. Daily emails and voice messages remain unanswered.
This is very unusual. Maybe it's just this customer?
Steve
- Original Message -
From: SM Admin
To: Declude.JunkMail@declude.com
Sent: Monday, January 28, 2013 10:29 AM
Subject: Re: [Declude.JunkMail] Declude subscription valid
, January 28, 2013 10:29 AM
Subject: Re: [Declude.JunkMail] Declude subscription valid but IS EXPIRED
KEY in diags.txt
Is it possible that they issued you a new key when you renewed?
And what emails did you write to?
Ben
From: Steve Cirivello
Sent: Monday, January 28
Dean,
There is currently an issue with the AVG that we are currently working on. As
far as backup in the \proc directory and the 0 Kb log that seems like a
different issue. Can you please contact supp...@declude.com for assistance.
David Barker
VP Operations Declude
Your Email security is
Thanks Dave, will do.
On Fri, Jan 11, 2013 at 10:25 AM, David Barker dbar...@declude.com wrote:
Dean,
** **
There is currently an issue with the AVG that we are currently working on.
As far as backup in the \proc directory and the 0 Kb log that seems like a
different issue. Can you
?
Thanks again for all your help and the same for Shaun.
Ben
- Original Message -
From: Sanford Whiteman
To: Declude.JunkMail@declude.com
Sent: Wednesday, November 28, 2012 7:24 PM
Subject: Re: [Declude.JunkMail] Fw: Deciphering Comcast reply on weird DNS
stuff
Ben,
Thanks
in front of a mail server.
Darin.
From: SM Admin
Sent: Friday, November 30, 2012 7:52 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Fw: Deciphering Comcast reply on weird DNS
stuff
Hi Sandy,
I forwarded your last reply to Comcast but haven't heard from anyone there
since
Hi Ferrell. You would need to upgrade to 4.11.00 first then upgrade to the
latest interim 4.11.xx
Linda Pagillo
Declude Technical Support Engineer
866-332-5833 Ext. 2
lpagi...@declude.com
From: Ferrell Ard [mailto:ferr...@badpuppy.com]
Sent: Thursday, November 29, 2012 10:42 AM
To:
You need to install 4.11.00 first using the setup program available for
download from your Declude My Account page. Thereafter you can upgrade to
4.11.07 which is the interim release by just switching out your Decludeproc.exe
from http://interim.declude.com/41107/ if you need any assistance
you no more.
Spencer Jones
Engineer II Enterprise Technical Support
7150 S. Fulton St, Centennial, CO 80112
-Original Message-
From: Sanford Whiteman
Sent: Tuesday, November 27, 2012 6:09 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Fw: Deciphering Comcast reply
: Tuesday, November 27, 2012 6:09 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Fw: Deciphering Comcast reply on weird DNS
stuff
Actually, you did catch something. The section that starts with
Authority. In his email he says Answer ns0.xname.org which I
take to mean that he
Hi Dave,
A firm SPF policy generally does help, but it depends on the receiving
servers implementing SPF in order to block messages that violate your SPF
policy.
Aside from that and filtering that blocks any original included message
content, there's nothing I know of that can stop bounces and
I should add that the number of erroneous emails sent to the old mail server
has decreased. From Thursday through Saturday it went down to zero and I
was hoping the problem had gone away. Then it started up again on Sunday,
but at lower volume than before. Interestingly, most of the emails
Ben,
Thanks for running your questions by me. Feel free to forward this
message to your Comcast rep. Even if he is unwilling to help you
further, there is information below that will help him be more
accurate in future cases, since he currently lacks sufficient
understanding of DNS.
Mr. Jones is
The link you provide is what I found before: it's a Windows port but it's
uncompiled. Lacking a compiler, I was looking for something precompiled.
Ah, didn't notice that -- maybe search for a p0f 2.x binary because
that's the last time I used it. I have a 2.04 binary that I'll send
you off
Update: NetworkMiner
(http://sourceforge.net/apps/mediawiki/networkminer/index.php?title=NetworkMiner)
uses the p0f OS fingerprint database and should work for you.
-- S.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com,
In the end, he seems to be saying that we have a name server
giving wrong results, which would make sense, except I can't figure
out which name servers he's referring to. You'll see below where he
says the NS0 name server points to NS1 and that will point to
mail2.bcwebhost.net and your
?
Thanks,
Ben
- Original Message -
From: Sanford Whiteman
To: Declude.JunkMail@declude.com
Sent: Tuesday, November 27, 2012 4:36 PM
Subject: Re: [Declude.JunkMail] Fw: Deciphering Comcast reply on weird DNS
stuff
In the end, he seems to be saying that we have a name
?
Thanks,
Ben
- Original Message -
From: Sanford Whiteman
To: Declude.JunkMail@declude.com
Sent: Tuesday, November 27, 2012 4:36 PM
Subject: Re: [Declude.JunkMail] Fw: Deciphering Comcast reply on weird DNS
stuff
In the end, he seems to be saying that we have a name
Actually, you did catch something. The section that starts with
Authority. In his email he says Answer ns0.xname.org which I
take to mean that he is getting that authorotative response from
nso0.xname.org and not ns1.xname.org as you assume below.
It means ns0.xname.org is part of the
I remember Len Conrad from way back when, and I believe he could
hand him his Where would there be a DNS-centric list or forum where
Len hangs out?
Maybe the big ISC BIND newsgroup or something? But it doesn't have to
be him, it could be someone on the DNSStuff forums, too.
-- S.
---
nowadays? I
think I reset mine many years ago after a discussion here among some other
people.
Thanks,
Ben
-Original Message-
From: Sanford Whiteman
Sent: Friday, November 23, 2012 6:01 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] MX, DNS and other weird stuff
It's
So, two questions: first, is there a version of p0f that runs under Windows?
I found the Unix version and I found a Windows-port version that is not
compiled (and I haven't used a real compiler in at least ten years).
http://packetstormsecurity.org/files/download/109101/p0f-3.03b-win.zip
-Original Message-
From: Sanford Whiteman
Sent: Monday, November 26, 2012 7:20 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] MX, DNS and other weird stuff
So, two questions: first, is there a version of p0f that runs under
Windows?
I found the Unix version and I found a Windows
It's not really a complex setup unless you have (or had) a secondary
that is capable of reloading with bad records. It shouldn't be
possible to have a proper secondary that does this, as it should use
either standard *XFR methods or some proprietary sync mechanism at
startup to get the right
Hi Shaun,
Thank you for a helpful response. I am CC'ing the list with this so I can
get your response posted there.
Thanks,
Ben
-Original Message-
From: Shaun Sturby
Sent: Wednesday, November 21, 2012 9:01 AM
To: imailad...@bcwebhost.net
Subject: RE: [Declude.JunkMail] MX, DNS
Hi,
First, I want to thank Shaun and Sandy for truly useful replies. Next, below
is a response from someone at Comcast – presumably an engineer of some sort.
I’m trying to fit together his comments (I find his tone pretty argumentative)
with the points made here. For examples, Shaun seems to
and other weird stuff
-Original Message-
From: Sanford Whiteman
Sent: Thursday, November 22, 2012 11:55 AM
To: imailad...@bcwebhost.net
Subject: Re: [Declude.JunkMail] MX, DNS and other weird stuff
[I'm not subscribed using this address, but it's the only one on my mobile.
Pls feel free
Second problem:
In our new DNS records, I have it set up something like this:
two MX records:
bcwebhost.net MX mail.bcwebhost.net
mail.bcwebhost.net MX mail.bcwebhost.net
one A record:
mail.bcwebhost.net A (IP.200)
Is there any reason I can't have the same name for both an MX and
an A
@declude.com
Subject: Re: [Declude.JunkMail] MX, DNS and other weird stuff
Second problem:
In our new DNS records, I have it set up something like this:
two MX records:
bcwebhost.net MX mail.bcwebhost.net
mail.bcwebhost.net MX mail.bcwebhost.net
one A record:
mail.bcwebhost.net A (IP.200
Thanks!
-Original Message-
From: Sanford Whiteman
Sent: Tuesday, November 20, 2012 10:37 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] MX, DNS and other weird stuff
Thanks for the info. Is there any problem with using the same host name
for
both MX record
have Hijack but – try not to laugh – I’ve never used it and
we’ve had it for years.
From: Linda Pagillo
Sent: Monday, October 22, 2012 9:25 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] abused whitelist?
Hey fellas, the list is still here, just not very active. I apologize
imailad...@bcwebhost.net
Sent: Tuesday, October 23, 2012 4:00 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] abused whitelist?
The SA on that server isn't active but we're going to move over to
SmarterMail with a new Declude anyway. I was figuring that this client's own
Hi,
I think you're sending this to the wrong place. Who/what company are
you looking for?
Thanks,
Andrew Baldwin
an...@thumpernet.com
an...@thumpernet.com
315-277-0685
Monday, October 22, 2012, 2:54:29 PM, you wrote:
IA
IA
IA
IA
IA
IA Hi,
IA
IA
IA
IA
IA
IA We have a client that is getting
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] abused whitelist?
Hi,
I think you're sending this to the wrong place. Who/what company are
you looking for?
Thanks,
Andrew Baldwin
an...@thumpernet.com
an...@thumpernet.com
315-277-0685
Monday, October 22, 2012, 2:54:29 PM, you
forums
DC years ago, which effectively killed the list.
DC Darin.
DC -Original Message-
DC From: andyb@thumpernet
DC Sent: Monday, October 22, 2012 6:03 PM
DC To: Declude.JunkMail@declude.com
DC Subject: Re: [Declude.JunkMail] abused whitelist?
DC Hi,
DC I think you're sending
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] abused whitelist?
Hi,
aha!
Thanks,
Andrew Baldwin
an...@thumpernet.com
an...@thumpernet.com
315-277-0685
Monday, October 22, 2012, 7:53:29 PM, you wrote:
DC Hi Andy,
DC He sent it to the Declude Junkmail list, of which you are a member.
DC However
To clarify the message ID is always exactly the same or is similar too ?
Message-ID: 1341147286.19774.androidmob...@web140302.mail.bf1.yahoo.com
From: John Dobbin [mailto:jo...@penpublishing.com]
Sent: Thursday, July 05, 2012 4:28 PM
To: Declude.JunkMail@declude.com
Subject:
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Android Yahoo Mail app spam
To clarify the message ID is always exactly the same or is similar too ?
Message-ID: 1341147286.19774.androidmob...@web140302.mail.bf1.yahoo.com
From: John Dobbin [mailto:jo...@penpublishing.com]
Sent
welcome to it.
Andrew 8)
From: John Dobbin [mailto:jo...@penpublishing.com]
Sent: Friday, July 06, 2012 10:55 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Android Yahoo Mail app spam
After review of my samples, the message ID
@declude.com
*Subject:* RE: [Declude.JunkMail] Android Yahoo Mail app spam
To clarify the message ID is always exactly the same or is similar too ?
Message-ID: 1341147286.19774.androidmob...@web140302.mail.bf1.yahoo.com
mailto:1341147286.19774.androidmob...@web140302.mail.bf1.yahoo.com
*From
If you know the header contains an exact string on a single line:
HEADERS 1 PCRE (?m:^Message-ID:blahblahblah)
Set the score weight as you like.
If you want to do a case-insensitive search, change ?m: to ?im:
If the text inside the blahblahblah would match regexp reserved strings,
Yes. You can use CB-ATTACH.txt as a basis for attachments. You can add the
following to the top of the filter to restrict this to specific domains.
ALLRECIPS END NOTCONTAINS example.com
If you have multiple domains then we would have to use a regex for this.
David Barker
VP
BODY 10 PCRE (?i:\/wp-includes\/)
From: John Dobbin [mailto:jo...@penpublishing.com]
Sent: Friday, June 08, 2012 1:34 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] hacked Wordpress rule?
We are seeing a tremendous number of hacked
There are a couple different ways to do this. But first you will need to
setup a config folder for this specific domain (if you haven't already done
so). See http://www.declude.com/searchresults.asp?Cat=124 under
Per-Domain and Per-User Settings.
Once the config file is setup for this
Create a filter using the following:
HEADERS END NOTCONTAINS @googlegroups.com
#If email from Googlegroups and PK
COUNTRIES 50 PCRE(PK)
David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
dbar...@declude.com
Hi Todd. Could you please send me a few headers from these messages along with
a copy of your global.cfg and diags.txt file? Please send it to
supp...@declude.com . Thanks!
Linda Pagillo
Declude Technical Support Engineer
866-332-5833 Ext. 2
lpagi...@declude.com
-Original Message-
Hi Linda -
Thanks - sending them over now.
Todd
-Original Message-
From: Linda Pagillo [mailto:lpagi...@declude.com]
Sent: Tuesday, May 08, 2012 2:44 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Pakistan Messages
Hi Todd. Could you please send me a few headers
Ext. 2
lpagi...@declude.com
From: Imail Admin [mailto:imailad...@bcwebhost.net]
Sent: Monday, March 12, 2012 10:05 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] invisible attachments?
Thanks Steve. That's the kind of solution I'd already found which doesn't
help. In fact
Most likely a malformed header created by the sending application.
Depending on how strict an application insists on CR/LF combinations (vs just
CR or just LF) – the attachment is either recognized as a distinct MAPI element
– or treated as excess junk in the headers or some previous MAPI
/secure/support_ticket.htm
From: Linda Pagillo lpagi...@declude.com
Sent: Tuesday, March 13, 2012 7:40 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] invisible attachments?
Hi Ben. I do not believe this is a Declude issue because I
@declude.com
Subject: RE: [Declude.JunkMail] invisible attachments? - change topic
Hi Linda,
What are the plans for newer versions of Declude?
-Nick
MadRiverAccess.com|Skywaves.net Tech Support
US/Canada 877-873-6482 or International +1-802-229-6574
Emergency Support 24/7: supp...@skywaves.net
General
From: David Barker dbar...@declude.com
Sent: Tuesday, March 13, 2012 11:13 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] invisible attachments? - change topic
Besides minor releases and fixes the next major release will be Declude 5.0
which will have
Perhaps this issue:
http://www.tomshardware.com/forum/236687-49-outlook-express-attachments
along with Microsoft Support Article ID 197066
Steve
- Original Message -
From: Imail Admin
To: Declude.JunkMail@declude.com
Sent: Monday, March 12, 2012 6:10 PM
Subject:
To: Declude.JunkMail@declude.com
Sent: Monday, March 12, 2012 6:44 PM
Subject: Re: [Declude.JunkMail] invisible attachments?
Perhaps this issue:
http://www.tomshardware.com/forum/236687-49-outlook-express-attachments
along with Microsoft Support Article ID 197066
Steve
- Original Message
, 2011 10:28 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Time to upgrade and to what?
Thanks, that helped.
From: Todd Richards
Sent: Monday, June 06, 2011 6:18 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Time to upgrade and to what?
Hey Ben –
If you
, 2011 10:28 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Time to upgrade and to what?
Thanks, that helped.
From: Todd Richards
Sent: Monday, June 06, 2011 6:18 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Time to upgrade and to what
: IMail Admin
Sent: Tuesday, June 07, 2011 10:28 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Time to upgrade and to what?
Thanks, that helped.
From: Todd Richards
Sent: Monday, June 06, 2011 6:18 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Time
On 1/13/2012 10:39 AM, Scott Fisher wrote:
One Hotmail spammer peddling Chinese drugs
is consistently getting through.
There just isn’t enough wrong with the
emails to get it stopped.
Â
One oddity
All of my samples have been send to madscientist@
From: Pete McNeil [mailto:madscient...@microneil.com]
Sent: Friday, January 13, 2012 10:10 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] regex help needed
On 1/13/2012 10:39 AM, Scott Fisher wrote:
One Hotmail spammer
On 1/13/2012 11:24 AM, Scott Fisher wrote:
All of my samples have been
send to madscientist@
Sorry, I don't have them.
If they were not zipped then it is likely the message got stripped
out by existing rules.
If they were zipped perhaps they are just slow
Apparently I’m catching them on the way out with clamav .
Resending now
From: Pete McNeil [mailto:madscient...@microneil.com]
Sent: Friday, January 13, 2012 10:50 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] regex help needed
On 1/13/2012 11:24 AM, Scott Fisher wrote
On 1/13/2012 12:03 PM, Scott Fisher wrote:
Resending
now
Ok I got it and we identified a few additional vectors to throw at
this. SNF should catch more of these now, and the SortMonsters are
looking at additional vectors as our supply of samples grows. At
Yes. This will trigger on CS4 in the subject line and score for 20.
David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
dbar...@declude.com
-Original Message-
From: Ferrell Ard [mailto:ferr...@badpuppy.com]
Sent: Wednesday,
Hi Dave,
We see this occasionally, and SPF does help a little, but SPF is often not
enforced, so it's more valuable for self-addressed spam than anything
else... and many senders violate their own SPF policy.
Deleting your MX doesn't help since the bounces are coming from all over,
not from the
) as to
what's happening.
I suspect this has been going on for months with the one domain.
-Original Message-
From: Darin Cox [mailto:dc...@4cweb.com]
Sent: Wednesday, December 07, 2011 12:54 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Dealing with Joe Jobs?
Hi Dave
...@atving.com
To: Declude.JunkMail@declude.com
Sent: Wednesday, December 07, 2011 3:53 PM
Subject: RE: [Declude.JunkMail] Dealing with Joe Jobs?
Hi Darin,
Thanks for the reply. The mail server seems to handle the bounces okay as
we don't have a catchall address set up. The smtp server connects, gets
Your PCRE should trigger on:
=?KOI8-U?B?
Subject: [Possible SPAM]=?KOI8-U?B?y8/OxqbExc7DpsrOpiDVx8/EyQ==?=
From: Scott Fisher [mailto:sfis...@farmprogress.com]
Sent: Wednesday, November 16, 2011 12:49 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] PCRE help
Subject:
I don't see anything wrong there, Scott.
When I run it through The Regex Coach, I did have to remove the spaces
at the end of the line in your email and then it did work. So, make sure
there is no whitespace at the end of the line in your test file? Make
sure the filter file really is running and
.
David
-Original Message-
From: Rick Davidson [mailto:rdavid...@nat.com]
Sent: Thursday, November 03, 2011 10:38 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Regex Greed Issue
well based on your response I guessed you couldn't reproduce it with the
example I sent
will send the log entries and sample messages directly to support
--
Rick
-Original Message-
From: David Barker [mailto:dbar...@declude.com]
Sent: Friday, November 04, 2011 6:33 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Regex Greed Issue
You could try restricting
[mailto:rdavid...@nat.com]
Sent: Friday, November 04, 2011 11:30 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Regex Greed Issue
The character limits do work, that is how I originally tested it, looking for
a better solution I consulted our lead programming nerd, he hipped me
Hi Ferrell,
I can assure you that the MIME segment in MIME Postamble Vulnerability is
triggering correctly.
This vulnerability occurs when it appears as though a MIME segment is occurring
after the end of the MIME body (specifically, a MIME segment with a boundary
other than the one specified
Hi Rick,
Are you sure your regex catches the long URL how did you test it ?
David
-Original Message-
From: Rick Davidson [mailto:rdavid...@nat.com]
Sent: Thursday, November 03, 2011 6:38 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Regex Greed Issue
I am trying to
Subject: RE: [Declude.JunkMail] Regex Greed Issue
Hi Rick,
Are you sure your regex catches the long URL how did you test it ?
David
-Original Message-
From: Rick Davidson [mailto:rdavid...@nat.com]
Sent: Thursday, November 03, 2011 6:38 PM
To: Declude.JunkMail@declude.com
Subject
Hi Ferrell,
1. Can you email the db8dd34fa1ddd.smd to virust...@declude.com and will
take a look at it there.
2. Can you also send the log entries for b8dd34fa1ddd in the vir2610.log to
supp...@declude.com
Thanks
David
-Original Message-
From: Ferrell Ard
have you tried just adding BALCOMLAWHOLD f:\Balcomlawhold to the
default.junkmail file in the declude root?
--
Rick
-Original Message-
From: Heimir Eidskrem [mailto:decl...@i360.net]
Sent: Wednesday, October 12, 2011 5:41 PM
To: Declude.JunkMail@declude.com
Subject:
fax
dbar...@declude.com
-Original Message-
From: Ferrell Ard [mailto:ferr...@badpuppy.com]
Sent: Wednesday, October 05, 2011 9:33 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude 4.10.78 crash
On a weekly basis, a weekly newsletter is sent out to about 8,000
Well I think I found the source of my problem, or I should say sources.
After upgrading the RAM to 4 Gb the server would reboot after about 5
seconds of starting to load windows. It looks like I had some drive issues
on the OS drive of the server. With the OS repaired and moving the swap
file to
Don, if it's the I/O speed of an SSD that catches your interest, and
have RAM to spare (and some CPU), you could try a free virtual hard
drive (up to 650 MB) from StarWind:
http://www.starwindsoftware.com/high-performance-ram-disk-emulator
This would be an easier experiment than installing an
/support_ticket.htm
*From*: Scott Fosseen [Prairie Lakes AEA] sfoss...@aea8.k12.ia.us
*Sent*: Monday, September 26, 2011 3:08 PM
*To*: Declude.JunkMail@declude.com
*Subject*: Re: [Declude.JunkMail] Performance issues with SM 8.2 w
in the global.cfg you can use
WHITELIST TO some...@domain.com
in a filter you can use something like this
ALLRECIPS WHITELIST CONTAINS some...@domain.com
--
Rick
From: Harry Vanderzand [mailto:ha...@intown.net]
Sent: Tuesday, September 27, 2011 4:25 PM
To: Declude.JunkMail@declude.com
Subject:
great
thank you
-Original Message-
From: Rick Davidson rdavid...@nat.com
Sent 9/27/2011 5:38:16 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] whitlist receiving address
in the global.cfg you can use
WHITELIST TO some...@domain.com
in a filter you can
On 9/26/2011 11:44 AM, Scott Fosseen [Prairie Lakes AEA] wrote:
The machine has 2 Gig of RAM, and a swap file of 5.5 Gig. In
Windows task manager I see my peak memory usage is now 10 gig.
Right now I am not sure if the performance issues are being caused by RAM,
too much traffic,
If you are running 32bit Windows definitely take your memory up to 4GB. If you
are running 64bit Windows take it higher (until you stop most of your swapping).
Mike
Michael Graveen
m...@anim8.net
I am starting to have some serious performance issues
Which version of Windows server are you running? That will be important also
as, for example, WIN Server 2003 Standard only allows a max of 4GB RAM, while
WIN Server 2003 Enterprise has a 64GB limit
Sincerely,
Randy Armbrecht
Global Web Solutions, Inc.
Office: 804.442.5300 option 1
Toll
26, 2011 1:47 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Performance issues with SM 8.2 w Declude
Which version of Windows server are you running? That will be important
also as, for example, WIN Server 2003 Standard only allows a max of 4GB
RAM, while WIN Server 2003
?
--
From: Randy A ra...@globalweb.us
Sent: Monday, September 26, 2011 1:47 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Performance issues with SM 8.2 w Declude
Which version of Windows server are you running? That will be important
also as, for example, WIN Server 2003
Hi Rick,
FYI, there is also a test in Alligate for this that may nail them
earlier in the process.
Brian
On 9/23/2011 8:40 AM, Rick Davidson wrote:
How would one go about triggering on a message with a blank or missing TO
field?
--
Rick
CONFIDENTIALITY NOTICE
This e-mail message and
@declude.com
Subject: Re: [Declude.JunkMail] Blank TO Test?
Hi Rick,
FYI, there is also a test in Alligate for this that may nail them
earlier in the process.
Brian
On 9/23/2011 8:40 AM, Rick Davidson wrote:
How would one go about triggering on a message with a blank or missing TO
field
On 9/23/2011 6:24 PM, decl...@mail.net1media.com wrote:
Hi All,
Has anyone attempted to place the \IMail\Spool directory on a solid state
hard drive? What are your experiences? Are there any reason not to do
this?
I did this once. It was very fast. There shouldn't be any reason not to
do
AVG had made a change where these files are no longer used. As long as the
current file is today or yesterday you are good.
David
-Original Message-
From: decl...@mail.net1media.com [mailto:decl...@mail.net1media.com]
Sent: Monday, September 12, 2011 4:32 AM
To:
, September 06, 2011 5:42 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] AOL Header Test
Rick, you have a space between the colon and the YES and, if I remember
correctly, AOL does not put a space there.
#Email from AOL which they believe is spam
HEADERS 0 CONTAINS X
Rick, you have a space between the colon and the YES and, if I remember
correctly, AOL does not put a space there.
#Email from AOL which they believe is spam
HEADERS 0 CONTAINS X-SPAM-FLAG:YES
On the other hand, there is a case-sensitive flavour that comes out of
SpamAssassin, and AOL
Sometimes a cigar is just a cigar.
Look at the order of your lines. You have a duplicate pair of weight4
lines between your 7 and 8 pair.
Andrew 8)
-Original Message-
From: IMail Admin [mailto:imailad...@bcwebhost.net]
Sent: Wednesday, August 17, 2011 4:56 PM
To:
I stared at those lines for 15 minutes without seeing the obvious. Is it
weekend yet?
Thanks,
Ben
- Original Message -
From: Colbeck, Andrew
To: Declude.JunkMail@declude.com
Sent: Wednesday, August 17, 2011 5:10 PM
Subject: RE: [Declude.JunkMail] error message in declude
)$)
Andrew 8)
-Original Message-
From: Rick Davidson [mailto:rdavid...@nat.com]
Sent: Tuesday, August 09, 2011 7:51 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] regular expressions and IS
just looking for text emails with nothing more than a url in the body
David
The expression is the IS
Can you post a few examples of what you trying to catch ?
-Original Message-
From: Rick Davidson [mailto:rdavid...@nat.com]
Sent: Tuesday, August 09, 2011 2:34 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] regular expressions and IS
I am
BODY. CONTAINS. Bla bla
Is that what you are looking for?
-Nick
On Aug 9, 2011, at 3:26 PM, David Barker dbar...@declude.com wrote:
The expression is the IS
Can you post a few examples of what you trying to catch ?
-Original Message-
From: Rick Davidson
Message-
From: Nick Hayer [mailto:n...@madriveraccess.com]
Sent: Tuesday, August 09, 2011 6:12 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] regular expressions and IS
BODY. CONTAINS. Bla bla
Is that what you are looking for?
-Nick
On Aug 9, 2011, at 3:26 PM, David Barker
Change the order in which JunkMail and Declude EVA scan. Use the following line
in your virus.cfg
AVAFTERJM ON
-Original Message-
From: Todd Richards [mailto:to...@nnepa.com]
Sent: Sunday, August 07, 2011 3:15 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Stop
101 - 200 of 21924 matches
Mail list logo
