is blocking either the request or the subsequent update file. So far I haven't been able to find anything in the

RE: [Declude.JunkMail] Speaking of Declude's AVG scanner

2006-07-17 Thread John Doyle
! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Monday, July 17, 2006 2:38 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Speaking of Decludes AVG scanner None of the db files have ever updated. Does anyone know what ports

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

2006-07-10 Thread John Doyle
We are running Imail 8.22. I did the upgrade on Saturday, so far no problems. I backed down from 4.2 b12 to 4.09 as I was getting email without declude adding header information, and I was not able to find any record in any declude log of the message being processed. So far I have not seen a

[Declude.JunkMail] Verizon Issues

2006-07-06 Thread John Doyle
Morning all Last week, I found I was unable to send to a Verizon customer. I was getting 550 You are not allowed to send mail:sv5pub.verizon.net I submitted our mail server IP address to see if we were blacklised and got a reply back that we were not. I then switched to using a Charter SMPT

RE: [Declude.JunkMail] New Version working so far...

2006-07-06 Thread John Doyle
David I tried to post a message earler today and I havent seen it yet. Are there some unprocessed posting? Thanks John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David Barker Sent: Thursday, July 06, 2006 2:07 PM To: declude.junkmail@declude.com

RE: [Declude.JunkMail] Verizon Issues

2006-07-06 Thread John Doyle
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Thursday, July 06, 2006 05:28 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Verizon Issues Morning all Last week, I found I was unable to send to a Verizon customer. I was getting 550 You

RE: [Declude.JunkMail] compatibility question

2006-06-19 Thread John Doyle
Robert I"m running 8.22 hf2 and Declude 4.1. I would not suggest going to 4.2 as I was getting some "leakage" of mail that seemingly had not been scanned by declude. I could not find any record in either the declude, or the virus log files. I found that the headers had no declude

RE: [Declude.JunkMail] Mail Backlogging

2006-05-31 Thread John Doyle
Will Check your memory useage in Task Manager and be sure you don't have memory creep. I had winsockcleanup on for an issue I had. Once resolved I turned it off. It seem to not allow new messages into the procdirectory untill it empties to allow for the cleanup. So, if you watch cpu usage

RE: [Declude.JunkMail] Experience with 4.x

2006-05-23 Thread John Doyle
Andrew I had this problme last year, decludeproc will suffer memory creep, slowly building over time. You can see if it's happening by opening taskmanager and checking the memory used by decludeproc. For us it would run for about 4 hours before a problem arose. I can't remember what finally

RE: [Declude.JunkMail] Experience with 4.x

2006-05-23 Thread John Doyle
This sounds like me. I found some notes from my issue back in December. When upgrading to v 3 from v 2x we would loose connectivity every 3 or 4 hours. We finally figured out Decludeproc needs to get out on port 53 for some dns function. We allowed outbound port 53 for dns and the problem went

[Declude.JunkMail] Filter question

2006-05-14 Thread John Doyle
I've just started using Sniffer and am wondering if I can create a test for the following condition and take an action. Say: if the declude score is greater than 20 and Sniffer has not been triggered, copy the message to a spam account. So something like header contains WEIGHT20 and doesn't

RE: [Declude.JunkMail] invURIBL

2006-04-08 Thread John Doyle
Todd I added invURBL a couple of months ago. Other than pointing it to a specific Dns, I did not change the config file. They have a good section in the manual about how to config it for use with declude. I raised my domain weight scores for a bit to be sure we were not adding the new invurlb

RE: [Declude.JunkMail] Declude 3.1 and 4.1 Release Notes

2006-04-06 Thread John Doyle
Love the link in the release notes to the examples in the KB. It makes it easy to evaluate and if desired adopt. Thanks! John Declude 3.1 and 4.1 Release Notes http://www.declude.com/Articles.asp?ID=122 available. David B www.declude.com --- This E-mail came from the Declude.JunkMail mailing

RE: [Declude.JunkMail] Virus?

2006-04-06 Thread John Doyle
Goran Can you give me some information on installing the sane security phishing filters with CLAM. I found and went to the sane web site, and can see how to download, But Im not sure how clamwin is set up to use the file. Any help would be appreciated. Thanks John

RE: [Declude.JunkMail] Hijack Notification

2006-04-03 Thread John Doyle
PROTECTED] = -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Wednesday, March 29, 2006 9:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Hijack Notification Does anyone have

RE: [Declude.JunkMail] Hijack Notification

2006-04-03 Thread John Doyle
Internet W: www.123marbella.com E : [EMAIL PROTECTED] = -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Wednesday, March 29, 2006 9:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail

RE: [Declude.JunkMail] Hijack Notification

2006-04-03 Thread John Doyle
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, April 03, 2006 11:03 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Notification Hi John, John Doyle wrote: this guy suggested this.I'm not sure exactly how. looks like if a count

[Declude.JunkMail] Hijack Notification

2006-03-29 Thread John Doyle
Does anyone have a utility to email a notification when hijack holds an ip address permanently? Thanks in advance John --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives

RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User

2006-03-27 Thread John Doyle
I have a vague recollection of this being first available on 8.20. A search of the ipswitch imail forum might produce an accurate version number. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Craig Edmonds Sent: Monday, March 27, 2006 8:16 AM To:

[Declude.JunkMail] Version 4

2006-03-01 Thread John Doyle
Good afternoon. I just resolved an issue with the upgrade from V3 to V4, and thought I'd pass it along. Our mail server is behind a pretty locked down firewall. When upgrading from V2 to V3 we had an issue with the new version firing up and then stopping. It was resolved when we allowed access

RE: [Declude.JunkMail] Upgrading to Version 3 and then 4....

2006-02-27 Thread John Doyle
Me too. I saw on the lists the topic, and got a email from Declude. I called, got informed, felt well treated and went with the program. Upgraded to V 4. It's nice to be able to talk to real people who listen and are responsive. John -Original Message-From: [EMAIL

RE: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-17 Thread John Doyle
Will I had the same problem a month or so ago. My issue turned out to be my firewall was preventing the mail server from going out. I have my DNS servers behind the firewall also. When this happens declude seems to hang on to some memory and it slowly consumes resourses. I allowed the mail

RE: [Declude.JunkMail] License Downgraded [was All I wan't for Christmas is not to be paged!)

2005-12-27 Thread John Doyle
Darrell I had a similar problem a few months ago. I found our firewall was not allowing our mail server to query (I think) a declude site. For us it resulted in a memory leak as well as periodic declude failure for spam. It would take anywhere from 4 to 18 hours to fail. It was fixed once I

RE: [Declude.JunkMail] SPF PASS/FAIL test format

2005-12-08 Thread John Doyle
I have quick question re. 3.0 version of Declude. I installed both the .20 and the .21 version on a windows 2003 enterprise server with Imail 8.15 hf2 and discovered a memory leak. I've not heard back from Declude as to a fix. I'd like to go to 8.22 to address a few issues but am worried

RE: [Declude.JunkMail] OT - At wits end

2005-11-30 Thread John Doyle
Dave I've tried this, and when I point imail to 127.0.0.1 the spam log shows that I'm not able to connect to the external spam databases. As soon as I point imail back to our dns server, the spam filter begins to work again. I've got our two DNS servers, and one other all set up in the tcp

[Declude.JunkMail] FW: Memory leak

2005-11-22 Thread John Doyle
Hi all I'm suffering with a connectivity issue. After about 4 to 6 hours I lose the ability to query spam databases. If I restart decludeproc I can again connect to the databases. I also have a slow memory creep. It will slowly climb and I don't know if this is the cause of the loss of