X-Declude-Sender: [EMAIL PROTECTED] [64.4.10.85]
X-Declude-Spoolname: D48f900ac00427c71.SMD
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com)
for spam.
X-Spam-Tests-Failed: NOABUSE, NOPOSTMASTER, IPNOTINMX, NOLEGITCONTENT,
SPAMDOMAINS, FILTER, WEIGHT10, WEIGHT20, WEIGHT15 [21]
Can I setup a Filter file per user? I have a user who wants everything from
.biz blocked. Can this be done?
The filter files can't be set up on a per-user basis.
However, in this case, you could create a new filter -- but only take an
action on that filter for the one user (using the per-user
Can I setup a Filter file per user? I have a user who wants everything from
.biz blocked. Can this be done?
Thanks,
Kris McElroy
[EMAIL PROTECTED]
Chief Technology Officer
Duracom, INC.
www.duracom.net
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
Well, then the best of both worlds is to change the spamdomains test to an
ENDSWITH qualifier and it will support your needs and mine. The current
CONTAINS qualifier only effectively supports your needs, and does so, at
that, with limited capabilities.
Bill
- Original Message -
From:
I wonder if this has something to do with Declude crashing every now
and then -- it only shows up in the event viewer under W2K3 -- no
declude error files are written.
No, this is unrelated. The C:\Declude.log file entries from the latest
release prove it (they are created immediately as the
Todd, is the production file called virus1.cfg? I don't know if that would
cause any problems, but the default file name is just virus.cfg. What
version of Declude are you running. There was a problem with having more
than 5 or 6 BANNAME entries in the virus.cfg file. Scott release an interim
When I have Declude.Virus active it creates a .vir directory for each
message, then never finishes the message, just leaves it hanging
forever. When I turn off virus, messages flow properly. I have tried
switching from f-prot to AVG with the same result. Virus.cfg attached.
Any thoughts??
Hello,
I'm getting 12/04/2003 00:02:26 Warning: misconfiguration in following line
in configuration file (BOUNCE is not an ACTION). May be a duplicate test
definition?
I think this comes since the update to v1.76i30. Does anyone see this?
I went down to 1.76i, now I'm waiting for the next
Here are my numbers from yesterday:
gawk {print $3} dec1203.log | usort | uniq | grep -c Q
25462
gawk {print $3} vir1203.log | usort | uniq | grep -c Q
25460
grep 12/02/2003 declude.log | gawk {print $4} | usort | uniq | grep -c Q
25612
Scott, what information can we provide you to help you
Scott, what information can we provide you to help you track down whether
IMail is calling Declude for each message or whether it is calling Declude
twice for the same message?
We have already confirmed cases of IMail v8 not calling Declude. We have
almost confirmed cases of IMail calling
If you are using Declude version 1.76Beta then move to the latest interim
release or use the 1.75 version. Try that.
Tyler
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Todd Holt
Sent: Thursday, December 04, 2003 1:46 AM
To: [EMAIL PROTECTED]
This is my entry for the SD test -
@hotmail.com
That's because the reverse DNS entry doesn't have @hotmail.com in it. It
should be something like:
@hotmail.comhotmail.com
or
hotmail.com
-Scott
---
Declude JunkMail: The advanced
I wonder if this has something to do with Declude crashing every now
and then -- it only shows up in the event viewer under W2K3 -- no
declude error files are written.
Thursday, December 4, 2003, 6:32:39 AM, R. Scott Perry [EMAIL PROTECTED] wrote:
Scott, what information can we provide you to
I don't recommend it, but he does pay us for a service and should have the
say so of what he wants or doesn't want. I agree with you, a lot of legit
emails will get caught.
Thanks,
Kris McElroy
[EMAIL PROTECTED]
Chief Technology Officer
Duracom, INC.
www.duracom.net
I am always doing that
I'm getting 12/04/2003 00:02:26 Warning: misconfiguration in following line
in configuration file (BOUNCE is not an ACTION). May be a duplicate test
definition?
I think this comes since the update to v1.76i30. Does anyone see this?
Yes. You must first go to the manual and make sure that you
Change the action from BOUNCE to BOUNCEONLYIFYOUMUST
Thursday, December 4, 2003, 9:50:49 AM, Hirthe, Alexander [EMAIL PROTECTED] wrote:
HA Hello,
HA I'm getting 12/04/2003 00:02:26 Warning: misconfiguration in following line
HA in configuration file (BOUNCE is not an ACTION). May be a duplicate
Anyone know the best way to stop messages that look like this:
html
body
khfwosljwxotdcenter
font face=verdana size=+3Tkmimduhbkbsuhe
okyyhsvadhshnlykpfhuqrdsdcbv sokunxsakdzzstzilutkntbrsqbzdeyeubion
to Pktuxqgfnzzkmkenksdatloftakpkis
I've seen this twice in the last month. IMAIL 7.15, declude 1.76. No
real-time scanning of email directories. May be related to hard disk
traffic, but not specific to IMAIL 8.x
-Original Message-
From: R. Scott Perry
Sent: Wednesday, December 03, 2003 1:01 PM
To: [EMAIL PROTECTED]
Agreed - I too have very occasionally seen instances where emails were
clearly not processed by Declude (no Declude headers) but were delivered to
my mailboxes.
Imail 7.0
Best Regards
Andy Schmidt
HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846
Title: Message
Hi there,
I have a customer
who was having trouble with his messages sent to users on servers that use spam
filters not being delivered. I had him send a message to me so I could see
what tests it fails. As some of you may have already guessed, he's got a
new pc with
I have a customer who was having trouble with his messages sent to users
on servers that use spam filters not being delivered. I had him send a
message to me so I could see what tests it fails. As some of you may have
already guessed, he's got a new pc with Outlook 2003 and the messages fail
Declude JunkMail Pro plus my GIBBERISH and @LINKED filters which can be
found at http://www.mailpure.com/software/decludefilters/
The other filters might also produce hits, the FOREIGN/TLD filter set
will often add points to stuff like this, but you didn't share the headers.
Matt
Danny
Is SpamManager the Alligate product? I'm just curious, because I made an
inquiry to them a few months ago, and they told me they discontinued the
Declude plugin version and they were reorganizing their product line. I
called them today suggested dumping Declude in favor of their
product.
Was the exact phrase Dump Declude used? If so, who did you speak with?
Yes, SpamManager is Alligate is NOXMail. (Original name.)
They have made a business decision and I hope them all the luck, as they are
doing very well.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
I *believe* I spoke to Chris. If it wasn't dump it was drop. I didn't
interpret this as negative statement,
just friendly marketing or another opinion among many. I don't think Chris
intended this as a put down.
Just an opinion on a competing product. You'd hardly expect the person
answering
So, what's the scoop with current Imail 8, declude, sniffer, etc on Windows
2003 Server? We're thinking about moving it to some new iron internally,
and Ive got some 2k3 licenses just burning a hole in my pocket. :)
I heard some stability issues, saw some imail patches/etc .. things stable
The issues seem to appear at high volumes.
Besides, I am more than willing to use those licenses for you. ;)
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Jonathan
I got an email with this in the headers:
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 210.17.164.118
with no reverse DNS entry.
X-Declude-Sender: [EMAIL PROTECTED]
[210.17.164.118]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed:
Declude is optimized to run the external test only once
That was going to be my next question, it looked terribly in-efficient at
first!
Thanks for the responses guys. I just installed the demo.
~Brad
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
We have just released Declude Virus v1.77 (beta). See
http://www.declude.com/junkmail/manual.htm . Notable changes since the
last beta include:
o BOUNCE action renamed to BOUNCEONLYIFYOUMUST (please read the
information on this action in the manual before using it).
o filter
FYI, I believe the demo consolidates everything into two separate tests:
General Malware. However, it will still give you a very good idea of the
overall effectiveness of running Sniffer with Declude.
Bill
- Original Message -
From: T. Bradley Dean [EMAIL PROTECTED]
To: [EMAIL
And this in junkmail_blockedsendrs.cfg:
sweet-n-sour.comdomain (@cooldude.sweet-n-sour.com) sends spam
I do see BLOCKEDSENDERS firing for other things, but not for this. I'm
assuming my error is in junkmail_blockedsenders.cfg, right? Should I change
it to @cooldude.sweet-n-sour.com and
Declude MAILFROM test check only the domain on the MAILFROM address
But we recive a lot of SPAM with mailfrom like this. [EMAIL PROTECTED]
since hotmail.com is a valid Domain, then the message pass the test
Is there a test like the Mailfrom of Imail that test that the
user really exists on the
33 matches
Mail list logo
