RE: [Declude.JunkMail] SPAManager IWEBMSG add-in demo available

2003-01-03 Thread Nathan Fouarge
Sandy, I have been working on basically the same thing. There is one thing that I just really can not figure out how to do. How do you get the plan.ima file to copy into the declude config directory? Right now I have just setup a cgi that the user has to click on to 'activate' their Spam

Re[2]: [Declude.JunkMail] SPAManager IWEBMSG add-in demo available

2003-01-03 Thread Sanford Whiteman
There is one thing that I just really can not figure out how to do. How do you get the plan.ima file to copy into the declude config directory? I don't. I use REDIRECT. -Sandy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from

[Declude.JunkMail] External test question

2003-01-03 Thread Charles Frolick
Scott, If an external test was the last one defined would the following work? MYTEST external nonzero c:\mytest.exe %TESTSFAILED% 0 0 The reason is, I'm thinking about creating an app to plot the hit rate for my tests, but I want to make it a data gatherer rather than a log analyzer (spreads out

[Declude.JunkMail] Move/copy Lock/unlock errors

2003-01-03 Thread Dan Spangenberg
I was looking at the header of a suspected spam email, and it didn't have any declude headers added. I thought this very strange so I looked at the declude spam logs and found that the email had generated this error. Looks like it sailed right through without getting looked at. Any idea why it

RE: [Declude.JunkMail] SPAManager IWEBMSG add-in demo available

2003-01-03 Thread John Tolmachoff
Looks good in the 2 minutes I had. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Sanford Whiteman Sent:

Re: [Declude.JunkMail] External test question

2003-01-03 Thread R. Scott Perry
If an external test was the last one defined would the following work? MYTEST external nonzero c:\mytest.exe %TESTSFAILED% 0 0 Yes, that should work fine. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail

Re: [Declude.JunkMail] Move/copy Lock/unlock errors

2003-01-03 Thread R. Scott Perry
I was looking at the header of a suspected spam email, and it didn't have any declude headers added. I thought this very strange so I looked at the declude spam logs and found that the email had generated this error. Looks like it sailed right through without getting looked at. Any idea why it

RE: [Declude.JunkMail] External test question

2003-01-03 Thread John Tolmachoff
So, the tests are run in the order defined in the Global.cfg? John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of R.

RE: [Declude.JunkMail] External test question

2003-01-03 Thread R. Scott Perry
So, the tests are run in the order defined in the Global.cfg? Not always. :) For example, the IP-based tests (such as SPAMCOP) will run before other external tests (even if it is the last one defined). However, external tests are among a group of tests that are run last, and if an

[Declude.JunkMail]

2003-01-03 Thread Michael Lauritzen
is it possible for a single user in a virtual domain to have a whitelist? Michael Lauritzen --- [This E-mail is scanned for viruses by Ucopian Networks Inc] [http://www.ucopiannetworks.com] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail

RE: [Declude.JunkMail] Move/copy Lock/unlock errors

2003-01-03 Thread Dan Spangenberg
I am running version 1.64 I do not have an on-access scanner running nor am I running Hijack. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, January 03, 2003 11:03 AM To: [EMAIL PROTECTED] Subject: Re:

RE: [Declude.JunkMail] External test question

2003-01-03 Thread R. Scott Perry
OK, what is the general order by group of how the tests are run? (lpr4, weight, external, fromfile, filter and such.) Do you have a need to know, or are you just curious? It may take a lot of time to come up with the exact order. Would then tests within a group be run in the order found?

Re: [Declude.JunkMail]

2003-01-03 Thread R. Scott Perry
is it possible for a single user in a virtual domain to have a whitelist? Not currently, but the next beta will allow for that. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail

RE: [Declude.JunkMail] Move/copy Lock/unlock errors

2003-01-03 Thread R. Scott Perry
I am running version 1.64 I do not have an on-access scanner running nor am I running Hijack. As 1.64 is a beta version, I would recommend upgrading to 1.65. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came

RE: [Declude.JunkMail] Move/copy Lock/unlock errors

2003-01-03 Thread Dan Spangenberg
good idea. I'll upgrade and keep ou posted if I see them again... Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, January 03, 2003 11:56 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Move/copy

[Declude.JunkMail] SpamRouting Triggered - all German IPs

2003-01-03 Thread Andy Schmidt
Hi Scott: The following header tripped SPAMROUTING. However, http://www.dnsstuff.com/tools/whois.ch?ip=192.67.198.73 is located in Karlsruhe, Germany http://www.dnsstuff.com/tools/whois.ch?ip=217.72.192.180 is located in Karlsruhe, Germany

Re: [Declude.JunkMail] SpamRouting Triggered - all German IPs

2003-01-03 Thread R. Scott Perry
http://www.dnsstuff.com/tools/whois.ch?ip=192.67.198.73 is located in Karlsruhe, Germany http://www.dnsstuff.com/tools/whois.ch?ip=217.72.192.180 is located in Karlsruhe, Germany http://www.dnsstuff.com/tools/whois.ch?ip=145.254.191.86 is located in Eschborn, Germany. So there is no funny

[Declude.JunkMail] DNSREPORT/DNSSTUFF: DNS Lookup is Broken?

2003-01-03 Thread Andy Schmidt
http://www.dnsreport.com/tools/dnsreport.ch?domain=grepel.de results in: [ERROR: The root servers say that the domain grepel.de does not have any NS records (although they may have some other information on that zone). I can not do a DNS report on a hostname (such as mail.example.com) or a domain

Re: [Declude.JunkMail] DNSREPORT/DNSSTUFF: DNS Lookup isBroken?

2003-01-03 Thread R. Scott Perry
http://www.dnsreport.com/tools/dnsreport.ch?domain=grepel.de results in: [ERROR: The root servers say that the domain grepel.de does not have any NS records (although they may have some other information on that zone). I can not do a DNS report on a hostname (such as mail.example.com) or a

RE: [Declude.JunkMail] DNSREPORT/DNSSTUFF: DNS Lookup is Broken?

2003-01-03 Thread Andy Schmidt
Hi Scott, sorry - that reply just makes no sense: a) When a DNS server returns a SOA record in response to a query, it means that the queried resource doesn't exist. No - in this case it means I specifically INSTRUCTED NSLOOKUP to return the SOA as my sample showed: set type=soa b) If

RE: [Declude.JunkMail] DNSREPORT/DNSSTUFF: DNS Lookup is Broken?

2003-01-03 Thread Andy Schmidt
Dan, server dns.denic.de. set type=a www.grepel.de. Server: dns.denic.de Address: 194.246.96.79 Name:www.grepel.de Address: 192.67.198.4 Seems to me, as if it's resolving just fine? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206

RE: [Declude.JunkMail] DNSREPORT/DNSSTUFF: DNS Lookup isBroken?

2003-01-03 Thread R. Scott Perry
sorry - that reply just makes no sense: a) When a DNS server returns a SOA record in response to a query, it means that the queried resource doesn't exist. No - in this case it means I specifically INSTRUCTED NSLOOKUP to return the SOA as my sample showed: set type=soa Why were you

RE: [Declude.JunkMail] DNSREPORT/DNSSTUFF: DNS Lookup is Broken?

2003-01-03 Thread Andy Schmidt
Hm, okay, I begin to understand that DNSREPORT/DNSSTUFF is having trouble dealing with the DNS information - but I can tell you TWO things with confidence: a) Internet Explorer with the Windows Resolver CAN resolve: http://www.grepel.de/ b) IMAIL with Windows DNS CAN deliver mail to [EMAIL

RE: [Declude.JunkMail] DNSREPORT/DNSSTUFF: DNS Lookup isBroken?

2003-01-03 Thread R. Scott Perry
okay, I begin to understand that DNSREPORT/DNSSTUFF is having trouble dealing with the DNS information G You're wrong here. Those sites are behaving 100% correctly. - but I can tell you TWO things with confidence: a) Internet Explorer with the Windows Resolver CAN resolve:

RE: [Declude.JunkMail] External test question

2003-01-03 Thread Markus Gufler
For example, the IP-based tests (such as SPAMCOP) will run before other external tests (even if it is the last one defined). Even if it's not good for statistical purposes, what do you think about a new parameter stop_on_hold=true/false wich will stop any further (external, ressource

RE: [Declude.JunkMail] DNSREPORT/DNSSTUFF: DNS Lookup is Broken?

2003-01-03 Thread Andy Schmidt
Hi Scott: Thanks, turning DEBUG on helped understanding your explanation. It appears as if DENIC is setting up domains they host themselves as hosts in their own .DE zone, instead of as zones. Hard to imagine that the zone of a major industrial country would be so terribly mismanaged... - but

RE: [Declude.JunkMail] DNSREPORT/DNSSTUFF: DNS Lookup isBroken?

2003-01-03 Thread R. Scott Perry
While your web sites operate correctly, it may be something you have to keep in mind when testing for the existence of domains in Declude. (Although I believe, you always look for A and MX records, so even this quirky configuration in the .DE namespace would still work.) Fortunately, Declude

RE: [Declude.JunkMail] External test question

2003-01-03 Thread Markus Gufler
I am not so sure about the usefulness of that. While some may like it, others will not. Here is why Yes you're right. There is also to say that normaly only about 5 to 20% of all messages are spam. So the other 80 - 95% of all messages should never reach the hold value (and therefore run