Re: [Declude.JunkMail] Any thoughts on blocking bounce messages from spam? spam?

2003-12-29 Thread Matthew Bramble
Sanford Whiteman wrote: Do I target all bounces for deletion? Not if you want to retain your customers. Well, that's what this is about. I'm starting to get calls about people wanting me to block this stuff. I'm not getting any calls asking about where one's message went. In

RE: [Declude.JunkMail] Zeros in IP for declude sender

2003-12-29 Thread Omar K.
Just for clarification, im not using an IPBYPASS, im using HOP 1, which I believe would lead to the same thing, thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, December 29, 2003 3:14 PM To: [EMAIL PROTECTED] Subject:

RE: [Declude.JunkMail] Zeros in IP for declude sender

2003-12-29 Thread R. Scott Perry
Just for clarification, im not using an IPBYPASS, im using HOP 1, which I believe would lead to the same thing, thanks. That is correct. HOP 1 will automatically bypass the IP that connects to Declude JunkMail, and instead use the next IP. Since there is no next IP in this case, 0.0.0.0 is

Re: [Declude.JunkMail] GoodAOL

2003-12-29 Thread Matthew Bramble
I think this is something that good use could be made of in general with your conditional statements, i.e. NOTCONTAINS, NOTIS, NOTENDSWITH, etc. I would have to really rethink filtering again though :) I've been trying not to ask you for too much, but since the topic came up and you agreed,

Re: [Declude.JunkMail] Filter for CIDR's

2003-12-29 Thread Matthew Bramble
Ahh, great! Thanks again. This will work nicely with the whitelisting capability that you discussed as well. Matt R. Scott Perry wrote: I'm sure this might have come up before, but it would be real nice, especially with the new functionality, to have the ability to match IP's to CIDR

RE: [Declude.JunkMail] GoodAOL

2003-12-29 Thread Kami Razvan
Matt I like the way you bring topics up. Scott agrees to NOTENDSWITH you state: ..with your conditional statements, i.e. NOTCONTAINS, NOTIS, NOTENDSWITH, etc. :) I am no legal expert but I don't see Scott saying he is going for conditional statements.. He just agreed to one. I think you

[Declude.JunkMail] Number of messages per day

2003-12-29 Thread Kris McElroy
Is there anyway that I can get a count of the Number of Incoming messages before Declude Junkmail/Virus gets them? I just need a count of incoming messages on the server? If I run the Imail Log Analyzer will this give me the number before or after declude? Thanks, Kris McElroy [EMAIL

Re: [Declude.JunkMail] GoodAOL

2003-12-29 Thread Matthew Bramble
It was a suggestion though...or more like a request :) I really wasn't assuming this was his plan, though I'm sure it crossed his mind and he might have already decided to do it. How could he not you know :) But seriously, I've gotten my money's worth out of Declude and I can't complain.

RE: [Declude.JunkMail] GoodAOL

2003-12-29 Thread John Tolmachoff \(Lists\)
NOTENDSWITH will be added to the next release. Thanks. :)) John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send

[Declude.JunkMail] man, what the heck?

2003-12-29 Thread paul
Geez, am I the only one who's gotten a bunch of spam about a certain 'video'? Sheesh. What are you guys doing to block these? They're all Base64 coded, so regular body tests don't apply. I normally get 1 or 2 spams to my inbox, but over the weekend I got almost 20 of these, all different IPs,

Re: [Declude.JunkMail] man, what the heck?

2003-12-29 Thread R. Scott Perry
Geez, am I the only one who's gotten a bunch of spam about a certain 'video'? Sheesh. What are you guys doing to block these? They're all Base64 coded, so regular body tests don't apply. Actually, with the latest version of Declude JunkMail, body filters will normally work on base64 encoded

Re: [Declude.JunkMail] man, what the heck?

2003-12-29 Thread Burzin Sumariwalla
Hi Paul, I didn't get many of them this past weekend, but I reviewed what I did get and the messages about a french city and a hotel chain were caught by NJABLPROXIES SORBS-HTTP SORBS-SOCKS NABLPROXIES SPAMCOP SNIFFER Burzin At 10:51 AM 12/29/2003, you wrote: Geez, am I the only one who's

RE: [Declude.JunkMail] man, what the heck?

2003-12-29 Thread Omar K.
The hilton thing? I got a ton of them. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of paul Sent: Monday, December 29, 2003 6:52 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] man, what the heck? Geez, am I the only one who's gotten a bunch of

Re: [Declude.JunkMail] man, what the heck?

2003-12-29 Thread Matthew Bramble
Here's what I've done. A subject filter for three points, a body filter for 1 point, my FOREIGN/TLD filters (most of this comes from China), and some body filters for about 4 different domain names. I had the body and subject filters in the first day that I heard about the video :) This was

[Declude.JunkMail] [BUMP] Files locked but not processed

2003-12-29 Thread Sanford Whiteman
All, Well, the symptoms I described in http://www.mail-archive.com/[EMAIL PROTECTED]/msg14623.html have recurred with IMail 8.05/Declude 1.75. As I mentioned in that thread, mail processes around these messages just fine, and it does not bear the earmarks of the IMail usurping issue. The

RE: [Declude.JunkMail] [BUMP] Files locked but not processed

2003-12-29 Thread John Tolmachoff \(Lists\)
Yes, I have seen these. This is on a high volume server where the CPU is averaging 45% plus. Looks like about 10 per 4 hours. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf

Re: [Declude.JunkMail] [BUMP] Files locked but not processed

2003-12-29 Thread R. Scott Perry
Well, the symptoms I described in http://www.mail-archive.com/[EMAIL PROTECTED]/msg14623.html have recurred with IMail 8.05/Declude 1.75. Are you getting C:\Declude.gp1 and/or C:\Declude.gp2 files that have a timestamp at or later than the time this is occurring? Does this still seem to be

RE: [Declude.JunkMail] Bonded Sender

2003-12-29 Thread Cyan Callihan
Thanks for coming on board. If you don't mind, I would like to jump right into a early Christmas Eve discussion on the topic :) I'm sorry that I didn't respond to this sooner. I had the last four days off for the holidays and was unable to check e-mail. So I'm wondering what your take is

[Declude.JunkMail] default weights for tests

2003-12-29 Thread Adam Lukasiewicz
Title: Message I am new to declude and I was wondering if someone could point me in the right direction to finding the default settings (weights) in web form. I have not seen them in FAQ for declude. I do not have access to the configuration files on the mail server only my hosting company

RE: [Declude.JunkMail] default weights for tests

2003-12-29 Thread John Tolmachoff \(Lists\)
Title: Message www.declude.com/junkmail/manual.htm. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Adam Lukasiewicz Sent: Monday, December 29, 2003 1:16 PM To: [EMAIL

RE: [Declude.JunkMail] default weights for tests

2003-12-29 Thread Adam Lukasiewicz
Title: Message Thanks for the reply John, but I read the whole manual before posting anda listing of the tests is in the manual but thedefault weights forfailing these testsis not covered. Anyone else have any ideas. Adam -Original Message-From: [EMAIL PROTECTED]

RE: [Declude.JunkMail] default weights for tests

2003-12-29 Thread John Tolmachoff \(Lists\)
Title: Message Did you click on the Global.cfg link? That is the default Global.cfg with the default tests with the default weights with the default actions. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED]

RE: [Declude.JunkMail] default weights for tests

2003-12-29 Thread Keith Purtell
I don't remember seeing default weights, in my experience. Recommend you start with 0 or 1 and then monitor the results very carefully before incrementing. Just one user's opinion. Keith Purtell, Web/Network Administrator VantageMed Operations (Kansas City) CONFIDENTIALITY NOTICE: This email

RE: [Declude.JunkMail] default weights for tests

2003-12-29 Thread Kami Razvan
Title: Message Adam.. If you look in your Global.cfg you will see two lines that look like: HELOBOGUS helovalid x x 120 REVDNS revdnsexistsx x 8 0 This (in our case) means HELOBOGUS has a weight of 12 and REVDNS a weight of 8. If this had failed in our system your email would have had

RE: [Declude.JunkMail] default weights for tests

2003-12-29 Thread Adam Lukasiewicz
Title: Message No I had printed the manual... thanks John, with your direction and Kami's detail I was able to figure out that the two tests that are failing are adding up to a weight of 10 thus moving the mail to the spam box and not delivering it to the intended recipient. I believe I can

[Declude.JunkMail] FROMFILE request

2003-12-29 Thread John Tolmachoff \(Lists\)
On a fromfile type test, can Declude be configured to log in the header the line number found to match when using WARN? Example Current: X-RBL-Warning: GOODMAILFROM: Desired: X-RBL-Warning: GOODMAILFROM: (line 100) John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail

RE: [Declude.JunkMail] FROMFILE request

2003-12-29 Thread John Tolmachoff \(Lists\)
It would seem to be a bit of a kludge to have it both ways. It's probably better to construct a filter type file if you want the warnings to have line numbers in them, and that gives you other flexibility as well such as MAXWEIGHT and END functionality, along with variable weighting.

Re[2]: [Declude.JunkMail] [BUMP] Files locked but not processed

2003-12-29 Thread Sanford Whiteman
Are you getting C:\Declude.gp1 and/or C:\Declude.gp2 files that have a timestamp at or later than the time this is occurring? No, I'm not. Does this still seem to be happening to E-mails with large numbers of recipients? These messages had 89 and 60 recipients each. I'll send you the

RE: Re[2]: [Declude.JunkMail] [BUMP] Files locked but not processed

2003-12-29 Thread John Tolmachoff \(Lists\)
Same here. No .gpx files. Multiple recipients. Sending files to Scott off list. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Monday, December 29,

Re[2]: [Declude.JunkMail] [BUMP] Files locked but not processed

2003-12-29 Thread R. Scott Perry
Does this still seem to be happening to E-mails with large numbers of recipients? These messages had 89 and 60 recipients each. Are there any Declude log file entries for these E-mails? If so, what are they? Do you know if there are any Declude.exe processes in memory when this happens,

RE: Re[2]: [Declude.JunkMail] [BUMP] Files locked but not processed

2003-12-29 Thread John Tolmachoff \(Lists\)
I my case, no declude processes are hung. (This is after the fact.) To my knowledge, the SMTP service was not stopped/restarted. I can get some log snippets later tonight and send them off list. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From:

Re[3]: [Declude.JunkMail] [BUMP] Files locked but not processed

2003-12-29 Thread Sanford Whiteman
Are there any Declude log file entries for these E-mails? None at all. Do you know if there are any Declude.exe processes in memory when this happens, that are not going away (which could indicate that Declude hung)? There are no hung Declude processes. Do you know if the