[Declude.JunkMail] OT: (Re-post) Dial-Up Services for San Diego, CA

If there is anyone who provides dial-up services in San Diego, California who would be interested in acquiring approximately 50+ user accounts, please contact me off list. [EMAIL PROTECTED] No one has responded from my first post from a week ago. I am not trying to sell these

[Declude.JunkMail] OT: Dial-Up Services for San Diego, CA

If there is anyone who provides dial-up services in San Diego, California who would be interested in acquiring approximately 50+ user accounts, please contact me off list. Kim W. Premuda [EMAIL PROTECTED] -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- This E-mail came

[Declude.JunkMail] Per User Filtering

Can someone tell me what to put in the per user 'user.junkmail' file that would cause all messages to effectively be whitelisted for that user (user does not want anything tested by JunkMail)? Currently, all tests are set to 'WARN', but that's not producing the desired results. Thanks! Kim W.

Re: [Declude.JunkMail] California Regional Intranet

-- Original Message -- From: Kevin Bilbee [EMAIL PROTECTED] This IPS seems to be very friendly with the Spammers. What are your thoughts about blocking their entire assigned IP range?? California Regional Intranet, Inc. is a San Diego, CA based ISP

Re: [Declude.JunkMail] Spam leak?

Ummm... Did anybody else get a piece of spam this morning with subject SPAMSPCE: that seems to have been relayed through Declude.com? Yes, we did. -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This

RE: [Declude.JunkMail] Global.cfg lines for SPF

This is what we have in our 'global.cfg' file: SPFFAIL spffail x x 3 0 Is this old syntax? A remnant of version 1.86? We are currently running JunkMail 3.0.5.20. Also, why are the weights all zero? Shouldn't a fail add weight, and a pass subtract weight? Or, am I misunderstanding the 'spf'

RE: [Declude.JunkMail] Any fix released for the corrupt message character issues in 3.0.5?

-- Original Message -- From: John T \(Lists\) [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Thu, 29 Sep 2005 15:05:10 -0700 Actually, looks they have official released 3.0.5.5 which fixed the problem. Hi, John. Have you tested this?

[Declude.JunkMail] JunkMail 3.0.5 100% CPU Usage

IMail 8.05 HF3 JunkMail 3.0.5.5 We are still seeing times when 'decludeproc.exe' will burst the CPU usage to 100% for 20-30 seconds up to a minute or two. We've adjusted the WAITFORTHREADS and WAITBETWEENTHREADS to various values, and it doesn't seem to make any difference. The current values

Re: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A

John, Attached is the d*.smd file that I reported to Declude last Thursday which causes both the 3.0.3 and 3.0.4.4 'decludeproc.exe' services to stop. The message content looks very similar to the 3 files you posted, and I thought you might want to take a look at it (out of curiosity). Kim

[Declude.JunkMail] Beta 3.0.4.4 Problem

IMail 8.05 HF3 Downloaded and installed 3.0.4.4. Message file pairs were appearing in the 'proc' folder, subsequently moved to 'work' folder, then dispositioned as needed. Observed this for 10-15 minutes, then went about business. Checking back, I found that the 'decludedproc.exe' service was

RE: [Declude.JunkMail] Beta 3.0.4.4 Problem

-- Original Message -- From: John Tolmachoff \(Lists\) [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Thu, 22 Sep 2005 17:49:41 -0700 I would ask that you go back to 3.0.4.4 and keep running. If you have this problem again, please do the

Re: [Declude.JunkMail] Problem with a per domain filter file

That was my guess as well. That is, the ALLRECIPS test is a logical AND function and requires that ALL ending domains be the same for the test to be true. Any one domain not matching the requisite domain (the one you are testing for) will cause the test to fail. -- Original Message

RE: [Declude.JunkMail] Beta 3.0.4

Hi, John. Just curious... What method did you use to determine that those 4 messages were causing the 'decludeproc.exe' service to unexpectedly stop? I would like to be able to send Declude the messages in our 'proc' folder that are causing the same problem here. Regards, Kim --

RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc' Folder

Hi, John. Yeah...did all that, except running the JunkMail log in 'HIGH' mode. So, I re-ran the test this morning with the log mode set to 'HIGH'. I ran the test between 7:10A and 7:20A. At the start of the test, both the 'proc' and the 'proc\work' folders were empty. As the test progressed,

RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc' Folder

John, I performed the suggestions you gave and got the same results. We shall be giving David at Declude access to our mail server, so they can see what's happening first hand. I'll keep the list posted. Kim -- Original Message -- From: John Tolmachoff

Re: [Declude.JunkMail] 3.0.4

Gawck! At first, I thought No way did I do that!, but I hadn't closed the browser session to the Declude beta site. Upon checking, I was astounded to find that I did, indeed, download the SmarterMail version of 'decludeproc.exe' (it was still highlighted)...3 TIMES OVER THE PAST TWO DAYS and

[Declude.JunkMail] Beta 3.0.4

IMail 8.05 HF3 After installing JunkMail beta 3.0.4 (for IMail) this morning, everything seemed to be working. That is, I could see the THREAD requisite number of d*.smd and q*.smd file pairs being moved to the 'proc\work' folder, whereupon they would get processed and disappear. I visually

[Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc' Folder

IMail 8.05 HF3 I installed the JunkMail beta 3.0.4, and had the same results as with 3.0.3.8. That is, the 'decludeproc.exe' service was running (as indicated by Task Manager), however, nothing was being processed ('decludeproc.exe' was near the bottom of the Task Manager list when sorted by

Re: [Declude.JunkMail] Declude 3.0.3 update

I experienced the maxed out processor(s) - I only tried it for a few min and then went back to 2.0.16. Haven't tried it since! -Nick Nick, The beta version 3.0.3 does not automatically create the 'work' folder below the 'proc' folder (ie. 'proc\work'). If you create the folder manually,

[Declude.JunkMail] Sniffer error in Declude log

Over the weekend, a lot of spam has been getting through. Checking the Declude JunkMail log file shows the following: 09/10/2005 00:01:41.906 q84a2205001d48c60 ERROR: External program SNIFFER didn't finish quick enough; terminating. Can anyone shed some light on this? That is, what would

Re: [Declude.JunkMail] Declude 3.0.3 update

We installed the latest 3.0.3 beta tonight; the decludeproc service shot to 99% of CPU and stayed there for 15 minutes. During this time we accumulated over 1000 items in the proc folder; nothing was going out. Anyone else experienced this? We loaded JunkMail 3.0.3 last night and, this

Re: [Declude.JunkMail] Declude 3.0.3 update

Those were the same error messages that I seen when the work directory was not created. Please see my earlier post - you need to make sure you have a /spool/proc/work directory. Darrell Thanks, Darrell. I did read your previous post, but not until I had already sent my posting to the list.

Re: [Declude.JunkMail] Declude 3.0.3 update

Now the other thing to make sure of is did you increase the amount of threads that it will use in the declude.cfg file? By default it appears to use only 5 threads. I bumped mine up to 25 and that seems to be working very well. The other thing which is documented on the beta page is if you

[Declude.JunkMail] VIRUS WARNING

VIRUS WARNING - For the past 2 days, our server that runs IMail was bringing the rest of our network to a crawl. If we disconnected this server from the network, then the network would restore to normal. Just in case anyone else is having network problems, this may be the cause.

[Declude.JunkMail] How they deal w/ Spammers in Russia

http://www.mosnews.com/news/2005/07/25/spammerdead.shtml -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED],

Re: [Declude.JunkMail] Custom Filter Diagnosis Help

Are you using anything like SKIPIFWEIGHT options in the filter or ENDS clauses. Yes, this particular custom filter has the following two lines at the beginning of the filter definition: TESTSFAILED END CONTAINS BYPASS SKIPIFWEIGHT 16 BYPASS never shows up in the line of

Re: [Declude.JunkMail] Custom Filter Diagnosis Help

Also, one thing that can affect the filter files that I have seen in the past is spammers will put fake html tags in the middle of the URI to get it past filters Example: americfaketagaspharm.com - the email client will normally interpret this correctly and display americaspharm.com (i.e. not

[Declude.JunkMail] Custom Filter Diagnosis Help

x 0 0 and the '$default$.junkmail' contains the following entry: DRUGS-MEDICATIONS WARN I looking for recommendations as how to find the cause of failure for this filter. Any suggestions would be appreciated. Thanks! Kim Premuda FastWave Internet Services San Diego, CA

Re: [Declude.JunkMail] Custom Filter Diagnosis Help

Couple of gotha's we usually see [1] Make sure there are no hidden or extra spaces after the name. [2} If it is the last item in the filter do an extra return so that your line is not the last line in the filter. Darrell Hi, Darrel. Thanks for responding! There is no space character after

Re: [Declude.JunkMail] MTLDB Hotmail

We've been having problems with MTLDB doing the same thing...started around 8:00A PST (California, US). -- Original Message -- From: Kami Razvan [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Tue, 29 Mar 2005 17:06:14 -0500 Hi; Am I

RE: [Declude.JunkMail] Line Modifier: = ? i s o - 8 8 5 9 - 1 ? Q ?

Thanks Andy, Matt, and Markus for your feedback...I really appreciate your comments. -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send

[Declude.JunkMail] Line Modifier: = ? i s o - 8 8 5 9 - 1 ? Q ?

We have received spam messages in the past whose 'To:', 'From:', 'Subject:', and 'Sender:' lines contain the character string: = ? i s o - 8 8 5 9 - 1 ? Q ? (spaces added to avoid filters) so, we created an external filter (SUBJECT) to detect the string. Now, it appears, this may

Re: [Declude.JunkMail] BONDEDEDSENDER and SNIFFER

Thanks Matt, Scott, and Andrew, for your feedback and your perspectives on this matter. It appears BONDEDSENDER isn't as trustworthy as they claim. Best regards, -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail scanned for viruses by Declude Virus] --- [This

[Declude.JunkMail] 'X-Declude-Sender:' Question

Our IMail server trapped a spam message that was whitelisted by Declude JunkMail. The header of the message is shown below: Received: from fastwave.net [210.221.79.126] by ns3.fastwave.net (SMTPD32-8.05) id AB32D5301D8; Sat, 29 Jan 2005 10:51:30 -0800 Message-ID:

Re: [Declude.JunkMail] 'X-Declude-Sender:' Question

Thanks Matt and Darrell. I would imagine that you have AUTOWHITELIST ON and that your customer has his own E-mail address in his Web mail address book. You both were correct...AUTOWHITELIST is ON and the customer's e-mail address was listed in his Web mail address book. -- Kim W. Premuda

[Declude.JunkMail] DNSSTUFF.COM Web Site Down?

It's 4:30A PST, and I cannot access the 'dnsstuff.com' web site. Is anyone else having the same problem? -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus

Re: [Declude.JunkMail] DNSSTUFF.COM Web Site Down?

The site was being reset -- normally it's only down for a few seconds, but this morning it was down for about 10 minutes. -Scott Thanks, Scott and Pete. I gave up after about 10 mintues of 'page cannot be found' messages. Go figure. It's

[Declude.JunkMail] BONDEDEDSENDER and SNIFFER

I seem to get a fair number of messages that 'fail' both BONDEDSENDER and SNIFFER: X-Spam-Tests-Failed: BONDEDSENDER [-10], SNIFFER [20], WEIGHT10 [10], TLD-TRUSTED-HELO [0], TLD-TRUSTED-MAILFROM [0], TLD-TRUSTED-REVDNS [0] TOTAL [10] Both tests are supposed to be highly trusted/accurate, so

Re: [Declude.JunkMail] WAY OT: Syslog entries from Cisco ACL question

-- Original Message -- From: Rick Davidson [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 8 Dec 2004 15:17:27 -0500 Does anyone know what traffic uses a destination and source port of 0? FYI: From the Internet Protocols Handbook published by

[Declude.JunkMail] Need NDR Filter Help

x 25 0 JOEJOBNDR WARN Can someone tell me why the filter is not working? Also, I am open to any other methods or suggestions for getting the job done. Thanks in advance, Kim Premuda FastWave San Diego, CA -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail

Re: [Declude.JunkMail] Need NDR Filter Help

Thanks Scott and Matt for clearing up the '' issue...it's a far better approach than what I was attempting. Scott... What is the interaction between your two tests, MAILFROM-NULL-SENDER and USER-JOE-JOB? The reason I am asking is that I can only get MAILFROM-NULL-SENDER to trigger and not the

FWD: Re: Re[2]: [Declude.JunkMail] Spam getting through

-- Original Message -- From: Sheldon Koehler [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Thu, 28 Oct 2004 12:12:11 -0700 It is obvious they are using disposable domain names. They come in flavors like gbzqrx.info and so on.

Re: [Declude.JunkMail] Newbie help/guidance needed!

Matt, Some of the your new filters replace existing filters (eg. Gibberish v1.0.7 with Gibberish v2.1.1.). The older versions have anti-xxx filters, but the new filters don't. When using the newer filters, should I keep or delete the older anti-xxx filters? Many thanks for all the help!

Re: [Declude.JunkMail] Newbie help/guidance needed!

The 'all_list.dat' file was included with the distribution. Thanks for the additional blacklists...I was not aware that they existed. -- Original Message -- From: Scott Fisher [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Thu, 14 Oct 2004 09:24:10

[Declude.JunkMail] Test - New User

Just testing to see if my posts make it to the list. No need to reply. -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came