Re: [Declude.JunkMail] form spam filter

2008-04-09 Thread Darin Cox
. - Original Message - From: Gufler Markus | Limitis To: declude.junkmail@declude.com Sent: Wednesday, April 09, 2008 10:53 AM Subject: RE: [Declude.JunkMail] form spam filter Matt, Darin would it possible that you both forget, that 99,9+% of all incomming formmail spam is send from

RE: [Declude.JunkMail] Need strategy to up score.

2008-04-09 Thread Robert Grosshandler
The PCRE for yahoo.co.uk might just be the ticket. Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, April 09, 2008 8:58 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Need strategy to up score

RE: [Declude.JunkMail] form spam filter

2008-04-09 Thread Marc Catuogno
, April 09, 2008 11:54 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] form spam filter Matt, I did understand. What I'm saying is that it doesn't always work. To clarify, in addition to less sophisticated automated form fillers that would fill out all fields

Re: [Declude.JunkMail] form spam filter

2008-04-09 Thread Darin Cox
. Darin. - Original Message - From: Marc Catuogno To: declude.junkmail@declude.com Sent: Wednesday, April 09, 2008 12:22 PM Subject: RE: [Declude.JunkMail] form spam filter One thing we did on our domain is to ban pasting so that the scripts couldn't paste their info into our fields

Re: [Declude.JunkMail] form spam filter

2008-04-09 Thread Matt
PROTECTED] *To:* declude.junkmail@declude.com mailto:declude.junkmail@declude.com *Sent:* Wednesday, April 09, 2008 12:22 PM *Subject:* RE: [Declude.JunkMail] form spam filter One thing we did on our domain is to ban pasting so that the scripts couldn't paste their info into our fields. Also I

RE: [Declude.JunkMail] Need help in setting up filter please

2008-04-08 Thread David Barker
You can use the settings in Declude.cfg to stop certain character sets. David B From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Tuesday, April 08, 2008 7:41 AM To: Declude Subject: [Declude.JunkMail] Need help in setting up filter please We are getting

RE: [Declude.JunkMail] Filters not triggering - David Barker

2008-04-08 Thread David Barker
PCRE (?i:google.{3,10}pagead/iclk) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Monday, April 07, 2008 8:58 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filters not triggering - David Barker David

RE: [Declude.JunkMail] Filters not triggering - David Barker

2008-04-08 Thread Dave Beckstrom
] On Behalf Of David Barker Sent: Tuesday, April 08, 2008 9:11 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filters not triggering - David Barker The expression I gave you does match on (discount. Coupon) in 85% discount. Coupon #zH5d If it is not triggering you may have

RE: [Declude.JunkMail] Filters not triggering - David Barker

2008-04-08 Thread David Barker
08, 2008 11:32 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filters not triggering - David Barker Hi David, The filter is not triggering. That IS the issue I am reporting! I provided log snippets showing that the filter does run, but is not triggering. This is the problem

RE: [Declude.JunkMail] Filters not triggering - David Barker

2008-04-08 Thread Dave Beckstrom
user error. :) Thanks, Dave -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, April 08, 2008 10:48 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filters not triggering - David Barker Dave, Do

RE: [Declude.JunkMail] Need strategy to up score.

2008-04-08 Thread David Barker
We're almost always Bcc'd Consider using BCC This test will catch E-mail that has a lot of local recipients that are not listed in the E-mail headers. This test is normally only used in advanced setups, as most mailing list E-mail has many recipients not listed in the headers. BCC

RE: [Declude.JunkMail] Need strategy to up score.

2008-04-08 Thread Robert Grosshandler
: RE: [Declude.JunkMail] Need strategy to up score. We're almost always Bcc'd Consider using BCC This test will catch E-mail that has a lot of local recipients that are not listed in the E-mail headers. This test is normally only used in advanced setups, as most mailing list E-mail has many

RE: [Declude.JunkMail] 4.4.00 Released

2008-04-07 Thread David Barker
: Friday, April 04, 2008 7:09 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] 4.4.00 Released Andre - Colbeck, Andrew wrote: David Barker said: DEC ADD Added date, Time, Email, Spool name, Weight and Tests failed to the BLKLST log I thinks its

RE: [Declude.JunkMail] Filters not triggering

2008-04-07 Thread David Barker
Spaces before the phrase are not used as the line is normalized. Also the regular CONTAINS is not case sensitive. It would be better to use SUBJECT 0 PCRE(?i:(discount|off).{0,2}Co(upon|de)) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave

Re: [Declude.JunkMail] Filters not triggering

2008-04-07 Thread Darrell ([EMAIL PROTECTED])
Dave, I noticed with the relevant lines from the filter posted below some of the lines were indented more than the one line. Is it possible you have extraneous whitespaces between contains and the text you want to filter on? Dsrrell -- Check out

RE: [Declude.JunkMail] Filters not triggering

2008-04-07 Thread Dave Beckstrom
: Monday, April 07, 2008 2:42 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Filters not triggering Dave, I noticed with the relevant lines from the filter posted below some of the lines were indented more than the one line. Is it possible you have extraneous

Re: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-07 Thread Darin Cox
PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, April 03, 2008 8:51 PM Subject: Re: [Declude.JunkMail] Forged-Spam Backscatter I'm looking for a little help creating SPF records. I'm trying to use the tools at openspf.org. We only have one server that sends out mail for our domain

RE: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-07 Thread Jim Comerford
Subject: RE: [Declude.JunkMail] Forged-Spam Backscatter I have posted the backscatter filters we use under the download section of Declude, any feedback is welcome. David B From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, April 03, 2008 6:42 PM

Re: [Declude.JunkMail] Filters not triggering

2008-04-07 Thread Darrell ([EMAIL PROTECTED])
@declude.com Subject: Re: [Declude.JunkMail] Filters not triggering Dave, I noticed with the relevant lines from the filter posted below some of the lines were indented more than the one line. Is it possible you have extraneous whitespaces between contains and the text you want to filter

RE: [Declude.JunkMail] Filters not triggering

2008-04-07 Thread Dave Beckstrom
Of Darrell ([EMAIL PROTECTED]) Sent: Monday, April 07, 2008 3:40 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Filters not triggering Dave, From my experience I have had number of problems with spaces that would cause my filter files not to trigger. I have since

RE: [Declude.JunkMail] 4.4.00 Released

2008-04-05 Thread Gufler Markus | Limitis
Well, actually the MOST sense would be mmdd, since it would result in SORT order. I agree, and hope that 4.5.00 or 5.0.01 would finaly support MMDDHH It would be a great innovation (at least comparable to the 4.4 enhancements) Markus --- This E-mail came from the

RE: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-04 Thread David Barker
] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Thursday, April 03, 2008 12:43 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Forged-Spam Backscatter Jim - I'm running the exact same set up as you are. We had the same problem about two weeks ago. I don't know

RE: [Declude.JunkMail] 4.4.00 Released

2008-04-04 Thread Colbeck, Andrew
David Barker said: DEC ADD Added date, Time, Email, Spool name, Weight and Tests failed to the BLKLST log Dave, the what log? Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, March 27,

Re: [Declude.JunkMail] 4.4.00 Released

2008-04-04 Thread Nick Hayer
Andre - Colbeck, Andrew wrote: David Barker said: DEC ADD Added date, Time, Email, Spool name, Weight and Tests failed to the BLKLST log I thinks its the recording to the blklst.txt file that lives in the \spool dir. I have forgotten the files purpose... -Nick

Re: [Declude.JunkMail] 4.4.00 Released

2008-04-04 Thread Darrell ([EMAIL PROTECTED])
Has anyone tried this option yet? DEC ADD Can use for 4 digit year on log file names in the format ddmm IS the format really ddmm - it seems like it would make more sense if the format was actually mmdd? Especially since the regular format of

Re: [Declude.JunkMail] Version 4.4.0 leaving some trash?

2008-04-04 Thread Darrell ([EMAIL PROTECTED])
I just checked and I am seeing this as well. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Adolfo

RE: [Declude.JunkMail] 4.4.00 Released

2008-04-04 Thread Colbeck, Andrew
PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] 4.4.00 Released Andre - Colbeck, Andrew wrote: David Barker said: DEC ADD Added date, Time, Email, Spool name, Weight and Tests failed

RE: [Declude.JunkMail] 4.4.00 Released

2008-04-04 Thread Andy Schmidt
be like trying to impose the weird multipliers of the imperial UOM on the rest of the world. :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, April 04, 2008 7:13 PM To: declude.junkmail@declude.com Subject: Re

RE: [Declude.JunkMail] Version 4.4.0 leaving some trash?

2008-04-04 Thread Harry vanderzand
To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Version 4.4.0 leaving some trash? I just checked and I am seeing this as well. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude

Re: [Declude.JunkMail] Version 4.4.0 leaving some trash?

2008-04-04 Thread Gary Steiner
:33 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Version 4.4.0 leaving some trash? I just checked and I am seeing this as well. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF

re: [Declude.JunkMail] Version 4.4.0 leaving some trash?

2008-04-04 Thread David Barker
We have been made aware of this and are currently looking into the cause, it seems to be AVG that is the source, if used in combination with a 3rd party scanner. We are trying to replicate the issue to have it resolved. David B From: Adolfo Justiniano

RE: [Declude.JunkMail] Spoofed names

2008-04-03 Thread Jon Lucas
I found out that the problem in part is due to users using VPN, and the internal addresses are not whitelisted. In the Global.cfg file, can you whitelist a range of ipaddresses, such as 198.107.21.1 - 198.107.21.255? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [Declude.JunkMail] Spoofed names

2008-04-03 Thread David Barker
Lucas Sent: Thursday, April 03, 2008 11:33 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Spoofed names I found out that the problem in part is due to users using VPN, and the internal addresses are not whitelisted. In the Global.cfg file, can you whitelist a range

RE: [Declude.JunkMail] Spoofed names

2008-04-03 Thread Jon Lucas
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jon Lucas Sent: Thursday, April 03, 2008 8:33 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Spoofed names I found out that the problem in part is due to users using VPN, and the internal addresses

RE: [Declude.JunkMail] Spoofed names

2008-04-03 Thread Jon Lucas
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David Barker Sent: Thursday, April 03, 2008 8:46 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Spoofed names You have to use CIDR range as the example you provided: WHITELIST IP 198.107.21.0/24

RE: [Declude.JunkMail] Spoofed names

2008-04-03 Thread David Barker
: Thursday, April 03, 2008 12:17 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Spoofed names Hi David... I applied the CIDR address range to the global.cfg WHITELIST, but emails sent via VPN are still getting filtered into the SPAM folder. I am still scratching my head

RE: [Declude.JunkMail] Spoofed names

2008-04-03 Thread Jon Lucas
Sent: Thursday, April 03, 2008 8:46 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Spoofed names You have to use CIDR range as the example you provided: WHITELIST IP 198.107.21.0/24 However remember that users who authenticate with the server are automatically

RE: [Declude.JunkMail] Spoofed names

2008-04-03 Thread Jon Lucas
: Thursday, April 03, 2008 9:10 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Spoofed names Are you authenticating with your mail server? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jon Lucas Sent: Thursday, April 03, 2008 12:00 PM

RE: [Declude.JunkMail] Reasons to renew

2008-04-03 Thread Todd Richards
Of Dan Shadix Sent: Wednesday, April 02, 2008 1:50 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Reasons to renew I, for one, like infrequent but solid updates. I don’t have time to be constantly installing and testing updates, especially if they are problematic. Also

Re: [Declude.JunkMail] Reasons to renew

2008-04-03 Thread Linda Pagillo
.2 Toll Free: 1-866.332.5833 Ext.2 Fax: 978.334.0700 Email: [EMAIL PROTECTED] - Original Message - From: Todd Richards To: declude.junkmail@declude.com Sent: Thursday, April 03, 2008 11:06 AM Subject: RE: [Declude.JunkMail] Reasons to renew I totally agree with Dan’s email

Re: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread Darrell ([EMAIL PROTECTED])
Jim, While others may cringe regarding this, but some of the backscatter I have had to deal with (excess of 500-1000 messages a minute at times) I have had to put filters in place to delete null senders for periods of time. Darrell Jim Comerford wrote: Over the last several weeks we have

RE: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread Craig Edmonds
I have been having exactly the same problem on both mail servers. Both are. Imail 8.15 Declude 4.3.64 invURIBL 3.1.1 Sniffer Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net LEGAL DISCLAIMER - This message may contain confidential, proprietary or

RE: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread David Barker
We use 2 filters to address the issue which work well for us. I will make them available on our website this week. David B From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Comerford Sent: Thursday, April 03, 2008 2:46 PM To: declude.junkmail@declude.com Subject:

Re: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread Herb Guenther
Same here, we normally run 100 or so messages a min @ 70% spam, now seeing peaks of 400-500 @ 97% Seems much worse in the last 2 weeks or so. I think that we all have lots of company. Herb Darrell ([EMAIL PROTECTED]) wrote: Jim, While others may cringe regarding this, but some of the

RE: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread Todd Richards
Jim - I'm running the exact same set up as you are. We had the same problem about two weeks ago. I don't know if this made much difference or not, but I noticed the domains that we were seeing this with did not have any SPF records in place. So when I saw this sudden increase come through,

RE: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread Jon Lucas
to keep them from getting into the queue manager. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of David Barker Sent: Thursday, April 03, 2008 12:25 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Forged-Spam Backscatter We use 2

RE: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread David Barker
The filter deals with Backscatter. Jon is the issue you are talking about is your mail server bouncing messages? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jon Lucas Sent: Thursday, April 03, 2008 3:59 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail

RE: [Declude.JunkMail] Reasons to renew

2008-04-03 Thread Stephan Chayer
PROTECTED] _ De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Linda Pagillo Envoyé : 3 avril, 2008 14:35 À : declude.junkmail@declude.com Objet : Re: [Declude.JunkMail] Reasons to renew Thank you Todd. It's my pleasure! If you have any further questions, please do

RE: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread Jim Comerford
... but I noticed the domains that we were seeing this with did not have any SPF records in place. So when I saw this sudden increase come through, I added a strict SPF policy for that domain. The backscatter for that domain all but stopped. ... Good thing to check... the latest domain to

RE: [Declude.JunkMail] Reasons to renew

2008-04-03 Thread Craig Edmonds
] On Behalf Of Stephan Chayer Sent: 03 April 2008 22:21 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Reasons to renew Dan, Todd, I feel a little like you. We are using, selling and supporting Declude for the past 4 years. It works great for us. Especially since

RE: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread Colbeck, Andrew
PROTECTED] On Behalf Of Todd Richards Sent: Thursday, April 03, 2008 12:43 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Forged-Spam Backscatter Jim - I'm running the exact same set up as you are. We had the same problem

Re: [Declude.JunkMail] Forged-Spam Backscatter

2008-04-03 Thread Kevin Rogers
I'm looking for a little help creating SPF records. I'm trying to use the tools at openspf.org. We only have one server that sends out mail for our domain. We have a secondary server that accepts email sent to our domain if our primary server is down (myriadnetwork.com). After going through

re: [Declude.JunkMail] FW: [049-0F7F8DF6-BE66] Invalid ZIP Vulnerability Detected - for no apparent reason

2008-04-02 Thread David Barker
Hi Andy, Your example is with our engineers. we will get back to you as soon as we have a answer. Should be today. David From: Andy Schmidt [EMAIL PROTECTED] Sent: Tuesday, April 01, 2008 6:34 PM To: declude.junkmail@declude.com Subject:

re: [Declude.JunkMail] FW: [049-0F7F8DF6-BE66] Invalid ZIP Vulnerability Detected - for no apparent reason

2008-04-02 Thread andyb
David, This email was sent to the wrong Andy... Thanks, Andy Baldwin From: David Barker [EMAIL PROTECTED] Sent: Wednesday, April 02, 2008 10:09 AM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] FW: [049-0F7F8DF6-BE66] Invalid ZIP

RE: [Declude.JunkMail] My server has been totally revived!!!

2008-04-02 Thread Craig Edmonds
Oka. I am off to get the trial right now! Kindest Regards Craig Edmonds 123 Marbella Internet www.123marbella.net LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If

RE: [Declude.JunkMail] My server has been totally revived!!!

2008-04-02 Thread Harry vanderzand
: Wednesday, April 02, 2008 12:03 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] My server has been totally revived!!! Oka. I am off to get the trial right now! Kindest Regards Craig Edmonds 123 Marbella Internet www.123marbella.net LEGAL DISCLAIMER - This message may

Re: [Declude.JunkMail] Reasons to renew

2008-04-02 Thread Ncl Admin
Now there is a good question. At 10:13 AM 4/2/2008 -0700, you wrote: After seeing Matt’s post here about not renewing his JunkMail subscription. I’m asking Declude to respond to the group as to why any of us with perpetual licensing. Our SA expires soon and I would like to know the

RE: [Declude.JunkMail] Reasons to renew

2008-04-02 Thread David Barker
Kevin, Every effort has been made to ensure that major releases are problem free, this has been the reason for the delay in major releases, however if you notice that between major releases we make available several interim releases just as Scott had done in the past. Reasons for

RE: [Declude.JunkMail] Reasons to renew

2008-04-02 Thread Dan Shadix
but the others that I’ve seen were a lot more expensive. Everyone has to choose the product that works for them. Declude works for me. Dan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, April 02, 2008 11:58 AM To: declude.junkmail@declude.com Subject: RE

RE: [Declude.JunkMail] IMail Server version 10

2008-04-01 Thread David Barker
It is expected to work with 10 but will only know when it is released. David B -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, April 01, 2008 5:08 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] IMail

Re: [Declude.JunkMail] SORBS

2008-03-28 Thread Dave Doherty
[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, March 27, 2008 4:45 PM Subject: RE: [Declude.JunkMail] SORBS Thanks I just want to be clear that SORBS is different to ORDB -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William

Re: [Declude.JunkMail] ORDB RBL operations

2008-03-27 Thread Matt
This is without a doubt a very important thing to check out. It stung our system, and I'm sure there are others around here that have yet to check theirs for any ORDB tests. The hits for all IP's began yesterday morning for us. Thanks, Matt Michael Hardrick wrote: Everyone here

Re: [Declude.JunkMail] SORBS

2008-03-27 Thread Matt
Increase from a lot of FP's to exactly how many more? :) Matt David Barker wrote: Any increase on False Positives with SORBS being experienced ? David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] ---

RE: [Declude.JunkMail] SORBS

2008-03-27 Thread David Barker
11:08 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] SORBS Increase from a lot of FP's to exactly how many more? :) Matt David Barker wrote: Any increase on False Positives with SORBS being experienced ? David Barker VP Operations Declude Your Email security is our

RE: [Declude.JunkMail] SORBS

2008-03-27 Thread Rick Baranowski
We are getting A LOT Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, March 27, 2008 8:13 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] SORBS Was working with a customer who was claiming

RE: [Declude.JunkMail] SORBS

2008-03-27 Thread William Stillwell
. 727.724.2610 fx. 727.724.2680 cl. 727.638.6208 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Baranowski Sent: Thursday, March 27, 2008 1:02 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] SORBS We are getting A LOT Rick

RE: [Declude.JunkMail] SORBS

2008-03-27 Thread David Barker
Thanks I just want to be clear that SORBS is different to ORDB -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Stillwell Sent: Thursday, March 27, 2008 3:35 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] SORBS Orbs

RE: [Declude.JunkMail] PCRE and NOTCONTAINS

2008-03-20 Thread David Barker
Scott the only way I have done a NOT is in the following example where this will match on the expression but NOT on levitra using (?!levitra) (?i:(?!levitra)\bl.{0,2}e.{0,2}v.{0,2}[|li1í!].{0,2}t.{0,2}r.{0,[EMAIL PROTECTED]) I have attempted to work this type of expression into

RE: [Declude.JunkMail] Hardware upgrade -Software Crossgrade?

2008-03-10 Thread Rick Klinge
Smartermail actually works. ~Rick From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Monday, March 10, 2008 3:44 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Hardware upgrade -Software Crossgrade? Hello, we are going to move to

RE: [Declude.JunkMail] Hardware upgrade -Software Crossgrade?

2008-03-10 Thread Craig Edmonds
. If you are thinking of migrating, do your research first mate. Kindest Regards Craig Edmonds 123 Marbella Internet www.123marbella.net From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Klinge Sent: 10 March 2008 13:19 To: declude.junkmail@declude.com Subject: RE

RE: [Declude.JunkMail] Hardware upgrade -Software Crossgrade?

2008-03-10 Thread Colbeck, Andrew
Alexander, you are really citing two problems with your scale and performance. The first is that you have older hardware and lots of mailboxes. Where do your CPU and disk spend their time? On antispam, or on servicing connections and mailboxes? The second is that your spam detection is less

Re: [Declude.JunkMail] evaluating foreign spam

2008-03-05 Thread Darrell ([EMAIL PROTECTED])
Do you expect to receive russian messages (other than spam) if not than you can filter by charset koi8-r. Charset filtering is not CPU intensive. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF.

RE: [Declude.JunkMail] new Declude release

2008-03-04 Thread David Barker
Had to hold off for AVG changes they have issued a new sdk which we had to test with Declude. It will be within the next 14 days. DB From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, March 04, 2008 11:58 AM To: declude.junkmail@declude.com Subject:

Re: [Declude.JunkMail] Where Does Declude pull this information from?

2008-03-03 Thread Mike N.
Like many peddlers of security software, they can sell more by portraying the situation as worse than it really is. I tried this on an ISP who has been in the business since 1997. Aggressively anti-spam, although they have to fight against stolen account passwords, etc. Reputation: Likely

Re: [Declude.JunkMail] multiple simultaneous problems

2008-03-01 Thread Darrell ([EMAIL PROTECTED])
Check the IMAP logs of recent compared to some of the older ones. We should rule out that someone is not hitting you with excessive connections etc. A couple weeks ago one of my systems started having problems with the POP3 service being slow or timing out. It turned out someone was running

Re: [Declude.JunkMail] multiple simultaneous problems

2008-02-29 Thread John T
1) Are they just q files or d files or both? 2) Tripple check the DNS server(s) being used for problems. 3) Do you have a lot of large mailboxes? Has the amount of email flowing in increased? 4) Review information on the Sniffer list about updating to the new service model. Also, what version of

Re: [Declude.JunkMail] multiple simultaneous problems

2008-02-29 Thread David Dodell
On Feb 29, 2008, at 1:38 AM, John T wrote: 1) Are they just q files or d files or both? Both, 13000 files this morning from overnight total .2) Tripple check the DNS server(s) being used for problems. I have, plus we tried an external DNS and same issue. 3) Do you have a lot of large

Re: [Declude.JunkMail] multiple simultaneous problems

2008-02-29 Thread Darrell ([EMAIL PROTECTED])
David, Comment's inline (2) Declude is failing to make connections on RBL tests about 10 to 20% of the time. Running in debug mode will show one message running against multiple DBL tests, and then the message will show the first 5 DBL tests running, and the rest fail with no connection

Re: [Declude.JunkMail] multiple simultaneous problems

2008-02-29 Thread David Dodell
-Original Message- From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] Which RBL's are timing out? Is your DNS server having problems? Is your DNS server local to the mail server or is it located somewhere else? It is totally random ... sometimes none of them for several messages, other

Re: [Declude.JunkMail] multiple simultaneous problems

2008-02-29 Thread Brian Milburn
It might help to open task manager and reduce the service priority for the time being to give you a little more breathing room until you get the problem sorted out. Brian David Dodell wrote: -Original Message- From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] Which RBL's are

RE: [Declude.JunkMail] ENVFROM test

2008-02-28 Thread David Barker
MAILFROM This test checks the SMTP envelope Mail From: address (which should be the sender of the E-mail) and makes sure that the domain name it is coming from is valid. This way, if mail is sent from [EMAIL PROTECTED], it will get caught (since $$$success$$$.com is not a valid domain). David B

Re: [Declude.JunkMail] why isn't this message deleted

2008-02-26 Thread Imail Admin
a heads-up where the messages are coming from. Thanks, Ben - Original Message - From: Darin Cox To: declude.junkmail@declude.com Sent: Monday, February 25, 2008 3:34 PM Subject: Re: [Declude.JunkMail] why isn't this message deleted Yes, it will work. However, I think you'll

Re: [Declude.JunkMail] why isn't this message deleted

2008-02-26 Thread Imail Admin
- Original Message - From: Darin Cox To: declude.junkmail@declude.com Sent: Tuesday, February 26, 2008 1:19 PM Subject: Re: [Declude.JunkMail] why isn't this message deleted I don't believe it will work that way for you. Forwarded messages are not scanned twice, so I believe

Re: [Declude.JunkMail] why isn't this message deleted

2008-02-26 Thread Darin Cox
Create a domain-specific config, and set it in there. There are examples of domain-specific configs in the Junkmail manual. Darin. - Original Message - From: Imail Admin To: declude.junkmail@declude.com Sent: Tuesday, February 26, 2008 8:01 PM Subject: Re: [Declude.JunkMail] why

RE: [Declude.JunkMail] OT: Yahoo Blocking Email

2008-02-25 Thread Robert Grosshandler
http://help.yahoo.com/l/us/yahoo/mail/postmaster/ Third bullet down. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Thursday, February 21, 2008 12:59 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Yahoo

Re: [Declude.JunkMail] OT: Yahoo Blocking Email

2008-02-25 Thread Matt
PROTECTED] On Behalf Of Dave Beckstrom Sent: Thursday, February 21, 2008 12:59 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Yahoo Blocking Email Rob, We are using domain keys and reverse DNS as well as SPF records. Do you have a link to where I would request

RE: [Declude.JunkMail] OT: Yahoo Blocking Email

2008-02-25 Thread Dave Beckstrom
: Re: [Declude.JunkMail] OT: Yahoo Blocking Email That's not the correct page, that page is primarily for bulk E-mail senders so that they can keep their lists clean. Use this page instead. At the bottom is a link to the form that starts the process: http://help.yahoo.com/l/us/yahoo/mail

Re: [Declude.JunkMail] why isn't this message deleted

2008-02-25 Thread Darin Cox
Yes, it will work. However, I think you'll want the delete setting put on inbound messages rather than outbound. In other words, do the scanning and actions on the inbound message to that account, before it is forwarded to the other account. You'll also want to be careful that you're not

RE: [Declude.JunkMail] Is Tqmcube.com dead???

2008-02-22 Thread David Barker
Of Shayne Embry Sent: Thursday, February 21, 2008 7:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Is Tqmcube.com dead??? Very interesting. I just picked up on this discussion. What makes it interesting to me is that I received a DNSstuff RBLalert last night that said one

RE: [Declude.JunkMail] Is Tqmcube.com dead???

2008-02-21 Thread Colbeck, Andrew
Chuck, was it just the prc.tqmcube.com that returned these? I see on their own RBL checker web page that only the Peoples Republic of China zone returns this error. When I query their servers for a few test IPs, including 127.0.0.2, I don't get an error or a positive response, everything fails.

RE: [Declude.JunkMail] Is Tqmcube.com dead???

2008-02-21 Thread David Barker
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 21, 2008 2:58 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Is Tqmcube.com dead??? Chuck, was it just the prc.tqmcube.com that returned these? I see on their own RBL checker web page

RE: [Declude.JunkMail] Is Tqmcube.com dead???

2008-02-21 Thread Chuck Schick
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 21, 2008 12:58 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Is Tqmcube.com dead??? Chuck, was it just the prc.tqmcube.com that returned these? I see on their own RBL checker web

RE: [Declude.JunkMail] OT: Yahoo Blocking Email

2008-02-21 Thread Colbeck, Andrew
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, February 21, 2008 9:41 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] OT: Yahoo Blocking Email I did this once about a year and a half ago for a client and they responded fairly quickly, but the full

Re: [Declude.JunkMail] OT: Yahoo Blocking Email

2008-02-21 Thread Matt
I did this once about a year and a half ago for a client and they responded fairly quickly, but the full process took about a month before they whitelisted it. If you are bulk mailing from your hosted mail server, you need to stop. Never send bulk E-mail from a hosted mail server, and it is

RE: [Declude.JunkMail] Is Tqmcube.com dead???

2008-02-21 Thread David Barker
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Thursday, February 21, 2008 11:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Is Tqmcube.com dead??? We are seeing this on the dhcp.tqmcube.com - that is the only one we were running

Re: [Declude.JunkMail] OT: Yahoo Blocking Email

2008-02-21 Thread Matt
Oh, and one more thing... If you allow non-mail server port 25 traffic to be sent from within your network, you either want to block that entirely, or ensure that it doesn't go out from the same IP address as your mail server. I have seen many of my clients end up on lists like XBL because

RE: [Declude.JunkMail] OT: Yahoo Blocking Email

2008-02-21 Thread Robert Grosshandler
, 2008 12:01 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Yahoo Blocking Email And as a further best practice to what Matt is advising, I'll mention that ideally you want to send all outbound mail from an IP that is different from your inbound gateways. And that your

RE: [Declude.JunkMail] OT: Yahoo Blocking Email

2008-02-21 Thread Dave Beckstrom
To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Yahoo Blocking Email More. Yahoo has whitelisting, and really cares about reverse DNS pointers and Domain Keys. You might want to resubmit, they were fast for us way back when. Rob -Original Message- From

Re: [Declude.JunkMail] OT: Yahoo Blocking Email

2008-02-21 Thread Matt
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Thursday, February 21, 2008 12:01 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Yahoo Blocking Email And as a further best practice to what Matt is advising, I'll mention that ideally you want to send all

RE: [Declude.JunkMail] Is Tqmcube.com dead???

2008-02-21 Thread Colbeck, Andrew
] On Behalf Of David Barker Sent: Thursday, February 21, 2008 10:05 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Is Tqmcube.com dead??? Just an FYI TQM cube is back up and running. Rumor has it that someone poisoned their DNS cache. They've since gone in and fixed

<    5   6   7   8   9   10   11   12   13   14   >