[Declude.JunkMail] What version am I running?
Does this still work? \IMail\Declude -diag I thought I was on 1.81 and I just D/Led the fix and replaced declude.exe and I wanted to check the version through the diag and it gave me Diagnostics ON (Declude v1.80) I assumed that this would be version 1.82 - did I do something wrong? --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] test.dat
An explanation of this file... it's purpose and how it gets there.. would be very beneficial. Is supposed to be there, or is it part of the beta testing? Will it re-create itself if deleted? One of the things that often happens in betas (and the old interims) is that files will be created for various purposes, so: We're still currently on 1.81 (didn't have time to update today) so it's not a problem here ... yet. In your case, I would recommend not upgrading to the next beta (or if so, asking any questions that might be relevant in your situation). Note that this is something in the latest beta, and is in not related to the recent SPAMHEADERS fix (1.82 should be identical to 1.81, except with the SPAMHEADERS fix). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] What version am I running? PLEASE IGNORE!
Duh - TOO early for me I must have copied an old .exe - I just did it again and now have 1.82 - Sorry, my bad. Marc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of marc catuogno Sent: Wednesday, January 05, 2005 7:12 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] What version am I running? Does this still work? \IMail\Declude -diag I thought I was on 1.81 and I just D/Led the fix and replaced declude.exe and I wanted to check the version through the diag and it gave me Diagnostics ON (Declude v1.80) I assumed that this would be version 1.82 - did I do something wrong? --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 2005 SpamHeaders - Fix
I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. Under the assumption this was caused by one of my few minor changes before the New Year I reversed all changes made the week before the New Year. Still the processor is maxed out. Any thoughts, any ideas? I don't want to go through and comment out each test one at a time to find which the offender is. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Tuesday, January 04, 2005 10:18 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix Hi, Scott, et.al, I have upgraded to the new Declude.exe v1.82. Within a matter of minutes of doing this upgrade I've noticed that my mail server has started to bog down. I don't know if I'm getting his with a new wave of spam and the server's straining to keep up or if there might be something in the new Declude code which would cause the .EXE to not run as quickly or as efficiently as before. I'm not pointing fingers. I just wanted to know if there's been any possible performance changes because of the bug fix. If not I'll look somewhere else. Thanks In Advance, Dan Geiser [EMAIL PROTECTED] --- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 2005 SpamHeaders - Fix
I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. When you go to the Process tab in the Task Manager, and click on the CPU button, which process(es) are nearest to the top? Note that this should not be related to the SPAMHEADERS issue. Did you make any changes to the Declude configuration recently (such as adding filters, which can eat up CPU time, depending on what they do and how they are designed)? I don't want to go through and comment out each test one at a time to find which the offender is. If it does come to that, you can do it the binary way. First, comment out 1/2 the tests. If the problem continues, uncomment the ones you just commented out, and comment out 1/2 of the ones that you did not comment out (if the problem does not continue, do the opposite -- uncomment 1/2 of the ones that you commented out originally). If you have 30 tests, you'll only have to do this 5 times. The drawback is that during the few minutes you are doing this, spam is more likely to come through. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 2005 SpamHeaders - Fix
The CPU spike is probably do to sheer volume. What is the current volume of messages being processed? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Joshua M. Hughes Sent: Wednesday, January 05, 2005 8:22 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. Under the assumption this was caused by one of my few minor changes before the New Year I reversed all changes made the week before the New Year. Still the processor is maxed out. Any thoughts, any ideas? I don't want to go through and comment out each test one at a time to find which the offender is. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Tuesday, January 04, 2005 10:18 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix Hi, Scott, et.al, I have upgraded to the new Declude.exe v1.82. Within a matter of minutes of doing this upgrade I've noticed that my mail server has started to bog down. I don't know if I'm getting his with a new wave of spam and the server's straining to keep up or if there might be something in the new Declude code which would cause the .EXE to not run as quickly or as efficiently as before. I'm not pointing fingers. I just wanted to know if there's been any possible performance changes because of the bug fix. If not I'll look somewhere else. Thanks In Advance, Dan Geiser [EMAIL PROTECTED] --- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] 2005 SpamHeaders - Fix
Have you added a lot of filters? These tend to run up the CPU. Are you currently experiencing a dictionary attack? Are you still seeing a normal mail pattern? Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. Joshua M. Hughes writes: I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. Under the assumption this was caused by one of my few minor changes before the New Year I reversed all changes made the week before the New Year. Still the processor is maxed out. Any thoughts, any ideas? I don't want to go through and comment out each test one at a time to find which the offender is. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Tuesday, January 04, 2005 10:18 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix Hi, Scott, et.al, I have upgraded to the new Declude.exe v1.82. Within a matter of minutes of doing this upgrade I've noticed that my mail server has started to bog down. I don't know if I'm getting his with a new wave of spam and the server's straining to keep up or if there might be something in the new Declude code which would cause the .EXE to not run as quickly or as efficiently as before. I'm not pointing fingers. I just wanted to know if there's been any possible performance changes because of the bug fix. If not I'll look somewhere else. Thanks In Advance, Dan Geiser [EMAIL PROTECTED] --- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 2005 SpamHeaders - Fix -
Sorted by CPU the system process is first and second is a toss up between declude, smtpd32, and queuemgr followed by as many as 16 simultaneous instances of declude with cpu between 1 and 4. The system is running at 45 to 60 and at times Declude shows up first between 45 and 60. When I change the delivery application to smtp32.exe the system process drops between 8 to 11 and finally the top of the list is the system idle process. No knew filters have been added. In the global.cfg file there was a whitelisted address and a whitelisted domain. For the whitelisted domain I created a folder in the imail\delcude Folder for that domain with a blank $default$.junkmail. For the one whitelisted address a I created a folder for that domain in the imail\declude folder with the $default$.junkmail copy not blank and created a blank user.junkmail file for that user. These changes have been reversed and still have not solved the issue. Does creating a domain folder with a blank $default$.junkamil file, as compared to whitelisting a domain in the global.cfg, use more processing power? Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, January 05, 2005 12:02 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. When you go to the Process tab in the Task Manager, and click on the CPU button, which process(es) are nearest to the top? Note that this should not be related to the SPAMHEADERS issue. Did you make any changes to the Declude configuration recently (such as adding filters, which can eat up CPU time, depending on what they do and how they are designed)? I don't want to go through and comment out each test one at a time to find which the offender is. If it does come to that, you can do it the binary way. First, comment out 1/2 the tests. If the problem continues, uncomment the ones you just commented out, and comment out 1/2 of the ones that you did not comment out (if the problem does not continue, do the opposite -- uncomment 1/2 of the ones that you commented out originally). If you have 30 tests, you'll only have to do this 5 times. The drawback is that during the few minutes you are doing this, spam is more likely to come through. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 2005 SpamHeaders - Fix
I am currently seeing a normal mail pattern. The Imail Daily report actually reported slightly less smtp deliveries yesterday than normal. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, January 05, 2005 12:40 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix Have you added a lot of filters? These tend to run up the CPU. Are you currently experiencing a dictionary attack? Are you still seeing a normal mail pattern? Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. Joshua M. Hughes writes: I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. Under the assumption this was caused by one of my few minor changes before the New Year I reversed all changes made the week before the New Year. Still the processor is maxed out. Any thoughts, any ideas? I don't want to go through and comment out each test one at a time to find which the offender is. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Tuesday, January 04, 2005 10:18 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix Hi, Scott, et.al, I have upgraded to the new Declude.exe v1.82. Within a matter of minutes of doing this upgrade I've noticed that my mail server has started to bog down. I don't know if I'm getting his with a new wave of spam and the server's straining to keep up or if there might be something in the new Declude code which would cause the .EXE to not run as quickly or as efficiently as before. I'm not pointing fingers. I just wanted to know if there's been any possible performance changes because of the bug fix. If not I'll look somewhere else. Thanks In Advance, Dan Geiser [EMAIL PROTECTED] --- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 2005 SpamHeaders - Fix -
Sorted by CPU the system process is first and second is a toss up between declude, smtpd32, and queuemgr followed by as many as 16 simultaneous instances of declude with cpu between 1 and 4. That normal indicates an above average volume of mail (or, in other words, the system is at full capacity). However, the fact that shutting off Declude lowers the CPU usage to 13-20% would indicate that Declude is using more CPU time than it normally should (which could be normal, depending on what filters you have set up). Does creating a domain folder with a blank $default$.junkamil file, as compared to whitelisting a domain in the global.cfg, use more processing power? No, both will use almost exactly the same amount of CPU time. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] 2005 SpamHeaders - Fix -
It is normal to see Declude spike from time to time. If you are seeing a lot of Declude processes just sitting there in your task manager using very little to no CPU I would check to make sure your not using any RBL's that are old or just check in general that your DNS server is responding to RBL query's. Do you see anything out of the ordinary in your logs? Darrell Joshua M. Hughes writes: Sorted by CPU the system process is first and second is a toss up between declude, smtpd32, and queuemgr followed by as many as 16 simultaneous instances of declude with cpu between 1 and 4. The system is running at 45 to 60 and at times Declude shows up first between 45 and 60. When I change the delivery application to smtp32.exe the system process drops between 8 to 11 and finally the top of the list is the system idle process. No knew filters have been added. In the global.cfg file there was a whitelisted address and a whitelisted domain. For the whitelisted domain I created a folder in the imail\delcude Folder for that domain with a blank $default$.junkmail. For the one whitelisted address a I created a folder for that domain in the imail\declude folder with the $default$.junkmail copy not blank and created a blank user.junkmail file for that user. These changes have been reversed and still have not solved the issue. Does creating a domain folder with a blank $default$.junkamil file, as compared to whitelisting a domain in the global.cfg, use more processing power? Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, January 05, 2005 12:02 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. When you go to the Process tab in the Task Manager, and click on the CPU button, which process(es) are nearest to the top? Note that this should not be related to the SPAMHEADERS issue. Did you make any changes to the Declude configuration recently (such as adding filters, which can eat up CPU time, depending on what they do and how they are designed)? I don't want to go through and comment out each test one at a time to find which the offender is. If it does come to that, you can do it the binary way. First, comment out 1/2 the tests. If the problem continues, uncomment the ones you just commented out, and comment out 1/2 of the ones that you did not comment out (if the problem does not continue, do the opposite -- uncomment 1/2 of the ones that you commented out originally). If you have 30 tests, you'll only have to do this 5 times. The drawback is that during the few minutes you are doing this, spam is more likely to come through. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The
Re: [Declude.JunkMail] 2005 SpamHeaders - Fix
What about the size of the log files before and after. It would be helpful to post both the IMail and JunkMail log file sizes as this will give an idea about the volume. I'm not sure that the SMTP deliveries number reflects spam and viruses that Declude blocks. Another thing that would be helpful to know is what external tests you have configured in Declude (Sniffer, etc.). Note that it is expected that having Declude enabled will dramatically increase your CPU utilization. In short you are adding one or more virus scanners to the mix and also a ton of DNS lookups and other filters. Having CPU utilization increase without a change in volume (not yet ruled out) or the filters used however points to there being something wrong, but most likely not something wrong with Declude itself. Matt Joshua M. Hughes wrote: I am currently seeing a normal mail pattern. The Imail Daily report actually reported slightly less smtp deliveries yesterday than normal. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, January 05, 2005 12:40 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix Have you added a lot of filters? These tend to run up the CPU. Are you currently experiencing a dictionary attack? Are you still seeing a normal mail pattern? Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. Joshua M. Hughes writes: I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. Under the assumption this was caused by one of my few minor changes before the New Year I reversed all changes made the week before the New Year. Still the processor is maxed out. Any thoughts, any ideas? I don't want to go through and comment out each test one at a time to find which the offender is. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Dan Geiser Sent: Tuesday, January 04, 2005 10:18 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix Hi, Scott, et.al, I have upgraded to the new Declude.exe v1.82. Within a matter of minutes of doing this upgrade I've noticed that my mail server has started to bog down. I don't know if I'm getting his with a new wave of spam and the server's straining to keep up or if there might be something in the new Declude code which would cause the .EXE to not run as quickly or as efficiently as before. I'm not pointing fingers. I just wanted to know if there's been any possible performance changes because of the bug fix. If not I'll look somewhere else. Thanks In Advance, Dan Geiser [EMAIL PROTECTED] --- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail
RE: [Declude.JunkMail] 2005 SpamHeaders - Fix -
Joshua, if I remember correctly, the IMail daily report shows you the number of messages inbound to your mailserver, but it does not show the number of recipients. You may be getting hit with a dictionary attack. Others on this list have seen this before in various guises. On my own mailserver, I've seen a large increase in the number of targeted addresses for each spam message. Declude will run through most (all?) of your configuration for each addressee on a message. Is your mailserver a gateway, or are the mailboxes local to that server? In other words, do you have envelope rejection? If the mailboxes are local, then you do have envelope rejection and you don't have to worry about extra processing time due to bogus addresses generated by the spammer. Then you're back to trying Scott's suggestion for doing a binary search for slow external tests or slow DNS tests. Oh, two other suggestions: Do a disk defrag, and check for swollen log sizes. On a busy server, adding a few lines of logging text to the end of a 30 MB file takes longer than you would want, and is exacerbated by a fragmented log file. Also, if you're using the SPF tests, check the size of your: c:\declude.log c:\spf.log c:\spf.none files, which will continuously grow. Because they do not have dated-based names, if you don't delete them, they will just get bigger. I'm now running v1.82 and those files are no longer being created. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua M. Hughes Sent: Wednesday, January 05, 2005 9:44 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix - Sorted by CPU the system process is first and second is a toss up between declude, smtpd32, and queuemgr followed by as many as 16 simultaneous instances of declude with cpu between 1 and 4. The system is running at 45 to 60 and at times Declude shows up first between 45 and 60. When I change the delivery application to smtp32.exe the system process drops between 8 to 11 and finally the top of the list is the system idle process. No knew filters have been added. In the global.cfg file there was a whitelisted address and a whitelisted domain. For the whitelisted domain I created a folder in the imail\delcude Folder for that domain with a blank $default$.junkmail. For the one whitelisted address a I created a folder for that domain in the imail\declude folder with the $default$.junkmail copy not blank and created a blank user.junkmail file for that user. These changes have been reversed and still have not solved the issue. Does creating a domain folder with a blank $default$.junkamil file, as compared to whitelisting a domain in the global.cfg, use more processing power? Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, January 05, 2005 12:02 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. When you go to the Process tab in the Task Manager, and click on the CPU button, which process(es) are nearest to the top? Note that this should not be related to the SPAMHEADERS issue. Did you make any changes to the Declude configuration recently (such as adding filters, which can eat up CPU time, depending on what they do and how they are designed)? I don't want to go through and comment out each test one at a time to find which the offender is. If it does come to that, you can do it the binary way. First, comment out 1/2 the tests. If the problem continues, uncomment the ones you just commented out, and comment out 1/2 of the ones that you did not comment out (if the problem does not continue, do the opposite -- uncomment 1/2 of the ones that you commented out originally). If you have 30 tests, you'll only have to do this 5 times. The drawback is that during the few minutes you are doing this, spam is more likely to come through. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask
RE: [Declude.JunkMail] 2005 SpamHeaders - Fix -
The mailboxes are local to the server. We're really not using many external tests unless you consider the several Filters an IPfile and a couple of fromfiles and spamdomains external. Other than that, all dns tests and predefined tests. I have not noticed a large increase in log file size. I looked at the log file size for both declude and smtp and they look pretty close to usual. Looks like I'm going to start the binary way... Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Wednesday, January 05, 2005 1:29 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix - Joshua, if I remember correctly, the IMail daily report shows you the number of messages inbound to your mailserver, but it does not show the number of recipients. You may be getting hit with a dictionary attack. Others on this list have seen this before in various guises. On my own mailserver, I've seen a large increase in the number of targeted addresses for each spam message. Declude will run through most (all?) of your configuration for each addressee on a message. Is your mailserver a gateway, or are the mailboxes local to that server? In other words, do you have envelope rejection? If the mailboxes are local, then you do have envelope rejection and you don't have to worry about extra processing time due to bogus addresses generated by the spammer. Then you're back to trying Scott's suggestion for doing a binary search for slow external tests or slow DNS tests. Oh, two other suggestions: Do a disk defrag, and check for swollen log sizes. On a busy server, adding a few lines of logging text to the end of a 30 MB file takes longer than you would want, and is exacerbated by a fragmented log file. Also, if you're using the SPF tests, check the size of your: c:\declude.log c:\spf.log c:\spf.none files, which will continuously grow. Because they do not have dated-based names, if you don't delete them, they will just get bigger. I'm now running v1.82 and those files are no longer being created. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joshua M. Hughes Sent: Wednesday, January 05, 2005 9:44 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix - Sorted by CPU the system process is first and second is a toss up between declude, smtpd32, and queuemgr followed by as many as 16 simultaneous instances of declude with cpu between 1 and 4. The system is running at 45 to 60 and at times Declude shows up first between 45 and 60. When I change the delivery application to smtp32.exe the system process drops between 8 to 11 and finally the top of the list is the system idle process. No knew filters have been added. In the global.cfg file there was a whitelisted address and a whitelisted domain. For the whitelisted domain I created a folder in the imail\delcude Folder for that domain with a blank $default$.junkmail. For the one whitelisted address a I created a folder for that domain in the imail\declude folder with the $default$.junkmail copy not blank and created a blank user.junkmail file for that user. These changes have been reversed and still have not solved the issue. Does creating a domain folder with a blank $default$.junkamil file, as compared to whitelisting a domain in the global.cfg, use more processing power? Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, January 05, 2005 12:02 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. When you go to the Process tab in the Task Manager, and click on the CPU button, which process(es) are nearest to the top? Note that this should not be related to the SPAMHEADERS issue. Did you make any changes to the Declude configuration recently (such as adding filters, which can eat up CPU time, depending on what they do and how they are designed)? I don't want to go through and comment out each test one at a time to find which the offender is. If it does come to that, you can do it the
Re: [Declude.JunkMail] 2005 SpamHeaders - Fix -
That would rule out an increase in volume, and also the potential of a bug with an external test. So if in fact no other changes were made as far as filters go, I would look at your system next (make absolutely sure that this is correct). Check the fragmentation on all partitions and defrag everything (multiple times until almost perfect). The way that IMail and Declude logs creates massively fragmented files, and even if you have a lot of disk space left over, the entire partition might be filled with fragments causing excessive slowdowns. If you are running RAID 5 or some sort of mirror, make sure that you aren't down a drive because that can cause similar slowdowns. Please also post the standard size of your IMail log just to give an impression of the volume that you are doing. Matt Joshua M. Hughes wrote: The mailboxes are local to the server. We're really not using many external tests unless you consider the several Filters an IPfile and a couple of fromfiles and spamdomains external. Other than that, all dns tests and predefined tests. I have not noticed a large increase in log file size. I looked at the log file size for both declude and smtp and they look pretty close to usual. Looks like I'm going to start the "binary way"... Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, Andrew Sent: Wednesday, January 05, 2005 1:29 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix - Joshua, if I remember correctly, the IMail daily report shows you the number of messages inbound to your mailserver, but it does not show the number of recipients. You may be getting hit with a "dictionary attack". Others on this list have seen this before in various guises. On my own mailserver, I've seen a large increase in the number of targeted addresses for each spam message. Declude will run through most (all?) of your configuration for each addressee on a message. Is your mailserver a gateway, or are the mailboxes local to that server? In other words, do you have envelope rejection? If the mailboxes are local, then you do have envelope rejection and you don't have to worry about extra processing time due to bogus addresses generated by the spammer. Then you're back to trying Scott's suggestion for doing a "binary search" for slow external tests or slow DNS tests. Oh, two other suggestions: Do a disk defrag, and check for swollen log sizes. On a busy server, adding a few lines of logging text to the end of a 30 MB file takes longer than you would want, and is exacerbated by a fragmented log file. Also, if you're using the SPF tests, check the size of your: c:\declude.log c:\spf.log c:\spf.none files, which will continuously grow. Because they do not have dated-based names, if you don't delete them, they will just get bigger. I'm now running v1.82 and those files are no longer being created. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Joshua M. Hughes Sent: Wednesday, January 05, 2005 9:44 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix - Sorted by CPU the system process is first and second is a toss up between declude, smtpd32, and queuemgr followed by as many as 16 simultaneous instances of declude with cpu between 1 and 4. The system is running at 45 to 60 and at times Declude shows up first between 45 and 60. When I change the delivery application to smtp32.exe the system process drops between 8 to 11 and finally the top of the list is the system idle process. No knew filters have been added. In the global.cfg file there was a whitelisted address and a whitelisted domain. For the whitelisted domain I created a folder in the imail\delcude Folder for that domain with a blank $default$.junkmail. For the one whitelisted address a I created a folder for that domain in the imail\declude folder with the $default$.junkmail "copy not blank" and created a blank user.junkmail file for that user. These changes have been reversed and still have not solved the issue. Does creating a domain folder with a blank $default$.junkamil file, as compared to whitelisting a domain in the global.cfg, use more processing power? Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Wednesday, January 05, 2005 12:02 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the
[Declude.JunkMail] Filter for blank subject lines
Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter for blank subject lines
If you have Junkmail Pro, try this as a Filter: SUBJECT 10ISBLANK - Original Message - From: [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, January 05, 2005 2:25 PM Subject: [Declude.JunkMail] Filter for blank subject lines Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 2005 SpamHeaders - Fix -
John, It took me a while to get these stats. I reviewed the SMTP logs for 12/4, 12/5, 12/7, 12/8. I know the server was running fine during this week. Usage is as follows. 12/4 - 83,170 messages 12/5 - 82,065 messages 12/7 - 95,087 messages 12/8 - 95,730 messages I reviewed the SMTP logs for the 1/2, 1/3, 1/4. These are current and usage is as follows. 1/1 - 59,717 messages 1/2 - 63,795 messages 1/3 - 78,945 messages 1/4 - 79,410 messages It appears as if the beginning of last month, when we were running fine, had a lot more messages being delivered. The only things I see in the log disturbing for today are: [EMAIL PROTECTED] 4.63.108.6= 1130 messages = 1068 messages I have an ipfile that I have set to automatically delete anything from the ip 4.63.108.6 because they have been the top sender of the log for three days. However, this messages is still being processed. Matt, Average SMTP log size is between 102MB to 200MB. This appears normal. The drive that the logs were on wasn't severely fragmented however, I de-fragmented it anyway. The drive that the spool directory is on is 86% free but about 60% fragmented. This drive could be de-fragmented however, I'm worried about de-fragmenting while the CPU is at 100%. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Wednesday, January 05, 2005 12:17 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix The CPU spike is probably do to sheer volume. What is the current volume of messages being processed? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Joshua M. Hughes Sent: Wednesday, January 05, 2005 8:22 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. Under the assumption this was caused by one of my few minor changes before the New Year I reversed all changes made the week before the New Year. Still the processor is maxed out. Any thoughts, any ideas? I don't want to go through and comment out each test one at a time to find which the offender is. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Tuesday, January 04, 2005 10:18 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix Hi, Scott, et.al, I have upgraded to the new Declude.exe v1.82. Within a matter of minutes of doing this upgrade I've noticed that my mail server has started to bog down. I don't know if I'm getting his with a new wave of spam and the server's straining to keep up or if there might be something in the new Declude code which would cause the .EXE to not run as quickly or as efficiently as before. I'm not pointing fingers. I just wanted to know if there's been any possible performance changes because of the bug fix. If not I'll look somewhere else. Thanks In Advance, Dan Geiser [EMAIL PROTECTED] --- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---
Re: [Declude.JunkMail] Filter for blank subject lines
Since a sizeable amount of blank subjects are spam and come from forged addresses, please don't bounce such messages. It's called backscatter, and it is a very large problem, typically amounting to 1% to 2% of my total mail volume. This is also common enough that you would also upset many customers. If you tweak your setup properly, you can tag blank subjects with a little weight and still not have issues with blocking legitimate E-mail while improving spam detection. Matt [EMAIL PROTECTED] wrote: Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] 2005 SpamHeaders - Fix -
A 200 MB normal IMail log file (not set to verbose or debug) would correspond to more than 200,000 messages on my system. I don't log POP3 stuff though, so that might also explain the difference. Please zip up yesterday's Declude JunkMail log and post it to a Web site somewhere and send me the link off-list and I will stats on it to determine how many messages that Declude processed. I'm still suspecting volume might be the issue, and it is generally the most likely culprit and deserves extra attention. It could be that you have a customer bulk-mailing through your server. People get a copy of Microsoft Office these days and set up their own newsletters using their provider's SMTP server. I don't believe that 60% fragmentation would cause a significant slowdown, though you would get slightly better performance when defraged, so do that regularly and as soon as it makes sense. Just to keep one step ahead, why don't you indicate which virus scanners you are running (with versions) and confirm your settings in Declude Virus for "PRESCAN" being ON or OFF. Matt Joshua M. Hughes wrote: John, It took me a while to get these stats. I reviewed the SMTP logs for 12/4, 12/5, 12/7, 12/8. I know the server was running fine during this week. Usage is as follows. 12/4 - 83,170 messages 12/5 - 82,065 messages 12/7 - 95,087 messages 12/8 - 95,730 messages I reviewed the SMTP logs for the 1/2, 1/3, 1/4. These are current and usage is as follows. 1/1 - 59,717 messages 1/2 - 63,795 messages 1/3 - 78,945 messages 1/4 - 79,410 messages It appears as if the beginning of last month, when we were running fine, had a lot more messages being delivered. The only things I see in the log disturbing for today are: [EMAIL PROTECTED] 4.63.108.6 = 1130 messages = 1068 messages I have an ipfile that I have set to automatically delete anything from the ip 4.63.108.6 because they have been the top sender of the log for three days. However, this messages is still being processed. Matt, Average SMTP log size is between 102MB to 200MB. This appears normal. The drive that the logs were on wasn't severely fragmented however, I de-fragmented it anyway. The drive that the spool directory is on is 86% free but about 60% fragmented. This drive could be de-fragmented however, I'm worried about de-fragmenting while the CPU is at 100%. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff (Lists) Sent: Wednesday, January 05, 2005 12:17 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix The CPU spike is probably do to sheer volume. What is the current volume of messages being processed? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Joshua M. Hughes Sent: Wednesday, January 05, 2005 8:22 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 2005 SpamHeaders - Fix I have not upgraded to fix the 2005 spamheaders test as of yet. Our CPU has been maxed out and the server bogged down since my return after the New Year. I have commented out the spamheaders test and the CPU is still maxed. I went into IMAIL and changed the delivery application from declude.exe to smtp32.exe and restarted the SMTP service and the processing dropped from 100% to approximately 13% - 20%. I placed the declude.exe back in as the delivery application and the processor utilization shot right back up. This narrows it down to declude however, I have not yet pin pointed exactly what is causing the increase in processor usage. Under the assumption this was caused by one of my few minor changes before the New Year I reversed all changes made the week before the New Year. Still the processor is maxed out. Any thoughts, any ideas? I don't want to go through and comment out each test one at a time to find which the offender is. Thank you, Joshua Sunline Team (941) 206-7870 http://www.sunline.net/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Dan Geiser Sent: Tuesday, January 04, 2005 10:18 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] 2005 SpamHeaders - Fix Hi, Scott, et.al, I have upgraded to the new Declude.exe v1.82. Within a matter of minutes of doing this upgrade I've noticed that my mail server has started to bog down. I don't know if I'm getting his with a new wave of spam and the server's straining to keep up or if there might be something in the new Declude code which would cause the .EXE to not run as quickly or as efficiently as before. I'm not pointing fingers. I just wanted to know if there's been any
Re: [Declude.JunkMail] Filter for blank subject lines
My read is that he is only attempting to enforce the subject requirement on his on users within his own domain. So if he builds his rules appropriately, either as a specific domain rule or a combo filter, he should be able to apply the subject requirement to his own users/domain without affecting or bouncing messages to anyone outside his userbase/domain. Bill - Original Message - From: Matt [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, January 05, 2005 12:34 PM Subject: Re: [Declude.JunkMail] Filter for blank subject lines Since a sizeable amount of blank subjects are spam and come from forged addresses, please don't bounce such messages. It's called backscatter, and it is a very large problem, typically amounting to 1% to 2% of my total mail volume. This is also common enough that you would also upset many customers. If you tweak your setup properly, you can tag blank subjects with a little weight and still not have issues with blocking legitimate E-mail while improving spam detection. Matt [EMAIL PROTECTED] wrote: Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter for blank subject lines
It's not about blocking spam, it's about forcing employees to be sensible when it comes to electronic messages. I myself get between 20 - 30 emails a day from 1 employee that carry blank subjects. Dare I say 700 a month from one person? Memos, personal requests, outside of ramming their head into a file cabinet, I have tried it all. Then you have remote users who I don't have the pleasure of beating on daily. You want to talk about a very large problem... I'd love to have 1% or 2% of my messages with no subject line. As it stands right now, this very second, 20% of my corporate inbox is filled with messages that have blank subject lines. That's a very large problem. You want to come here a sift through 100 random e-mails trying to find something? I am fully aware of problem with bouncing mail and forged headers. But using the test or filter intra-domain will have no adverse effects on yours, or anyone's server... only mine. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Sent: Wednesday, January 05, 2005 2:35 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Filter for blank subject lines Since a sizeable amount of blank subjects are spam and come from forged addresses, please don't bounce such messages. It's called backscatter, and it is a very large problem, typically amounting to 1% to 2% of my total mail volume. This is also common enough that you would also upset many customers. If you tweak your setup properly, you can tag blank subjects with a little weight and still not have issues with blocking legitimate E-mail while improving spam detection. Matt [EMAIL PROTECTED] wrote: Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter for blank subject lines
True. Just be careful, and understand that you can't apply such actions to whitelisted E-mail. Matt Bill Landry wrote: My read is that he is only attempting to enforce the subject requirement on his on users within his own domain. So if he builds his rules appropriately, either as a specific domain rule or a combo filter, he should be able to apply the subject requirement to his own users/domain without affecting or bouncing messages to anyone outside his userbase/domain. Bill - Original Message - From: "Matt" [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, January 05, 2005 12:34 PM Subject: Re: [Declude.JunkMail] Filter for blank subject lines Since a sizeable amount of blank subjects are spam and come from forged addresses, please don't bounce such messages. It's called backscatter, and it is a very large problem, typically amounting to 1% to 2% of my total mail volume. This is also common enough that you would also upset many customers. If you tweak your setup properly, you can tag blank subjects with a little weight and still not have issues with blocking legitimate E-mail while improving spam detection. Matt [EMAIL PROTECTED] wrote: Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
Re: [Declude.JunkMail] Filter for blank subject lines
I didn't read your original post carefully enough and misunderstood the exact situation as a result. Sorry to have touched on your frustration. I agree, no-subject people are annoying, especially when they do so 20 times a day. Around here that's grounds for disciplinary action :) Matt [EMAIL PROTECTED] wrote: It's not about blocking spam, it's about forcing employees to be sensible when it comes to electronic messages. I myself get between 20 - 30 emails a day from 1 employee that carry blank subjects. Dare I say 700 a month from one person? Memos, personal requests, outside of ramming their head into a file cabinet, I have tried it all. Then you have remote users who I don't have the pleasure of beating on daily. You want to talk about a very large problem... I'd love to have 1% or 2% of my messages with no subject line. As it stands right now, this very second, 20% of my corporate inbox is filled with messages that have blank subject lines. That's a very large problem. You want to come here a sift through 100 random e-mails trying to find something? I am fully aware of problem with bouncing mail and forged headers. But using the test or filter intra-domain will have no adverse effects on yours, or anyone's server... only mine. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Matt Sent: Wednesday, January 05, 2005 2:35 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Filter for blank subject lines Since a sizeable amount of blank subjects are spam and come from forged addresses, please don't bounce such messages. It's called backscatter, and it is a very large problem, typically amounting to 1% to 2% of my total mail volume. This is also common enough that you would also upset many customers. If you tweak your setup properly, you can tag blank subjects with a little weight and still not have issues with blocking legitimate E-mail while improving spam detection. Matt [EMAIL PROTECTED] wrote: Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
Re: [Declude.JunkMail] Filter for blank subject lines
I've actually found that ramming their head into the cubicle wall works better than a filing cabinet. They're rather resilient and don't take too much damage, nor are they so hard that they'll actually knock out the luser and make them forget why you were assaulting them. I've got the same situation at my office with the blank subject lines internally, I don't bother telling people what to do, I just find a way to enforce it through software. If/when you get this figured out I am very interested in seeing how it was pulled off. In the mean time I'll tinker around on my server and see if I can get it to work. Sam [EMAIL PROTECTED] wrote: It's not about blocking spam, it's about forcing employees to be sensible when it comes to electronic messages. I myself get between 20 - 30 emails a day from 1 employee that carry blank subjects. Dare I say 700 a month from one person? Memos, personal requests, outside of ramming their head into a file cabinet, I have tried it all. Then you have remote users who I don't have the pleasure of beating on daily. You want to talk about a very large problem... I'd love to have 1% or 2% of my messages with no subject line. As it stands right now, this very second, 20% of my corporate inbox is filled with messages that have blank subject lines. That's a very large problem. You want to come here a sift through 100 random e-mails trying to find something? I am fully aware of problem with bouncing mail and forged headers. But using the test or filter intra-domain will have no adverse effects on yours, or anyone's server... only mine. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Matt Sent: Wednesday, January 05, 2005 2:35 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Filter for blank subject lines Since a sizeable amount of blank subjects are spam and come from forged addresses, please don't bounce such messages. It's called backscatter, and it is a very large problem, typically amounting to 1% to 2% of my total mail volume. This is also common enough that you would also upset many customers. If you tweak your setup properly, you can tag blank subjects with a little weight and still not have issues with blocking legitimate E-mail while improving spam detection. Matt [EMAIL PROTECTED] wrote: Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- S.J.Stanaitis Network Administrator, Decorative Product Source http://www.dpsource.com/ [EMAIL PROTECTED] (877)-650-8054 x160
Re: [Declude.JunkMail] 2005 SpamHeaders - Fix -
Joshua- How many files do you have in your spool? Anytime I've had this problem there has been a corresponding increase in the spool contents. I agree with Matt that it may well be a user sending high volumes of SMTP traffic through your server. It doesn't have to be a lot of messages, but if they are very large that can cause problems. We have a bunch of employment and temp agencies, and they cause us trouble sometimes because they tend to send large attachments. Also look for a dictionary attack against a domain with a nobody alias. -Dave Doherty Skywaves, inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter for blank subject lines
I have pro and my filters work, yet ISBLANK, IS BLANK, IS, and IS , all pass mail with blank subjects through. White listing plays no part. Do you know if that is supposed to work for sure? Thanks. Sorry for the vent earlier. I got my ass chewed REAL good today because I forget to do something. Normally I'd catch it in my end of the day email reviews... but this one had no subject, so I (accidentally?) overlooked it. Had it carried even the vaguest of subject lines, I think it would have caught my attention last night before I left for the day. Anywho, I'm determined to get them to include subject lines one way or another. Ideally it'll be mandatory as forced by either DecludeJunkMail or Imail. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher Sent: Wednesday, January 05, 2005 2:24 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Filter for blank subject lines If you have Junkmail Pro, try this as a Filter: SUBJECT 10ISBLANK - Original Message - From: [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, January 05, 2005 2:25 PM Subject: [Declude.JunkMail] Filter for blank subject lines Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter for blank subject lines
I have instructed users that send me messages with no subject, they are filtered into a folder and I go through them in my free time. They all know I have no free time. I get messages with subjects now. A good computer/email usage policy can also enable you to terminate employees that do not follow it. Get management involved and let them know how much of yor time is wasted looking for messages with no subject lines. If you are using outlook install LookOut to index your mesages for keyword searching. Kevin Bilbee -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of S.J.StanaitisSent: Wednesday, January 05, 2005 1:37 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Filter for blank subject linesI've actually found that ramming their head into the cubicle wall works better than a filing cabinet. They're rather resilient and don't take too much damage, nor are they so hard that they'll actually knock out the luser and make them forget why you were assaulting them.I've got the same situation at my office with the blank subject lines internally, I don't bother telling people what to do, I just find a way to enforce it through software. If/when you get this figured out I am very interested in seeing how it was pulled off. In the mean time I'll tinker around on my server and see if I can get it to work.Sam[EMAIL PROTECTED] wrote: It's not about blocking spam, it's about forcing employees to be sensible when it comes to electronic messages. I myself get between 20 - 30 emails a day from 1 employee that carry blank subjects. Dare I say 700 a month from one person? Memos, personal requests, outside of ramming their head into a file cabinet, I have tried it all. Then you have remote users who I don't have the pleasure of beating on daily. You want to talk about a very large problem... I'd love to have 1% or 2% of my messages with no subject line. As it stands right now, this very second, 20% of my corporate inbox is filled with messages that have blank subject lines. That's a very large problem. You want to come here a sift through 100 random e-mails trying to find something? I am fully aware of problem with bouncing mail and forged headers. But using the test or filter intra-domain will have no adverse effects on yours, or anyone's server... only mine. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Matt Sent: Wednesday, January 05, 2005 2:35 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Filter for blank subject lines Since a sizeable amount of blank subjects are spam and come from forged addresses, please don't bounce such messages. It's called backscatter, and it is a very large problem, typically amounting to 1% to 2% of my total mail volume. This is also common enough that you would also upset many customers. If you tweak your setup properly, you can tag blank subjects with a little weight and still not have issues with blocking legitimate E-mail while improving spam detection. Matt [EMAIL PROTECTED] wrote: Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL
Re: [Declude.JunkMail] Filter for blank subject lines
No problem at all. I'm guilty of much worse, besides, I responded inappropriately. I seem to recall the ISBLANK option not working with SUBJECT. Could be wrong though, but a test of this would seem definitive. Make sure there are no tabs or spaces following ISBLANK, unlike other filters, this is just three columns. If it is confirmed not to work and you know VBScript, this could be done in a few lines of code and worked into Declude as an external test like so: 1) Split on double line break 2) Check first array position (using InStr) for CRLFSubject: CRLF 3) If a match is found, return an exit code (using WScript.Quit) of 10, otherwise an exit code of 0. See the HELOISREVDNS filter on my site for an example of a simple script and configuration that can be used in Declude as an external test. http://www.mailpure.com/software/decludefilters/beta/ Matt [EMAIL PROTECTED] wrote: I have pro and my filters work, yet ISBLANK, IS BLANK, IS, and IS , all pass mail with blank subjects through. White listing plays no part. Do you know if that is supposed to work for sure? Thanks. Sorry for the vent earlier. I got my ass chewed REAL good today because I forget to do something. Normally I'd catch it in my "end of the day" email reviews... but this one had no subject, so I (accidentally?) overlooked it. Had it carried even the vaguest of subject lines, I think it would have caught my attention last night before I left for the day. Anywho, I'm determined to get them to include subject lines one way or another. Ideally it'll be mandatory as forced by either DecludeJunkMail or Imail. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Scott Fisher Sent: Wednesday, January 05, 2005 2:24 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Filter for blank subject lines If you have Junkmail Pro, try this as a Filter: SUBJECT 10ISBLANK - Original Message - From: [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, January 05, 2005 2:25 PM Subject: [Declude.JunkMail] Filter for blank subject lines Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
RE: [Declude.JunkMail] Filter for blank subject lines
I have pro and my filters work, yet ISBLANK, IS BLANK, IS, and IS , all pass mail with blank subjects through. White listing plays no part. Do you know if that is supposed to work for sure? Are you creating a filter test for it? The SUBJECT 10 ISBLANK line should work with the latest version of Declude JunkMail Pro, if it appears in a filter file. It won't work on a line in the global.cfg file, however (or else Declude JunkMail won't know the weight or actions to use). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Utility
I use BareGrep from http://www.baremetalsoft.com This is a free GUI Windows grep utility. Open the log file or files, type in the message id and the program will extract only the lines that pertain to that message. How I normally use the program is that I get a message that the mail from [EMAIL PROTECTED] is not getting through. If I know the day the message was sent I first open the sys file and search for the email address. Once I find the 'From johndoe' lines in the sys file I then have the message ID. At that point I open the dec, sys, and vir file for that day and search for the message ID. I can then see the message results from IMail SMTP, Declude Virus, then Declude Spam. It is a lot more helpful to have your logging turned up to High to see the details. I also use BareTail to watch the dec files in real time. I have setup several color highlighting rules so I can see the message boundaries, and it also highlights each test a different color based on if I Delete, Hold, Subject, or Warn. It is a slick utility to verify changes are working the way that I want. I see that the company now has a new program called BareView that is a paid utility that has the functionality of both grep and tail. I have not used the program yet but I will probably check it out. -- Original Message -- From: Richard Farris [EMAIL PROTECTED] Reply-To: Declude.JunkMail@declude.com Date: Tue, 4 Jan 2005 21:45:38 -0600 Is there a utility that you can type the message ID and get back the reasons a test failed tests..instead of going into the logs and pulling it out.. Richard Farris Ethixs Online 1.270.247. Office 1.800.548.3877 Tech Support Crossroads to a Cleaner Internet --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus on the server aea8.k12.ia.us] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude SmarterMail
Has anywone been beta testing SmarterMail and Declude? If so how is it working for you? We never got the beta working, so curious to know if this is working for anyone. Peter
RE: [Declude.JunkMail] Declude SmarterMail
We are testing SmarterMail and Declude now. It is workingquite well with a few outstandingissues. It's still in beta.
RE: [Declude.JunkMail] Filter for blank subject lines
Ok... This is what I have In global.cfg: SUBJECTFILTER filter C:\IMail\Declude\subjectfilter.txt x 5 0 In $default$.cfg for this domain: SUBJECTFILTER WARN In C:\IMail\Declude\subjectfilter.txt: SUBJECT 10 ISBLANK By doing this, sending mail from a remote domain, the mail passes through never running against this filter. If I change the filter to: SUBJECT 10 CONTAINS RTRT and send a mail from the remote domain with RTRT as the subject, the mail is ran against the filter, and the headers show that it has failed the test. I even tried tabbing the filter so it reads: SUBJECT10 ISBLANK and it still doesn't pick anything up. Any Ideas? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, January 05, 2005 5:45 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Filter for blank subject lines I have pro and my filters work, yet ISBLANK, IS BLANK, IS, and IS , all pass mail with blank subjects through. White listing plays no part. Do you know if that is supposed to work for sure? Are you creating a filter test for it? The SUBJECT 10 ISBLANK line should work with the latest version of Declude JunkMail Pro, if it appears in a filter file. It won't work on a line in the global.cfg file, however (or else Declude JunkMail won't know the weight or actions to use). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter for blank subject lines
Is there a line return after your filter line? Declude needs a line return following every line (kind of a PITA). If so, I would assume that it doesn't work (bug). I recall it not working for me, but I haven't bothered to confirm that. Matt [EMAIL PROTECTED] wrote: Ok... This is what I have In global.cfg: SUBJECTFILTER filter C:\IMail\Declude\subjectfilter.txt x 5 0 In $default$.cfg for this domain: SUBJECTFILTER WARN In C:\IMail\Declude\subjectfilter.txt: SUBJECT 10 ISBLANK By doing this, sending mail from a remote domain, the mail passes through never running against this filter. If I change the filter to: SUBJECT 10 CONTAINS RTRT and send a mail from the remote domain with RTRT as the subject, the mail is ran against the filter, and the headers show that it has failed the test. I even tried tabbing the filter so it reads: SUBJECT 10 ISBLANK and it still doesn't pick anything up. Any Ideas? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Wednesday, January 05, 2005 5:45 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Filter for blank subject lines I have pro and my filters work, yet ISBLANK, IS BLANK, IS, and IS , all pass mail with blank subjects through. White listing plays no part. Do you know if that is supposed to work for sure? Are you creating a filter test for it? The "SUBJECT 10 ISBLANK" line should work with the latest version of Declude JunkMail Pro, if it appears in a filter file. It won't work on a line in the global.cfg file, however (or else Declude JunkMail won't know the weight or actions to use). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
RE: [Declude.JunkMail] Filter for blank subject lines
didn't seem to make a difference. mail still passed through unaffected. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Wednesday, January 05, 2005 8:12 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Filter for blank subject lines Is there a line return after your filter line? Declude needs a line return following every line (kind of a PITA).If so, I would assume that it doesn't work (bug). I recall it not working for me, but I haven't bothered to confirm that.Matt[EMAIL PROTECTED] wrote: Ok... This is what I have In global.cfg: SUBJECTFILTER filter C:\IMail\Declude\subjectfilter.txt x 5 0 In $default$.cfg for this domain: SUBJECTFILTER WARN In C:\IMail\Declude\subjectfilter.txt: SUBJECT 10 ISBLANK By doing this, sending mail from a remote domain, the mail passes through never running against this filter. If I change the filter to: SUBJECT 10 CONTAINS RTRT and send a mail from the remote domain with RTRT as the subject, the mail is ran against the filter, and the headers show that it has failed the test. I even tried tabbing the filter so it reads: SUBJECT 10 ISBLANK and it still doesn't pick anything up. Any Ideas? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Wednesday, January 05, 2005 5:45 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Filter for blank subject lines I have pro and my filters work, yet ISBLANK, IS BLANK, IS, and IS , all pass mail with blank subjects through. White listing plays no part. Do you know if that is supposed to work for sure? Are you creating a filter test for it? The "SUBJECT 10 ISBLANK" line should work with the latest version of Declude JunkMail Pro, if it appears in a filter file. It won't work on a line in the global.cfg file, however (or else Declude JunkMail won't know the weight or actions to use). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. This outgoing message is guaranteed to be authentic by Message Level users. Guarantee the authenticity of your email @ http://www.messagelevel.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
Re: [Declude.JunkMail] Declude SmarterMail
What sort of message volume are you testing? The SmarterTools folks say the CPU loads should be lighter with SM than IMal. Can you verify that from your experience? I'm testing it as a "SmartHost" mail cache right now, with volume of about 100,000 a day, and it looks to be holding up well in that environment. I am not testing it with Declude however. It does not appear that Declude functions with their SmartHost service. I've had few issues with SM when using it as a mailcache. The mail issueis that I'm having trouble getting them to understand that the cache needs an address list from the POP server to protect it from dictionary attacks.My cache volmue would probably be about 1,000-3,000 if the cache could send back 550 errors. Thespammers and hackersseem to be ignoring 550s from the main server and targeting the higher preference number MX on the cache. -Dave Doherty Skywaves, Inc. - Original Message - From: Harry Palmer To: Declude.JunkMail@declude.com Sent: Wednesday, January 05, 2005 7:24 PM Subject: RE: [Declude.JunkMail] Declude SmarterMail We are testing SmarterMail and Declude now. It is workingquite well with a few outstandingissues. It's still in beta.
RE: [Declude.JunkMail] Filter for blank subject lines
looks like it's time to learn some VBScript. I can see how your HELOISREVDNS works, but after toying with it a bit, I'm at a loss on how to move from two defined strings to comparing a blank space. No biggie... I'll figure something out. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Wednesday, January 05, 2005 5:15 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Filter for blank subject lines No problem at all. I'm guilty of much worse, besides, I responded inappropriately.I seem to recall the ISBLANK option not working with SUBJECT. Could be wrong though, but a test of this would seem definitive. Make sure there are no tabs or spaces following ISBLANK, unlike other filters, this is just three columns.If it is confirmed not to work and you know VBScript, this could be done in a few lines of code and worked into Declude as an external test like so: 1) Split on double line break2) Check first array position (using InStr) for CRLFSubject: CRLF3) If a match is found, return an exit code (using WScript.Quit) of 10, otherwise an exit code of 0.See the HELOISREVDNS filter on my site for an example of a simple script and configuration that can be used in Declude as an external test. http://www.mailpure.com/software/decludefilters/beta/Matt[EMAIL PROTECTED] wrote: I have pro and my filters work, yet ISBLANK, IS BLANK, IS, and IS , all pass mail with blank subjects through. White listing plays no part. Do you know if that is supposed to work for sure? Thanks. Sorry for the vent earlier. I got my ass chewed REAL good today because I forget to do something. Normally I'd catch it in my "end of the day" email reviews... but this one had no subject, so I (accidentally?) overlooked it. Had it carried even the vaguest of subject lines, I think it would have caught my attention last night before I left for the day. Anywho, I'm determined to get them to include subject lines one way or another. Ideally it'll be mandatory as forced by either DecludeJunkMail or Imail. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Scott Fisher Sent: Wednesday, January 05, 2005 2:24 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Filter for blank subject lines If you have Junkmail Pro, try this as a Filter: SUBJECT 10ISBLANK - Original Message - From: [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, January 05, 2005 2:25 PM Subject: [Declude.JunkMail] Filter for blank subject lines Any previous talk on filtering for blank subject lines is 2 years old, so I'd like to present the question again, and/or make a new feature request. Within our corp, we have several employees who enjoy send their mails with no subject what-so-ever. Wrist slaps have done nothing to correct this problem. I'd like very much to bounce mails lacking subjects, informing the sender that to complete the delivery, they must resend with a completed subject line. I've tried using both SUBJECTCHARS and CONTSPACES, but they don't seem to work as I'd like. Is there a specific test or filter I can use to detect blank subject lines? TIA --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
RE: [Declude.JunkMail] Declude SmarterMail
WereplacedIMailwith SmarterMail on our server hosting 27 sites with 1,800+ users. I don'tbelieveourmessage volumewould be meaningful to you because we also have two IMGates (primary and secondary mxs) between the Internet andthe SmarterMail server,same as we had with our IMail server. The IMGates reject a significant amount of worthless traffic, greatly reducing the workload on the SmarterMail server. We export the list of users, aliases and domains from SmarterMail to the IMGates, therefore providing a very effective defense against dictionary attacks. Declude for SmarterMail is still in beta, so we have turned it on and off as we test. We don't yet have enough experience to accurately compare IMail+Declude to SmarterMail+Declude. It wouldn't be appropriate to evaluate the combination anyway, until Declude for SmarterMail is released for production use. Overall, we arequite pleased with SmarterMail and all end user comments have beenpositive. Hope this helps. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Dave DohertySent: Wednesday, January 05, 2005 9:50 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Declude SmarterMail What sort of message volume are you testing? The SmarterTools folks say the CPU loads should be lighter with SM than IMal. Can you verify that from your experience? I'm testing it as a "SmartHost" mail cache right now, with volume of about 100,000 a day, and it looks to be holding up well in that environment. I am not testing it with Declude however. It does not appear that Declude functions with their SmartHost service. I've had few issues with SM when using it as a mailcache. The mail issueis that I'm having trouble getting them to understand that the cache needs an address list from the POP server to protect it from dictionary attacks.My cache volmue would probably be about 1,000-3,000 if the cache could send back 550 errors. Thespammers and hackersseem to be ignoring 550s from the main server and targeting the higher preference number MX on the cache. -Dave Doherty Skywaves, Inc. - Original Message - From: Harry Palmer To: Declude.JunkMail@declude.com Sent: Wednesday, January 05, 2005 7:24 PM Subject: RE: [Declude.JunkMail] Declude SmarterMail We are testing SmarterMail and Declude now. It is workingquite well with a few outstandingissues. It's still in beta.
