Dave, the target IP address is a really old spammer block according to
SpamHaus:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL79159
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL79123
Do you have a URL scanner? It should have picked off this one sample.
Besides the Zero Day component of
] On Behalf Of Colbeck,
Andrew
Sent: Monday, February 14, 2011 5:30 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Filter for this?
Dave, the target IP address is a really old spammer block according to
SpamHaus:
http://www.spamhaus.org/sbl/sbl.lasso?query=SBL79159
http
On 2/11/2011 2:49 PM, IMail Admin wrote:
But keeping the spam down is a bigger issue right now.
You might try adding truncate to your RBLs.
http://www.gbudb.com/truncate/index.jsp
_M
--
Pete McNeil, President
MicroNeil Research Corporation
www.microneil.com
703.779.4909
x7010
---
[This
Everyone gone on vacation?
-Original Message-
From: IMail Admin
Sent: Friday, December 24, 2010 11:23 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] weird processing of lists
Hi,
I've run into a small problem between Declude and lists. I have a domain
with a list on
Most likely ;)
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of IMail
Admin
Sent: Tuesday, December 28, 2010 3:24 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] weird processing of lists
Everyone gone on vacation?
-Original
Vacation? What's that?
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Wednesday, December 29, 2010 8:21 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] weird processing of lists
Most likely ;)
-Original
But you're the man who knows everything about Declude. Surely you know the
answer to my original question?
Ben
-Original Message-
From: David Barker
Sent: Wednesday, December 29, 2010 5:21 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] weird processing of lists
Sent: Wednesday, December 29, 2010 5:21 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] weird processing of lists
Most likely ;)
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of IMail
Admin
Sent: Tuesday, December 28, 2010
To: declude.junkmail@declude.com
Sent: Wednesday, December 29, 2010 12:52 PM
Subject: Re: [Declude.JunkMail] weird processing of lists
Ben,
Maybe you could right a rule that evaluates the sender and originating
IP. So that if the email is from listn...@domain.com and the IP
matches the server's IP
@declude.com
Subject: Re: [Declude.JunkMail] weird processing of lists
What surprises me is that I haven't found anywhere
where this problem has been discussed before. Granted that IMail's list
server is primitive and that seriously list services use a separate list
server,
still a lot of IMail admin use
than the
addresses of the individual recipients. I guess that's the real question.
Thanks,
Ben
- Original Message -
From: Nick Hayer
To: declude.junkmail@declude.com
Sent: Wednesday, December 29, 2010 2:49 PM
Subject: Re: [Declude.JunkMail] weird processing of lists
I've got a second user with the same problem, so I'd be interested in help.
The only thing I've thought of so far is to create user-specific settings
for each list and specify not to create folders, but that's a pain in the
neck.
Any help would be appreciated.
Thanks,
Ben
-Original
Hi Harry,
Can you send the header and the source of at least 2 or maybe a few more if
you have them to supp...@declude.com
Thanks
David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
mailto:dbar...@declude.com dbar...@declude.com
in error. Thank you.
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: December-13-10 1:10 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] porn spam
Hi Harry,
Can you send the header and the source of at least 2 or maybe a few
On 12/13/2010 1:02 PM, Harry Vanderzand wrote:
How does one stop mail like this?
lxdjjblq ldpzi http:/xxx.x.com
zuk q jar zgmghx vxh jwrrfmtmfo eidzrz. lmsuqai drahmrff.
uezng n sbqbxemgz
On 12/13/2010 5:02 PM, Harry Vanderzand wrote:
Is
there any documentation on what I need to do.
Sure, right here:
http://www.armresearch.com/support/articles/software/snfServer/config/index.jsp
PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo
and other free account blacklisted servers
Thanks, Pete and Scott.
As always, Pete, that change worked as advertised. I've put in a slight
tweak as well as Scott's AOL suggestion, I pre
: December-09-10 1:49 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and
other free account blacklisted servers
fyi - the 'X-Originating-IP as well as 'X-AOL-IP are the senders ip -
they have no relation to yahoo or aol. What you can do
...@declude.com] On Behalf Of
Harry Vanderzand
Sent: Thursday, December 09, 2010 11:00 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo
and other free account blacklisted servers
Have been following this and tried to use it.
However now I
[mailto:supp...@declude.com] On Behalf Of Colbeck,
Andrew
Sent: Thursday, December 09, 2010 12:26 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and
other free account blacklisted servers
Harry, the snippet I included was the literal text, you
if you have received this
message in error. Thank you.
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Colbeck,
Andrew
Sent: December-09-10 3:26 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and
other free
: Monday, December 06, 2010 1:18 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo
and other free account blacklisted servers
I made this change immediately. Like Andrew I've always wondered why the
Hotmail header hasn't been targeted
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and
other free account blacklisted servers
My problem is the reverse, I get so much spam from hacked
aol/hotmail/gmail/yahoo accounts, that its getting to the point that these
services are spammers. I hope
On 12/6/2010 2:47 PM, Colbeck, Andrew wrote:
I have the same position as Scott.
I find that the MessageSniffer product from ARM Research is the most reliable
test
snip/
Hotmail in particular would be less effective for the bad guys if I had an
antispam tool that would determine from the
@declude.com
Subject: Re: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and
other free account blacklisted servers
On 12/6/2010 2:47 PM, Colbeck, Andrew wrote:
I have the same position as Scott.
I find that the MessageSniffer product from ARM Research is the most
reliable test
snip
@declude.com
Subject: Re: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and
other free account blacklisted servers
On 12/6/2010 2:47 PM, Colbeck, Andrew wrote:
I have the same position as Scott.
I find that the MessageSniffer product from ARM Research is the most
reliable test
snip
On 12/6/2010 4:22 PM, Scott Fisher wrote:
-Pete
Can I use
header name='X-AOL-IP:' received='aol.com [' ordinal='0' /
for the AOL header:
X-AOL-IP: 213.55.79.58
Yes...
What you've got there essentially says this:
If the first (ordinal 0) received header contains the string aol.com [
then
...@declude.com
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Gary
Steiner
Sent: Friday, December 03, 2010 9:17 AM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and
other free account blacklisted
03, 2010 8:39 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and
other free account blacklisted servers
You can also my filters GOOD-REVDNS and HAM-INDICATOR as well as
ISP-HOTMAIL, ISP-YAHOO etc which are available from the Declude
This problem was posted to the list a few weeks back. This regex seems to
work well for that. It is in the latest FILTER-SPAM.
(?i:(http://|www).+\.(com|info|net)/[a-f0-9]{30,40})
http://|www).+/.(com|info|net)/%5ba-f0-9%5d%7b30,40%7d)
From: supp...@declude.com
Post a few of his/her base domains - just to be sure we will be taking
about the same guy..
Thanks
-Nick
MadRiverAccess.com|Skywaves.com Tech Support
US/Canada 877-873-6482 or International +1-802-229-6574
Emergency Support 24/7: supp...@skywaves.net
General and Non-Emergency support
legitimate domains registered through
domainsite.com but I've not seen any.
_
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick
Hayer
Sent: Monday, October 18, 2010 8:53 AM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] Good filter?
Post a few of his
Subject: re: [Declude.JunkMail] Good filter?
Post a few of his/her base domains - just to be sure we will be taking about
the same guy..
Thanks
-Nick
MadRiverAccess.com|Skywaves.com Tech Support
US/Canada 877-873-6482 or International +1-802-229-6574
Emergency Support 24/7: supp...@skywaves.net
Provided the prefix to these is either www or http:// the regex will trigger
on these
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Dave
Beckstrom
Sent: Monday, October 18, 2010 10:02 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Good filter
/content/secure/support_ticket.htm
From: David Barker dbar...@declude.com
Sent: Monday, October 18, 2010 10:17 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Good filter?
Provided the prefix to these is either www or http
, October 18, 2010 11:50 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Good filter?
Hi David,
I think it will FP though -
Here is an example:
http://eimages.ratepoint.com/7cb5f36dd6464c05d417963e3efc4386/2010-06/02b120
ed17cc24cd3567fd4396424914.gif
with some tweaking I think
@declude.com
Subject: RE: [Declude.JunkMail] Good filter?
Does the source have a space or different character after the end of the
string ? we could look for a space. or a or
(?i:(http://|www).+\.(com|info|net)/[a-f0-9]{30,40}(\s|[]))
David
From: supp...@declude.com [mailto:supp
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Good filter?
Does the source have a space or different character after the
end of the string ? we could look for a space. or a or
(?i:(http://|www).+\.(com|info|net)/[a-f0-9]{30,40}(\s|[]))
David
From: supp...@declude.com
Don,
We were recently listed as well. I sent it the ticket like you did and it took
almost a week to get a response. I submitted a fairly good explanation and
they did de-list me but it did take a while.
Justin
-Original Message-
From: supp...@declude.com
When I made the switch over to SM I had several accounts with abc-xyz@ that
didn't work. We solved the problem by creating a aliases named abc-xyz@ that
mapped to abc+...@. I understand that you have many of these type accounts
to handle, but it could be done with a large alias file (that you
Thanks. It would have 1,000,000 aliases in it, I can't imagine that would
be easy to process.
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Robert
Shubert
Sent: Monday, September 13, 2010 9:55 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Imail vs
I am not sure about this. So I am opening this up for discussion..
What would happen if you just ran Smartermail as an Outbound email gateway.
Wouldn't Domainkeys/Dkim still work without needing to change everyone's
email address?
Cheers,
Eddie
From: supp...@declude.com
28, 2010 7:00 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Imail vs. Smartermail
I am not sure about this. So I am opening this up for discussion..
What would happen if you just ran Smartermail as an Outbound email gateway.
Wouldn't Domainkeys/Dkim still work
@declude.com
Subject: RE: [Declude.JunkMail] Imail vs. Smartermail
I am not sure about this. So I am opening this up for discussion..
What would happen if you just ran Smartermail as an Outbound email gateway.
Wouldn't Domainkeys/Dkim still work without needing to change everyone's
email address
looking forward to rejecting at the connection level, that would be so
efficient.
Thanks again,
Rob
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Saturday, August 28, 2010 8:48 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail
@declude.com
Subject: Re: [Declude.JunkMail] Imail vs. Smartermail
What is blah- vs. blah+ for incoming mails?
Are you referring to subfolders/submailboxes that Imail automatically
generates?
If Imail does DomainKeys and has the mailbox handling you need, why drop it?
The next update
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Imail vs. Smartermail
I was about to upgrade my SmarterMail server this evening. What kind of
issues are they having with 7?
- MEC
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Robert
Grosshandler
Sent
We used Imail for over 10 years and currently maintain both IMail and SM. The
list of reasons we switched is long. We have been running SM for over a year
and are very happy with the switch, worth every minute of time spent making the
move.
Perfect example. SM has build in reports and
Hi Harry,
Below is a script I copied from the list long ago - edit as applicable for
your setup, save it as a .vbs file and run it every 15 min or so
-Nick
fHold1 = \\192.168.254.23\goofy\imail\spool
fHold2 = \\192.168.254.23\goofy\imail\spool\proc
aMail = e:\imail\imail1.exe
mFrom = -u
Heres the solution I implemented years ago with David.
Simply create 2 batch files:
1. One that checks if the review folder is empty (could be usefull)
2. One that checks if the Proc is over 500
!!!
Using these 2 batch files, you can create a Scheduled task that runs
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick
Hayer
Sent: Wednesday, August 25, 2010 9:04 AM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] Declude queue alert
Hi Harry,
Below is a script I copied from the list long ago - edit as applicable
Of course - thanks Nick!
Todd
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick
Hayer
Sent: Wednesday, August 25, 2010 12:13 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Declude queue alert
dunno - but for sure you could use cdosys
-Nick
http://oss.netfarm.it/clamav/ is the port I use.
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Thursday, August 12, 2010 5:21 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Server AV Scanner
Dave
Server AV ScannerDave,
ClamAV works perfectly fine with Declude - runs as a service and thus is fast.
A native Windows version has been available for quite a while.
Best Regards
Andy Schmidt
Tel. +1 201-934-9411, x20
Fax +1 201-934-9206
From: Dave Beckstrom
Sent: Thursday, August 12, 2010
fraud.rhs.mailpolice.com 127.0.0.2 8 0
SURBL rhsbl multi.surbl.org* 5 0
Thanks,
Ben
---
[This E-mail was checked by Declude]
- Original Message -
From: Scott Fisher sfis...@farmprogress.com
To: declude.junkmail@declude.com
Sent: Wednesday, July 28, 2010 11:59 AM
Subject: RE
was checked by Declude]
- Original Message -
From: Pete McNeil madscient...@microneil.com
To: declude.junkmail@declude.com
Sent: Wednesday, July 28, 2010 12:18 PM
Subject: Re: [Declude.JunkMail] What's wrong with my Declude?
On 7/28/2010 2:29 PM, Imail Admin wrote:
lately (last couple of
weeks
On 8/1/2010 1:36 PM, Imail Admin wrote:
Hi Pete,
By SNF I assume you mean Sniffer? How do I tell for sure which
version is running and whether it is getting the latest downloads? I
know it's running at least partially because the report lists it. I
checked the cfg file and it says
Sent: Sunday, August 01, 2010 11:28 AM
Subject: Re: [Declude.JunkMail] What's wrong with my Declude?
On 8/1/2010 1:36 PM, Imail Admin wrote:
Hi Pete,
By SNF I assume you mean Sniffer? How do I tell for sure which version
is running and whether it is getting the latest downloads? I know it's
]
- Original Message -
From: Pete McNeil madscient...@microneil.com
To: declude.junkmail@declude.com
Sent: Sunday, August 01, 2010 11:28 AM
Subject: Re: [Declude.JunkMail] What's wrong with my Declude?
On 8/1/2010 1:36 PM, Imail Admin wrote:
Hi Pete,
By SNF I assume you mean Sniffer
On 8/1/2010 3:03 PM, Imail Admin wrote:
Hi Pete,
OK, I did the upgrade. One thing that was slightly different from the
instructions was that even though I directed it to install into the
same folder as the prior Sniffer installation (d:\imail\sniffer), it
only offered me a choice of a new
Got it. Thanks!
---
[This E-mail was checked by Declude]
- Original Message -
From: Pete McNeil madscient...@microneil.com
To: declude.junkmail@declude.com
Sent: Sunday, August 01, 2010 2:34 PM
Subject: Re: [Declude.JunkMail] What's wrong with my Declude?
On 8/1/2010 3:03 PM
20
b.blok...@tio.nl / www.tio.nl
- Original Message -
From: Imail Admin
To: declude.junkmail@declude.com
Sent: Sunday, August 01, 2010 8:40 PM
Subject: Re: [Declude.JunkMail] What's wrong with my Declude?
Hi Pete,
Thanks. I think I'll try your installer first. I
On 7/28/2010 2:29 PM, Imail Admin wrote:
lately (last couple of
weeks) I've noticed more spam getting through. A lot more.
Check your SNF installation. I looked up your license ID and checked for
your telemetry and did not find it.
This usually means that SNF is not currently running on
://payoff.all-debt-forever.com/78a7d79a040f797d40213817450579288
Andrew 8)
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Pete
McNeil
Sent: Friday, July 23, 2010 6:40 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Regex to block
On 7/27/2010 2:10 PM, Colbeck, Andrew wrote:
Flavour of the day:
Relevant bits of the header:
Received: from payoff.all-debt-forever.com [173.192.161.27]
Subject: Stay on top of your credit report
Thanks -- coded some rules, will be looking for abstract opportunities.
Also coded several
I strongly suggest not doing this exact test. Scott's is more refined,
however it's still not refined enough to not have false positives.
This spammer is better caught by his boundary, for example:
Content-type: multipart/alternative;
On 7/23/2010 2:29 PM, Matt wrote:
This spammer accounts for about 7% of all E-mail that makes it to my
deep scanning layer. Sniffer seems to miss a good deal of their spam,
so there isn't much protection from it otherwise.
Matt -- Is it possible for you to zip up some samples from this guy
PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Regex to block this?
I strongly suggest not doing this exact test. Scott's is more refined,
however it's still not refined enough to not have false positives.
This spammer is better caught by his boundary, for example
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Regex to block this?
I strongly suggest not doing this exact test. Scott's is more refined,
however it's still not refined enough to not have false positives.
This spammer is better caught by his boundary, for example:
Content-type
Pete,
Will do. I call this spammer Whitestone, but there is another very
prolific spammer that also has the same volume named BlooSky Interactive
(real company name) that is also frequently missed. I'm guessing that
they aren't landing in spam traps to the same degree as some others, or
On 7/23/2010 6:37 PM, Matt wrote:
Pete,
Will do. I call this spammer Whitestone,
Much appreciated. I'll take a closer look with the team to see what we
can do to close these guys down better.
Thanks!
_M
--
President
MicroNeil Research Corporation
www.microneil.com
---
[This E-mail
I guess my point here is that they are both very high volume spammers,
and they both randomize sufficiently so that blocking them requires
blocking their domains and having the samples available, but putting in
proactive rules will only last a short time. What Sniffer may need is a
better
On 7/23/2010 9:19 PM, Matt wrote:
I guess my point here is that they are both very high volume spammers,
and they both randomize sufficiently so that blocking them requires
blocking their domains and having the samples available, but putting
in proactive rules will only last a short time.
Hi Dave,
Give this a try it is what you have asked for. Test it first to see if it
gives you the results you are looking for.
(?i:href=.+\.com/[a-z0-9]+)
David
-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Dave
Beckstrom
Sent: Tuesday, July
I might fine tune it a bit.
I've only seen length 37 and 38 characters after the tld
It is only lower case hex codes so you can exclude (g-z)
I've seen lots of .info and a few .nets as additional tld.
Very active spammer here
(?i:href=.+\.(com|info|net)/[a-f0-9]{37,38})
-Original
Thanks. David's regex worked well. I'll give the fine tuning a try.
Also, all of this spammer's domains are in DNS servers ns1.domainsite.com -
ns4.domainsite.com.
I might fine tune it a bit.
I've only seen length 37 and 38 characters after the tld
It is only lower case hex codes so
Hi,
Just downloaded the latest global.cfg file to compare mine with and it still
has the old ZEROHOUR 12 line.
Met vriendelijke groet,
Bonno Bloksma
senior systeembeheerder
tio
hogeschool hospitality en toerisme
begijnenhof 8-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
That's for people who have not yet upgraded I will remove it once we see the
majority of our customers on 4.10.53+
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Bonno
Bloksma
Sent: Thursday, July 08, 2010 1:41 PM
To: declude.junkmail@declude.com
Subject: Re
To: declude.junkmail@declude.com
Sent: Tuesday, July 06, 2010 5:54 PM
Subject: RE: [Declude.JunkMail] dns servers for declude
Hi Bono,
We can look at adding a second DNS entry to declude.
1. What was your DNS failure ?
2. Under what circumstances would you
Hi Dave,
Unless that name server is listed in one of the RBLs already, you'd have to
set up your own RBL zone on your name server and then check against that.
Here's the appropriate section of the config file:
!--Enables the checking of the URI's name servers against an RBL. --
!--If
Do you require SMTP authentication? We enforce SMTP authentication and port
587 for SMTP outbound. So far, I have not seen a virus or worm that uses
SMTP authentication.
Chuck
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Michael
Cummins
Sent: Wednesday, June
| mich...@cummins.us
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Chuck
Schick
Sent: Wednesday, June 16, 2010 3:11 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Outbound Mail
Do you require SMTP authentication? We enforce SMTP authentication
Why does Hijack not work for you?
It has caught several infected customers for me now.
I pause mail for clients if more than 100 are sent in 10 minutes.
I hold mail if more than 400 are sent in 30 minutes.
So at the worst 400 spams could go out.
My clients know the limits.
We are running another Delude/Sniffer box for as an outbound gateway.
All internal email servers, web and app servers that need to send emails are
filtered thru this first. The purpose of this is to stop hijacked accts, as
well as stopping the spread of known cataloged spam that sniffer is
Wow Andy. Great read. Thank you for passing it along.
From: Andy Schmidt
Sent: Tuesday, June 01, 2010 9:26 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] FTC Permanently Shuts Down Notorious Rogue Internet
Service Provider
http://www.ftc.gov/opa/2010/05/perm.shtm
---
This
The name of the test can be anything you want. So if you prefer zerohour for
the name of the test that is fine.
From: Andy Schmidt andy_schm...@hm-software.com
Sent: Saturday, May 29, 2010 3:15 PM
To: declude.junkmail@declude.com
Subject: RE
I put an alligate server in front of Declude. It kills about 95% of incoming
connections.
Declude Intercepter incorporates this
Sent via BlackBerry by ATT
-Original Message-
From: Michael Cummins mich...@i-magery.com
Date: Wed, 12 May 2010 09:25:57
To: declude.junkmail@declude.com
I solved the load issue by putting Alligate in front of the mail server. I
put it in the same server and can handle everything coming at it much better
than before. Alligate gets rid of the obvious spam, about 90 %, before it
hits my mail software
Thank you
Please note our new Address
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Scott
Fisher
Sent: Wednesday, May 12, 2010 9:54 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Fine tuning Declude
I put an alligate server in front of Declude. It kills about 95% of incoming
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Fine tuning Declude
I actually paid for Alligate a couple of years ago, but then had
to repurpose the hardware for a casualty before I could install it and trial
it.
I never got around to putting it together after that (I'm not a big
Hardware reqs for alligate are fairly low too
Sent via BlackBerry by ATT
-Original Message-
From: Michael Cummins mich...@i-magery.com
Date: Wed, 12 May 2010 10:17:13
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Fine tuning Declude
I actually paid for Alligate
Hi Michael,
I may be able to help with this. You mention doing gateway filtering for
Exchange servers. We also do that, but instead of accepting any address with
the domain, we have accounts set up on our server and refuse connections that
don't go to one of those accounts.
Now your next
Subject: Re: [Declude.JunkMail] Fine tuning Declude
Hi Michael,
I may be able to help with this. You mention doing gateway filtering for
Exchange servers. We also do that, but instead of accepting any address with
the domain, we have accounts set up on our server and refuse connections
[mailto:supp...@declude.com] On Behalf Of
Darin Cox
Sent: Wednesday, May 12, 2010 10:55 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Fine tuning Declude
Hi Michael,
I may be able to help with this. You mention doing gateway filtering
for Exchange servers. We also do
Of Michael
Cummins
Sent: Wednesday, May 12, 2010 2:14 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Fine tuning Declude
I wrote a batch file once on a number of the exchange servers that used VBS
and LDAP to generate a list of valid exchange recipients and then FTP them
PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Fine tuning Declude
Hi Michael:
I have a Windows script that I use with a whole bunch of different Exchange
customers to pull their email addresses from their servers and dump them
into a small JET (.mdb = Access) Database
that succeeds I can simply take that info and use it as the parameters
to my script.
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Michael
Cummins
Sent: Wednesday, May 12, 2010 3:25 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Fine tuning Declude
of this, and this is exactly what
it is for.
Brian Milburn
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Michael
Cummins
Sent: Wednesday, May 12, 2010 12:25 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Fine tuning Declude
That sounds like
would
take a lot longer to coordinate on a per-customer basis.
Darin.
- Original Message -
From: Andy Schmidt
To: declude.junkmail@declude.com
Sent: Wednesday, May 12, 2010 4:05 PM
Subject: RE: [Declude.JunkMail] Fine tuning Declude
Not sure that this list supports attachments
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Fine tuning Declude
This is about 1/3 of the process to sync the servers. Then there's the
processing of the file on the gateway to add/delete accounts as needed, and
the minor Exchange config changes to accept mail from a subdomain
301 - 400 of 21924 matches
Mail list logo
