RE: [Declude.JunkMail] OT - Server Watching.
Whats up gold for main monitoring and Servers Alive to monitor whats up gold. Tim -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jerod M. Bennett Sent: Monday, January 23, 2006 11:25 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [Certified Virus free by ASISNA Mail Services.www.asisna.com ] --- [Certified Virus free by ASISNA Mail Services.www.asisna.com ] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Server Watching.
That's interesting. It seems though that from a knowledgeable administrator's point of view in a small business that this would be very expensive and wouldn't net any real return. Most small businesses that I know with up to 100 seats are very tight with their IT spending and go the route of outsourcing virtually all of their needs. Things are probably quite different in places like metro NYC, CA and WA as well as your neck of the woods. Although my own solution fits my needs, I did check out ipmonitor.com and it looks like a real nice product if you want to plunk down $995. This puts them in the more expensive category, but it looks like it does everything. There's even a "NOC View" (http://www.ipmonitor.com/network_monitoring/software/report.aspx). Matt Colbeck, Andrew wrote: I find that companies that will pay for Microsoft Exchange Server and Client licences (and other BackOffice products) wouldn't blink at the cost of MOM; and the pricing is staggered so that you can buy as much utility as you can realistically implement. What I find attractive is not the application management so much as the Event Log gathering and reporting. Weirdly enough, it's not the large shops that I've seen deploying MOM, but rather, it's the small to medium sized shops that don't have the in-house expertise and find MOM cheaper than outsourcing the high-end technologists. In particular, MOM provides the basic "root cause analysis" that junior technologists lack, e.g. so that MOM can tell the help desk that the webserver outage is really a DNS problem. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Monday, January 23, 2006 2:46 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT - Server Watching. Maybe that's because it costs an arm and a leg: http://www.microsoft.com/mom/howtobuy/default.mspx This is really remote management software and not just simply monitoring and reporting. Probably makes sense in big enterprises but not for small businesses. Matt Colbeck, Andrew wrote: I'm quite surprised that nobody has named: http://www.microsoft.com/mom/default.mspx Microsoft MOM yet. It's quite popular in Microsft shops. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, Andrew Sent: Monday, January 23, 2006 11:45 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT - Server Watching. WhatsUp someversionorother http://www.ipswitch.com Nagios (Open Source, with a *nix bent) http://www.nagios.org/ Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. Bennett Sent: Monday, January 23, 2006 11:25 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
Or at least half ;) Maintain,Babul (210) 696-1130, ext. 102(210) 696-0572 [fax]Text Pager Email: [EMAIL PROTECTED] The Montopolis Group, Ltd. - www.montopolis.com "Building stronger businesses... with Technology" From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick HayerPosted At: Monday, January 23, 2006 5:53 PMPosted To: Lists - Declude JunkMailConversation: [Declude.JunkMail] OT - Server Watching.Subject: Re: [Declude.JunkMail] OT - Server Watching.John T (Lists) wrote: BTW, what server did DAD stand for? (It never made it off the design board, of if it did it never became a beta, only an alpha.)well with family court so prevalent I would guess MOM got all of DAD's stuff?-Nick :) John T eServices For You -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, AndrewSent: Monday, January 23, 2006 2:59 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT - Server Watching. I find that companies that will pay for Microsoft Exchange Server and Client licences (and other BackOffice products) wouldn't blink at the cost of MOM; and the pricing is staggered so that you can buy as much utility as you can realistically implement. What I find attractive is not the application management so much as the Event Log gathering and reporting. Weirdly enough, it's not the large shops that I've seen deploying MOM, but rather, it's the small to medium sized shops that don't have the in-house expertise and find MOM cheaper than outsourcing the high-end technologists. In particular, MOM provides the basic "root cause analysis" that junior technologists lack, e.g. so that MOM can tell the help desk that the webserver outage is really a DNS problem. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of MattSent: Monday, January 23, 2006 2:46 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] OT - Server Watching. Maybe that's because it costs an arm and a leg: http://www.microsoft.com/mom/howtobuy/default.mspxThis is really remote management software and not just simply monitoring and reporting. Probably makes sense in big enterprises but not for small businesses.MattColbeck, Andrew wrote: I'm quite surprised that nobody has named: http://www.microsoft.com/mom/default.mspx Microsoft MOM yet. It's quite popular in Microsft shops. Andrew 8) -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, AndrewSent: Monday, January 23, 2006 11:45 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT - Server Watching. WhatsUp someversionorother http://www.ipswitch.com Nagios (Open Source, with a *nix bent) http://www.nagios.org/ Andrew 8) -Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. BennettSent: Monday, January 23, 2006 11:25 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry ---[This E-mail was scanned for viruses by Declude EVA www.declude.com] ---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude EVA www.declude.com] ---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude EVA www.declude.com] ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
Family court or Lawyers court? ROFLOL John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, January 23, 2006 3:53 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT - Server Watching. John T (Lists) wrote: BTW, what server did DAD stand for? (It never made it off the design board, of if it did it never became a beta, only an alpha.) well with family court so prevalent I would guess MOM got all of DAD's stuff? -Nick :) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, Andrew Sent: Monday, January 23, 2006 2:59 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT - Server Watching. I find that companies that will pay for Microsoft Exchange Server and Client licences (and other BackOffice products) wouldn't blink at the cost of MOM; and the pricing is staggered so that you can buy as much utility as you can realistically implement. What I find attractive is not the application management so much as the Event Log gathering and reporting. Weirdly enough, it's not the large shops that I've seen deploying MOM, but rather, it's the small to medium sized shops that don't have the in-house expertise and find MOM cheaper than outsourcing the high-end technologists. In particular, MOM provides the basic "root cause analysis" that junior technologists lack, e.g. so that MOM can tell the help desk that the webserver outage is really a DNS problem. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Monday, January 23, 2006 2:46 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT - Server Watching. Maybe that's because it costs an arm and a leg: http://www.microsoft.com/mom/howtobuy/default.mspx This is really remote management software and not just simply monitoring and reporting. Probably makes sense in big enterprises but not for small businesses. Matt Colbeck, Andrew wrote: I'm quite surprised that nobody has named: http://www.microsoft.com/mom/default.mspx Microsoft MOM yet. It's quite popular in Microsft shops. Andrew 8) -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, AndrewSent: Monday, January 23, 2006 11:45 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT - Server Watching. WhatsUp someversionorother http://www.ipswitch.com Nagios (Open Source, with a *nix bent) http://www.nagios.org/ Andrew 8) -Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. BennettSent: Monday, January 23, 2006 11:25 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry ---[This E-mail was scanned for viruses by Declude EVA www.declude.com] ---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude EVA www.declude.com] ---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude EVA www.declude.com] ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Server Watching.
John T (Lists) wrote: BTW, what server did DAD stand for? (It never made it off the design board, of if it did it never became a beta, only an alpha.) well with family court so prevalent I would guess MOM got all of DAD's stuff? -Nick :) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, Andrew Sent: Monday, January 23, 2006 2:59 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT - Server Watching. I find that companies that will pay for Microsoft Exchange Server and Client licences (and other BackOffice products) wouldn't blink at the cost of MOM; and the pricing is staggered so that you can buy as much utility as you can realistically implement. What I find attractive is not the application management so much as the Event Log gathering and reporting. Weirdly enough, it's not the large shops that I've seen deploying MOM, but rather, it's the small to medium sized shops that don't have the in-house expertise and find MOM cheaper than outsourcing the high-end technologists. In particular, MOM provides the basic "root cause analysis" that junior technologists lack, e.g. so that MOM can tell the help desk that the webserver outage is really a DNS problem. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Monday, January 23, 2006 2:46 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT - Server Watching. Maybe that's because it costs an arm and a leg: http://www.microsoft.com/mom/howtobuy/default.mspx This is really remote management software and not just simply monitoring and reporting. Probably makes sense in big enterprises but not for small businesses. Matt Colbeck, Andrew wrote: I'm quite surprised that nobody has named: http://www.microsoft.com/mom/default.mspx Microsoft MOM yet. It's quite popular in Microsft shops. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, Andrew Sent: Monday, January 23, 2006 11:45 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT - Server Watching. WhatsUp someversionorother http://www.ipswitch.com Nagios (Open Source, with a *nix bent) http://www.nagios.org/ Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. Bennett Sent: Monday, January 23, 2006 11:25 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
Andrew, do you administer and support MOM? If so, please contact me off list. BTW, what server did DAD stand for? (It never made it off the design board, of if it did it never became a beta, only an alpha.) John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Monday, January 23, 2006 2:59 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT - Server Watching. I find that companies that will pay for Microsoft Exchange Server and Client licences (and other BackOffice products) wouldn't blink at the cost of MOM; and the pricing is staggered so that you can buy as much utility as you can realistically implement. What I find attractive is not the application management so much as the Event Log gathering and reporting. Weirdly enough, it's not the large shops that I've seen deploying MOM, but rather, it's the small to medium sized shops that don't have the in-house expertise and find MOM cheaper than outsourcing the high-end technologists. In particular, MOM provides the basic "root cause analysis" that junior technologists lack, e.g. so that MOM can tell the help desk that the webserver outage is really a DNS problem. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, January 23, 2006 2:46 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT - Server Watching. Maybe that's because it costs an arm and a leg: http://www.microsoft.com/mom/howtobuy/default.mspx This is really remote management software and not just simply monitoring and reporting. Probably makes sense in big enterprises but not for small businesses. Matt Colbeck, Andrew wrote: I'm quite surprised that nobody has named: http://www.microsoft.com/mom/default.mspx Microsoft MOM yet. It's quite popular in Microsft shops. Andrew 8) -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, AndrewSent: Monday, January 23, 2006 11:45 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT - Server Watching. WhatsUp someversionorother http://www.ipswitch.com Nagios (Open Source, with a *nix bent) http://www.nagios.org/ Andrew 8) -Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. BennettSent: Monday, January 23, 2006 11:25 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry ---[This E-mail was scanned for viruses by Declude EVA www.declude.com] ---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude EVA www.declude.com] ---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude EVA www.declude.com] ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
I find that companies that will pay for Microsoft Exchange Server and Client licences (and other BackOffice products) wouldn't blink at the cost of MOM; and the pricing is staggered so that you can buy as much utility as you can realistically implement. What I find attractive is not the application management so much as the Event Log gathering and reporting. Weirdly enough, it's not the large shops that I've seen deploying MOM, but rather, it's the small to medium sized shops that don't have the in-house expertise and find MOM cheaper than outsourcing the high-end technologists. In particular, MOM provides the basic "root cause analysis" that junior technologists lack, e.g. so that MOM can tell the help desk that the webserver outage is really a DNS problem. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Monday, January 23, 2006 2:46 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] OT - Server Watching. Maybe that's because it costs an arm and a leg: http://www.microsoft.com/mom/howtobuy/default.mspxThis is really remote management software and not just simply monitoring and reporting. Probably makes sense in big enterprises but not for small businesses.MattColbeck, Andrew wrote: I'm quite surprised that nobody has named: http://www.microsoft.com/mom/default.mspx Microsoft MOM yet. It's quite popular in Microsft shops. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, Andrew Sent: Monday, January 23, 2006 11:45 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT - Server Watching. WhatsUp someversionorother http://www.ipswitch.com Nagios (Open Source, with a *nix bent) http://www.nagios.org/ Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. Bennett Sent: Monday, January 23, 2006 11:25 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Server Watching.
Maybe that's because it costs an arm and a leg: http://www.microsoft.com/mom/howtobuy/default.mspx This is really remote management software and not just simply monitoring and reporting. Probably makes sense in big enterprises but not for small businesses. Matt Colbeck, Andrew wrote: I'm quite surprised that nobody has named: http://www.microsoft.com/mom/default.mspx Microsoft MOM yet. It's quite popular in Microsft shops. Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, Andrew Sent: Monday, January 23, 2006 11:45 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT - Server Watching. WhatsUp someversionorother http://www.ipswitch.com Nagios (Open Source, with a *nix bent) http://www.nagios.org/ Andrew 8) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. Bennett Sent: Monday, January 23, 2006 11:25 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Left over D*.SM$ files in proc\work
OK it finally happened. I got another leftover D*.SM$ file in the proc\work directory while I was running the logs on debug. Any thoughts? I think the following is the important part from various log files. I can post the whole thing if this is not enough. DECLUDE.LOG . . . 01/23/2006 17:14:34.497 q552537e400a4261c.smd Msg failed WEIGHT10 (Weight of 65 reaches or exceeds the limit of 10.). Action=""> 01/23/2006 17:14:34.497 q552537e400a4261c.smd Turning spam into an attachment 01/23/2006 17:14:34.513 q552537e400a4261c.smd Wrote 2025 bytes of attachment header 01/23/2006 17:14:34.513 q552537e400a4261c.smd Wrote 3142 (3142)bytes of attachment header 01/23/2006 17:14:34.513 q552537e400a4261c.smd Set process priority back to 38273056. 01/23/2006 17:14:34.513 q552537e400a4261c.smd Couldn't move/copy ATTACH data file [183] . . . 01/23/2006 17:14:34.935 q552537e400a4261c.smd MoveFile in AlterMessage - datafile = [D:\spool\proc\work\D552537e400a4261c.smd] TempFile = [D:\spool\proc\work\D552537e400a4261c.sm$] 01/23/2006 17:19:40.456 q552537e400a4261c.smd Couldn't rename SMD to SM$ [183]. Priority back to 32. Error String: [Cannot create a file when that file already exists.] [D:\spool\proc\work\D552537e400a4261c.smd] [D:\spool\proc\work\D552537e400a4261c.sm$] 01/23/2006 17:19:40.456 q552537e400a4261c.smd Data File [D:\spool\proc\work\D552537e400a4261c.smd] deleted. 01/23/2006 17:19:40.456 q552537e400a4261c.smd Recipient File [D:\spool\proc\work\q552537e400a4261c.smd] deleted. VIRUS.LOG . . . 01/23/2006 17:19:40.456 q552537e400a4261c.smd Couldn't rename SMD to SM$ [183]. Priority back to 32. Error String: [Cannot create a file when that file already exists.] [D:\spool\proc\work\D552537e400a4261c.smd] [D:\spool\proc\work\D552537e400a4261c.sm$] IMAIL.LOG 01:23 17:13 SMTPD(552537e400a4261c) [192.168.69.4] connect 85.182.54.161 port 1447 01:23 17:13 SMTPD(552537e400a4261c) [85.182.54.161] HELO e182054161.adsl.alicedsl.de 01:23 17:13 SMTPD(552537e400a4261c) [85.182.54.161] MAIL FROM: <[EMAIL PROTECTED]> 01:23 17:13 SMTPD(552537e400a4261c) [85.182.54.161] RCPT TO: <[EMAIL PROTECTED]> 01:23 17:14 SMTPD(552537e400a4261c) [85.182.54.161] RCPT TO: <[EMAIL PROTECTED]> 01:23 17:14 SMTPD(552537e400a4261c) [85.182.54.161] RCPT TO: <[EMAIL PROTECTED]> 01:23 17:14 SMTPD(552537e400a4261c) [85.182.54.161] RCPT TO: <[EMAIL PROTECTED]> 01:23 17:14 SMTPD(552537e400a4261c) [85.182.54.161] D:\spool\D552537e400a4261c.SMD 3142 Goran Jovanovic Omega Network Solutions From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Saturday, January 21, 2006 2:10 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Left over D*.SM$ files in proc\work How often is this happening? Are you using Hijack? Put both the Junkmail and Virus logs into Debug until a couple of these occur, then extract from the log files ALL lines pertaining to the files in question into one file in exact time sequence along with the log lines from Imail SMTP. John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Saturday, January 21, 2006 10:45 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Left over D*.SM$ files in proc\work Hi, I have noticed that I am getting left over D*.SM$ files in the proc\work directory. I am getting 2 to 4 of these per day on a volume of 15-20K messages a day. Windows Server 2003 IMail 8.15 HF2 Declude 3.0.5.23 Sniffer, invURUBL, F-Prot, McAfee No on access Virus Scanner When I check the logs I find In the DECLUDE Log 01/21/2006 06:56:32.233 q1ffa301900405c91.smd Couldn't move/copy ATTACH data file [183] 01/21/2006 07:01:37.778 q1ffa301900405c91.smd Couldn't rename SMD to SM$ [183]. Priority back to 32. Error String: [Cannot create a file when that file already exists.] [D:\spool\proc\work\D1ffa301900405c91.smd] [D:\spool\proc\work\D1ffa301900405c91.sm$] And in the Virus log 01/21/2006 07:01:37.778 q1ffa301900405c91.smd Couldn't rename SMD to SM$ [183]. Priority back to 32. Error String: [Cannot create a file when that file already exists.] [D:\spool\proc\work\D1ffa301900405c91.smd] [D:\spool\proc\work\D1ffa301900405c91.sm$] Other times I will only find this message in the DECLUDE.LOG file. 01/15/2006 19:21:39.160 qe70539e800a6f12a.smd Couldn't move/copy ATTACH data file [32] Anyone have any ideas about this? Thanks Goran Jovanovic Omega Network Solutions
RE: [Declude.JunkMail] OT - Server Watching.
I'm quite surprised that nobody has named: http://www.microsoft.com/mom/default.mspx Microsoft MOM yet. It's quite popular in Microsft shops. Andrew 8) > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Colbeck, Andrew > Sent: Monday, January 23, 2006 11:45 AM > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] OT - Server Watching. > > WhatsUp someversionorother http://www.ipswitch.com > > Nagios (Open Source, with a *nix bent) http://www.nagios.org/ > > Andrew 8) > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Jerod M. > > Bennett > > Sent: Monday, January 23, 2006 11:25 AM > > To: Declude.JunkMail@declude.com > > Subject: [Declude.JunkMail] OT - Server Watching. > > > > Hey, > > > > I know this is off topic, but I respect the knowledge and > opinions of > > the people on this list. > > > > What software / services do you guys use to watch your servers for > > up/down status? > > > > -Jerry > > > > --- > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > "unsubscribe Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
> What software / services do you guys use to watch your > servers for up/down status? HostMonitor http://www.ks-soft.net/hostmon.eng/index.htm cheap and reliable Markus --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Server Watching.
We use hostmonitor. Tons of different tests. Plus is very affordable. H. Jerod M. Bennett wrote: Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Server Watching.
Hi Jerod, I use jffnms http://www.jffnms.org/ Its open source [free] runs on all platforms and is very good. -Nick Jerod M. Bennett wrote: Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
IPMonitor is good. And if anyone is tired of any IPSwitch products (such as us) We've found this to be good and a good price. We were using IPSwitch "What's Up Gold" until IPSwitch started it's Imail pricing change. We've switched from their FTP Client and Server, Server Monitoring and soon we'll switch their Imail product. We've used a lot of IPSwitch products in the past years. And with IPSwitch's stance on "things"; they are not in our line-up any more. -Erik -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kaj Søndergaard Laursen Sent: Monday, January 23, 2006 9:06 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT - Server Watching. > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Erik > Sent: 23. januar 2006 20:41 > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] OT - Server Watching. > > We use (mostly): IPMonitor Another vote for ipMonitor, except it's another product. www.ipmonitor.com That's what we use. Regards, Kaj --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Erik > Sent: 23. januar 2006 20:41 > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] OT - Server Watching. > > We use (mostly): IPMonitor Another vote for ipMonitor, except it's another product. www.ipmonitor.com That's what we use. Regards, Kaj --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Server Watching.
IPCheck Server Monitor by Paessler (http://www.paessler.com/ipcheck). This does monitoring and alerting and has a nice Web interface for configuration and accessing data and showing graphs of user-defined time frames. You can do almost anything with it. Matt Jerod M. Bennett wrote: Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
WhatsUp someversionorother http://www.ipswitch.com Nagios (Open Source, with a *nix bent) http://www.nagios.org/ Andrew 8) > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Jerod M. Bennett > Sent: Monday, January 23, 2006 11:25 AM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] OT - Server Watching. > > Hey, > > I know this is off topic, but I respect the knowledge and > opinions of the people on this list. > > What software / services do you guys use to watch your > servers for up/down status? > > -Jerry > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
We use (mostly): IPMonitor We also use our own scripts to monitor ports (i.e., 80, 53, 110, 25, 587, etc). IPMonitor is customizable and effective. http://ipmonitor.tsarfin.com -Erik -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jerod M. Bennett Sent: Monday, January 23, 2006 8:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
Servers Alive http://www.woodstone.nu Troy D. Hilton Serveon, Inc. [EMAIL PROTECTED] 302-529-8640 > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Jerod M. Bennett > Sent: Monday, January 23, 2006 2:25 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] OT - Server Watching. > > Hey, > > I know this is off topic, but I respect the knowledge and opinions of the > people on this list. > > What software / services do you guys use to watch your servers for up/down > status? > > -Jerry > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
Although some may have strong opinions against this, but I use WhatsUp Professional. (Well, it is sitting there waiting for me to start using it.) John T eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Jerod M. Bennett > Sent: Monday, January 23, 2006 11:25 AM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] OT - Server Watching. > > Hey, > > I know this is off topic, but I respect the knowledge and opinions of the > people on this list. > > What software / services do you guys use to watch your servers for up/down > status? > > -Jerry > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
Whatsup gold by ipswitch Harry Vanderzand inTown Internet & Computer Services 519-741-1222 > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Jerod M. Bennett > Sent: Monday, January 23, 2006 2:25 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] OT - Server Watching. > > Hey, > > I know this is off topic, but I respect the knowledge and > opinions of the people on this list. > > What software / services do you guys use to watch your > servers for up/down status? > > -Jerry > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT - Server Watching.
We use IPSentry (www.ipsentry.com) Sincerely, Support Department Global Web SolutionsR, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jerod M. Bennett Sent: Monday, January 23, 2006 2:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT - Server Watching.
Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT - Server Watching.
I use Whats Up Gold. have a very old version, but it does what I need - cellphone mesages, pagers, etc. I have it checking every service once a minute. -d - Original Message - From: "Jerod M. Bennett" <[EMAIL PROTECTED]> To: Sent: Monday, January 23, 2006 2:25 PM Subject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter Syntax
Is the filter file method any better than that found in the manual. In $default$.junkmail add "WHITELISTFILE [location]\whitelist.txt" Then in the WHITELIST.TXT, put addresses, domains, etc. @mec.ms .sirsi.com [EMAIL PROTECTED] John C From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Monday, January 23, 2006 11:29 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Filter Syntax If you wanted to whitelist you could go: MAILFROM WHITELIST IS [EMAIL PROTECTED] MAILFROM WHITELIST ENDSWITH @domain.com If you wanted to just add negative weight. MAILFROM 0 IS [EMAIL PROTECTED] MAILFROM 0 ENDSWITH @domain.com The tofile: ALLRECIPS 0 CONTAINS [EMAIL PROTECTED] (You can use the IS, but the syntax is pretty harsh) Now that said. I wouldn't whitelist on the MAILFROM, that is too easily forged. It would be better to whitelist on a REVDNS or an REMOTEIP. REVDNS -30 ENDSWITH .domain.com REMOTEIP -30 IS 192.168.0.0 REMOTEIP -30 CIDR 192.168.0.0/24 - Original Message - From: Chris Martin To: declude.junkmail@declude.com Sent: Monday, January 23, 2006 10:57 AM Subject: [Declude.JunkMail] Filter Syntax I am setting up a filter to whitelist some domains. Currently, we have them directly in the global.cfg file but there is getting to be too many, so I am wanting to use a file to do the job and then assign a negative weight to it. I thought I had it but I can't seem to get the file to fire. We are using declude junkmail pro 3.0.5 In Declude I have: mywhitelist filter c:/location/mywhitelist.txt x -30 0 In the text file, I have: MAILFROM 0 IS [EMAIL PROTECTED] MAILFROM 0 IS @domain.com I would also like to set up a whitelist to text file: RECIP 0 IS [EMAIL PROTECTED] Any suggestions on how to make this work would be appreciated. Chris Martin
[Declude.JunkMail] Baracuda
My upstream provider just put in Baracuda for spam and my headers on one email are below...question is..can I use Declude to pick up on some of the results that Baracuda is posting to help filter more spamFor example HEADER CONTAINSSpam-Flag: YES or something like that...right now my upline provider is not filtering on basis of Baracuda for me.. Received: from sa-smtp2.apid.com.api-digital.com [63.238.52.118] by ethixs.com with ESMTP (SMTPD32-7.11) id AF3BA1550096; Mon, 23 Jan 2006 07:42:35 -0500X-ASG-Debug-ID: 1138021008-31384-191-0X-Barracuda-URL: http://63.238.52.118:8000/cgi-bin/mark.cgiReceived: from 70-56-70-97.tukw.qwest.net (70-56-70-97.tukw.qwest.net [70.56.70.97]) by sa-smtp2.apid.com.api-digital.com (Spam Firewall) with SMTP id 43C77508AB for <[EMAIL PROTECTED]>; Mon, 23 Jan 2006 06:56:50 -0600 (CST)Received: from ftd (unknown [192.168.0.187]) by 70-56-70-97.tukw.qwest.net (Postfix) with ESMTP id D7BF3BB3A80; Mon, 23 Jan 2006 02:52:21 -0800Date: Mon, 23 Jan 2006 02:48:37 -0800From: Hermann Wilcox <[EMAIL PROTECTED]>X-Mailer: The Bat! (v1.44) BusinessReply-To: Hermann Wilcox <[EMAIL PROTECTED]>X-Priority: 3 (Normal)Message-ID: <[EMAIL PROTECTED]>To: [EMAIL PROTECTED]X-ASG-Orig-Subj: Fwd: faxSubject: Fwd: faxMIME-Version: 1.0Content-Type: multipart/related; boundary="--0ZUE4OYT4B5V4WPO"X-Virus-Scanned: by Barracuda Spam Firewall at api-digital.comX-Barracuda-Spam-Score: 5.97X-Barracuda-Spam-Status: Yes, SCORE=5.97 using per-user scores of TAG_LEVEL=3.5 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=9.0 tests=FORGED_THEBAT_HTML, HELO_DYNAMIC_IPADDR2, HTML_IMAGE_ONLY_04, HTML_MIME_NO_HTML_TAG, HTML_SHORT_LENGTH, MIME_HTML_ONLYX-Barracuda-Spam-Report: Code version 3.02, rules version 3.0.7723 Rule breakdown below pts rule name description -- -- 1.21 HELO_DYNAMIC_IPADDR2 Relay HELO'd using suspicious hostname (IP addr 2) 0.71 HTML_SHORT_LENGTH BODY: HTML is extremely short 0.00 MIME_HTML_ONLY BODY: Message only has text/html MIME parts 2.88 HTML_IMAGE_ONLY_04 BODY: HTML: images with 0-400 bytes of words 0.10 HTML_MIME_NO_HTML_TAG HTML-only message, but there is no HTML tag 1.06 FORGED_THEBAT_HTML The Bat! can't send HTML message onlyX-Priority: 5 (Lowest)X-MSMail-Priority: LowImportance: LowX-Barracuda-Spam-Flag: YESX-Declude-Sender: [EMAIL PROTECTED] [70.56.70.97]X-Declude-Spoolname: Dcf3ba155009617c8.SMDX-Note: Total Spam Weight Of This Email Is 0.X-RCPT-TO: <[EMAIL PROTECTED]>Status: UX-UIDL: 372923745 Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet" - Original Message - From: Scott Fisher To: Declude.JunkMail@declude.com Sent: Monday, January 23, 2006 11:28 AM Subject: Re: [Declude.JunkMail] Filter Syntax If you wanted to whitelist you could go: MAILFROM WHITELIST IS [EMAIL PROTECTED] MAILFROM WHITELIST ENDSWITH @domain.com If you wanted to just add negative weight. MAILFROM 0 IS [EMAIL PROTECTED] MAILFROM 0 ENDSWITH @domain.com The tofile: ALLRECIPS 0 CONTAINS [EMAIL PROTECTED] (You can use the IS, but the syntax is pretty harsh) Now that said. I wouldn't whitelist on the MAILFROM, that is too easily forged. It would be better to whitelist on a REVDNS or an REMOTEIP. REVDNS -30 ENDSWITH .domain.com REMOTEIP -30 IS 192.168.0.0 REMOTEIP -30 CIDR 192.168.0.0/24 - Original Message - From: Chris Martin To: declude.junkmail@declude.com Sent: Monday, January 23, 2006 10:57 AM Subject: [Declude.JunkMail] Filter Syntax I am setting up a filter to whitelist some domains. Currently, we have them directly in the global.cfg file but there is getting to be too many, so I am wanting to use a file to do the job and then assign a negative weight to it. I thought I had it but I can't seem to get the file to fire. We are using declude junkmail pro 3.0.5 In Declude I have: mywhitelist filter c:/location/mywhitelist.txt x -30 0 In the text file, I have: MAILFROM 0 IS [EMAIL PROTECTED] MAILFROM 0 IS @domain.com I would also like to set up a whitelist to text file: RECIP 0 IS [EMAIL PROTECTED] Any suggestions on how to make this work would be appreciated. Chris Martin
Re: [Declude.JunkMail] Filter Syntax
If you wanted to whitelist you could go: MAILFROM WHITELIST IS [EMAIL PROTECTED] MAILFROM WHITELIST ENDSWITH @domain.com If you wanted to just add negative weight. MAILFROM 0 IS [EMAIL PROTECTED] MAILFROM 0 ENDSWITH @domain.com The tofile: ALLRECIPS 0 CONTAINS [EMAIL PROTECTED] (You can use the IS, but the syntax is pretty harsh) Now that said. I wouldn't whitelist on the MAILFROM, that is too easily forged. It would be better to whitelist on a REVDNS or an REMOTEIP. REVDNS -30 ENDSWITH .domain.com REMOTEIP -30 IS 192.168.0.0 REMOTEIP -30 CIDR 192.168.0.0/24 - Original Message - From: Chris Martin To: declude.junkmail@declude.com Sent: Monday, January 23, 2006 10:57 AM Subject: [Declude.JunkMail] Filter Syntax I am setting up a filter to whitelist some domains. Currently, we have them directly in the global.cfg file but there is getting to be too many, so I am wanting to use a file to do the job and then assign a negative weight to it. I thought I had it but I can't seem to get the file to fire. We are using declude junkmail pro 3.0.5 In Declude I have: mywhitelist filter c:/location/mywhitelist.txt x -30 0 In the text file, I have: MAILFROM 0 IS [EMAIL PROTECTED] MAILFROM 0 IS @domain.com I would also like to set up a whitelist to text file: RECIP 0 IS [EMAIL PROTECTED] Any suggestions on how to make this work would be appreciated. Chris Martin
[Declude.JunkMail] Filter Syntax
I am setting up a filter to whitelist some domains. Currently, we have them directly in the global.cfg file but there is getting to be too many, so I am wanting to use a file to do the job and then assign a negative weight to it. I thought I had it but I can't seem to get the file to fire. We are using declude junkmail pro 3.0.5 In Declude I have: mywhitelist filter c:/location/mywhitelist.txt x -30 0 In the text file, I have: MAILFROM 0 IS [EMAIL PROTECTED] MAILFROM 0 IS @domain.com I would also like to set up a whitelist to text file: RECIP 0 IS [EMAIL PROTECTED] Any suggestions on how to make this work would be appreciated. Chris Martin
AW: [Declude.JunkMail] Spool Directory Backed Up
hi, are those files backing up regular incomming mails or are they *.fwd and *.gse files? what happens when you put a mail (d*.smd and q*.smd) into spool "by hand" (something like a false positiv)? which version of imail do you use? regards m. guhl Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von A. ClausenGesendet: Samstag, 21. Januar 2006 00:18An: Declude.JunkMail@declude.comBetreff: Re: [Declude.JunkMail] Spool Directory Backed Up Panda Consulting S.A. Luis Alberto Arango wrote: Have you seen any of the files in the spool to see if there are real mails and not bouncing ones. Or perhaps to make sure your mailserver wasn't hikacked? Are those emails for or from your users? Make sure nobody is using your server to relay on and is sending large amounts of spam from there. That will explain why you have 37K messages in your spool what is you daily volumen of emails? Have you checked declude logs to see if they offer valuable information to determine what is going on. Do you run Imail or Smartermail? I'm running IMail. I haven't noticed anything unusual in the logs, and I'm running two Postfix boxes in front of the IMail server to ward off distributed dictionary attacks, and their config has not changed.-- A. Clausen
Re: [Declude.JunkMail] ipfile question
Just the last hop following IPBYPASS. Matt Scott Fisher wrote: Does the IPFILE test check just the last hop or all hops up to your HOPHIGH parameter? - Scott Fisher Director of IT Farm Progress Companies 191 S Gary Ave Carol Stream, IL 60188 630-462-2323 This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Although Farm Progress Companies has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.
[Declude.JunkMail] ipfile question
Does the IPFILE test check just the last hop or all hops up to your HOPHIGH parameter? -Scott FisherDirector of ITFarm Progress Companies191 S Gary AveCarol Stream, IL 60188630-462-2323 This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Although Farm Progress Companies has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments.
RE: [Declude.JunkMail] I seem to get alot of spam from the 'legit' lists.
Nick, I think that if you left this mail in, your users won't complain that it is spam. I have much the same opinion of these lists that Matt has; more explicitly, I have a counterweight (*not* a whitelist) that awards negative points to their score. I haven't seen spam from them yet, and all the mail that I do see is user-requested, with little self-inflicted spam, by which I mean extra advertising based mail that a user gets based on their agreement for the first list. I've noted that they tend to fall into the kind of RBL lists that have a hair-trigger and that generate the most false positives, e.g. BLARS, SORBS, PSBL, NOABUSE, NOPOSTMASTER and this is likely due to what Matt describes: listbuilder sends mail on behalf of others, who may not have the perfect double-opt-in requirements, or fail to adequately scrub unsubscribers or fail to remove based on delivery failures and bounces. Andrew 8) > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Matt > Sent: Sunday, January 22, 2006 8:17 PM > To: Declude.JunkMail@declude.com > Subject: Re: [Declude.JunkMail] I seem to get alot of spam > from the 'legit' lists. > > These are all Microsoft properties (I would imagine that you > know that already). Personally I have classified these in my > system so that filter associated with zombies spam are not > scored, and that in turn means that I need at least two hits > from things like SpamCop, Sniffer and SURBL in order to block > one of them (such providers can fail things like BADHEADERS, > SPAMHEADERS, GIBBERISH, etc., but those hits aren't > appropriate for this classification of E-mail). They do > create a good deal of spam though based on the type of > business that they are in since the lists are customer > supplied and there is no way that a company providing such > services can guarantee many thousands of small clients are > truly following best practices. I classify these just the > same as the likes of roving.com, icebox.com, etc. The only > services that I block by default are those that engage in > spamming of much larger lists for better known clients > instead of this do-it-yourself type stuff. > > Senderbase.org is a great place for researching this stuff, > and following the links to Google Groups (in the abuse > newsgroups) can show how extensive the abuse is. I don't > however think that any of these widely used small list > service providers are much worse than another one, and the > number of abuse complaints is probably commensurate with the > volume that they handle. > > Matt > > > > > Nick Hayer wrote: > > > Does anyone block them ? > > bcentral.com, bcentralhost.com, linkexchange.com, listbot.com, and > > listbuilder.com > > > > Thanks for your input - > > > > -Nick > > --- > > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > --- > [This E-mail was scanned for viruses by Declude EVA www.declude.com] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
