[Declude.JunkMail] Seeking IMail Expert and Consultant for Hire
Dear Declude List, I am seeking an IMail/Declude/Sniffer, etc. expert for consultation and hire via telephone, e-mail, and remote Terminal Server. Please contact me off list if interested in helping teach this old dog new tricks. Below is some info about our situation. With ongoing issues, bugs, and version changes (both IMail and Declude), we need help with not only decision making moving forward, but the best configurations for our clients filtering Spam and Virus. All our licenses and SAs are up-to-date, but we remain at IMail 8.22 and Declude 1.82. Our license renewal dates are forthcoming for IMail in December, and Declude next year. Product knowledge with great results of other technologies like MXGuard, invURIBl, ASSP, ClamAV, Log Analyzers, etc. is desired, as we are certainly would consider if better alternatives can be proven. I recently tried implementing MXGuard and invURIBL with limited success and reverted back to our original set-up, as it seemed to be catching more Spam. Not sure it was these products fault, but perhaps myself in the set-up? We have been using IMail/Declude since early version 4.0 days and with mostly acceptable filtering results until these last few years, and growing worse in recent months with .gif and stock spams. I currently need some concentrated help with set-up, upgrades, and guidance. While we are a small hosting and Coldfusion Dev firm (about 100 hosting clients since the early 90s), we also work with a lot of churches and the recent Spam getting through is not acceptable. Our current issues are not with performance/volume of e-mail as we only process about 30-40k messages in/out daily. We want to upgrade to our licensed latest version of IMail (and Declude), but any existing IMail and Web Mail issues would not be acceptable to our clients (i.e. slowness, miscalculated bytes, etc.) Our current set-up and tools are as follows: -Windows 2000 Advanced Server -IMail 8.22 / Declude 1.82 / Sniffer -SQL 7 Database (separate server and do not use IMail registry) -F-Prot -BlackIce (use for intrusion detection and tar-pitting dictionary attacks) -The old Spam Review to ID False Positives I hope some folks here are interested and no problem reimbursing for same. Again, please contact me off list if interested. Thanks. -Don Don Schreiner CompBiz, Inc. www.CompBiz.net 407-322-8654 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] CMDSPACE/SmarterMail
We just started using CMDSPACE and noticed the test does not appears to be working on SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14. I am not seeing any errors in the debug level logs files. A check of the release logs it appears support for CMDSPACE test in Smartermail was provided in 4.0.9. (Feb 2006) Anyone seeing the same thing? Here are my relevant entries without quotes: Global.cfg - CMDSPACE cmdspaceX X 8 0 $default$.junkmail - CMDSPACE WARN Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Error in envelope file
Greetings everyone. I have searched through the archives and only found one message that specifically stated this problem, in June when Declude support went lights out for a while. I know there was a lot of talk about NO ACTIONS TAKEN, but I don't recall seeing much said about the error in the envelope file. I'm seeing an increasing number of log entries like this: 11/09/2006 12:19:08.725 50796922 Error in envelope file: F:\SmarterMail\Spool\proc\work\50796922.hdr 11/09/2006 12:19:11.709 50796922 SORBS-WEB:40 BADHEADERS:60 DYNHELO:95 . Total weight = 195. 11/09/2006 12:19:11.709 50796922 Cumulative action(s) taken on this email = NO ACTIONS WERE TAKEN I have not researched to find out how long this has been happening; I just noticed it while looking into another matter this morning. In almost every case the message scores high enough to fail, but is delivered anyway. Nothing out of the ordinary happening otherwise; CPU usage normal, etc. Running SmarterMail 3.3.2369, Declude 4.2.3 and Sniffer on WinServ2003. I don't scan outgoing mail. I have not changed logging from MID to DEBUG yet in hopes someone has a simple answer. Thanks, Shayne --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Seeking IMail Expert and Consultant for Hire
Hi Don - Have you considered moving away from iMail? SmarterMail is a great value and it sounds like things are only going to continue to improve with SmarterMail 4.0, which is due early next year. Also, have you looked at Message Sniffer (www.armresearch.com)? It's about $450/yr, but worth every penny. - Jay Sudowski // Handy Networks LLC Director of Technical Operations Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003 Hosting Solutions Tel: 877-70 HANDY x882 | Fax: 888-300-2FAX www.handynetworks.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Schreiner Sent: Friday, November 10, 2006 6:37 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Seeking IMail Expert and Consultant for Hire Dear Declude List, I am seeking an IMail/Declude/Sniffer, etc. expert for consultation and hire via telephone, e-mail, and remote Terminal Server. Please contact me off list if interested in helping teach this old dog new tricks. Below is some info about our situation. With ongoing issues, bugs, and version changes (both IMail and Declude), we need help with not only decision making moving forward, but the best configurations for our clients filtering Spam and Virus'. All our licenses and SA's are up-to-date, but we remain at IMail 8.22 and Declude 1.82. Our license renewal dates are forthcoming for IMail in December, and Declude next year. Product knowledge with great results of other technologies like MXGuard, invURIBl, ASSP, ClamAV, Log Analyzers, etc. is desired, as we are certainly would consider if better alternatives can be proven. I recently tried implementing MXGuard and invURIBL with limited success and reverted back to our original set-up, as it seemed to be catching more Spam. Not sure it was these products fault, but perhaps myself in the set-up? We have been using IMail/Declude since early version 4.0 days and with mostly acceptable filtering results until these last few years, and growing worse in recent months with .gif and stock spams. I currently need some concentrated help with set-up, upgrades, and guidance. While we are a small hosting and Coldfusion Dev firm (about 100 hosting clients since the early 90's), we also work with a lot of churches and the recent Spam getting through is not acceptable. Our current issues are not with performance/volume of e-mail as we only process about 30-40k messages in/out daily. We want to upgrade to our licensed latest version of IMail (and Declude), but any existing IMail and Web Mail issues would not be acceptable to our clients (i.e. slowness, miscalculated bytes, etc.) Our current set-up and tools are as follows: -Windows 2000 Advanced Server -IMail 8.22 / Declude 1.82 / Sniffer -SQL 7 Database (separate server and do not use IMail registry) -F-Prot -BlackIce (use for intrusion detection and tar-pitting dictionary attacks) -The old Spam Review to ID False Positives I hope some folks here are interested and no problem reimbursing for same. Again, please contact me off list if interested. Thanks. -Don Don Schreiner CompBiz, Inc. www.CompBiz.net 407-322-8654 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Clam AV Updates
I have noticed for two days in a row that when freshclam runs it errors out and deletes the daily folder. After that I get constant synchronization errors. Does anyone have any ideas on how to fix this? Mark Reimer IT System Admin American CareSource 972-308-6887 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Friday, November 10, 2006 12:02 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Clam AV Updates We've been running Clam for Windows and getting a lot of time-outs and 'unable to delete - file in use . . .. The C:\Temp folder fills up with left over vir files. We also have synch problems for updates. We took it out of production today, since it was keeping dual xeon CPU's continuously at 100% and we didn't have time to drop everything to trouble-shoot it. Any input is appreciated. Thursday, November 9, 2006, 7:07:01 PM, Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] wrote: Dsic Dsic Dsic I tend to have clamav update issues. For some reason Dsic freshclam will start taking 100% cpu and just run on. This Dsic caused a few queue backups all caught early thanks to Dsic QueueMon. I changed the task to kill it after 5 minutes. When Dsic watching the server its not uncommon to see clam sync issues with the daily.inc folder. Dsic Dsic Dsic Dsic Darrell Dsic Dsic Dsic Check out http://www.invariantsystems.com for utilities for Dsic Declude And Imail. IMail/Declude Overflow Queue Monitoring, Dsic SURBL/URI integration, MRTG Integration, and Log Parsers. Dsic Dsic Dsic - Original Message - Dsic Dsic From: MarkReimer Dsic Dsic To: Declude JunkMail Dsic Dsic Sent: Thursday, November 09, 2006 5:52PM Dsic Dsic Subject: [Declude.JunkMail] Clam AVUpdates Dsic Dsic Dsic Dsic Today I noticed that my daily.incfolder was gone and when I Dsic ran freshclam it gave me a mirror is notsynchronized error. Anyone else see this? Dsic Dsic Dsic Dsic MarkReimer Dsic Dsic IT System Admin Dsic Dsic American CareSource Dsic Dsic 972-308-6887 Dsic Dsic Dsic --- Dsic ThisE-mail came from the Declude.JunkMail mailing list. To Dsic unsubscribe, justsend an E-mail to [EMAIL PROTECTED], and Dsic typeunsubscribe Declude.JunkMail. The archives can be found Dsic athttp://www.mail-archive.com. Dsic Dsic --- Dsic This E-mail came from the Declude.JunkMail mailing list. To Dsic unsubscribe, just send an E-mail to [EMAIL PROTECTED], and Dsic type unsubscribe Declude.JunkMail. The archives can be found Dsic at http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
re: [Declude.JunkMail] CMDSPACE/SmarterMail
I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and have had CMDSPACE configured for quite a while, but hadn't thought anything about it. When I saw your message I ran DLanalyzer on my logs for the past two weeks and saw that there were no hits for CMDSPACE at all. So it seems I am experiencing the same problem. Gary Original Message From: Michael Jaworski [EMAIL PROTECTED] Sent: Friday, November 10, 2006 10:45 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] CMDSPACE/SmarterMail We just started using CMDSPACE and noticed the test does not appears to be working on SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14. I am not seeing any errors in the debug level logs files. A check of the release logs it appears support for CMDSPACE test in Smartermail was provided in 4.0.9. (Feb 2006) Anyone seeing the same thing? Here are my relevant entries without quotes: Global.cfg - CMDSPACEcmdspaceX X 8 0 $default$.junkmail - CMDSPACEWARN Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CMDSPACE/SmarterMail
I see that too, I will look into this. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Friday, November 10, 2006 2:27 PM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] CMDSPACE/SmarterMail I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and have had CMDSPACE configured for quite a while, but hadn't thought anything about it. When I saw your message I ran DLanalyzer on my logs for the past two weeks and saw that there were no hits for CMDSPACE at all. So it seems I am experiencing the same problem. Gary Original Message From: Michael Jaworski [EMAIL PROTECTED] Sent: Friday, November 10, 2006 10:45 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] CMDSPACE/SmarterMail We just started using CMDSPACE and noticed the test does not appears to be working on SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14. I am not seeing any errors in the debug level logs files. A check of the release logs it appears support for CMDSPACE test in Smartermail was provided in 4.0.9. (Feb 2006) Anyone seeing the same thing? Here are my relevant entries without quotes: Global.cfg - CMDSPACEcmdspaceX X 8 0 $default$.junkmail - CMDSPACEWARN Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CMDSPACE/SmarterMail
Thanks Gary! It is a Declude holiday. We might hear something from them Monday. M -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Friday, November 10, 2006 11:27 AM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] CMDSPACE/SmarterMail I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and have had CMDSPACE configured for quite a while, but hadn't thought anything about it. When I saw your message I ran DLanalyzer on my logs for the past two weeks and saw that there were no hits for CMDSPACE at all. So it seems I am experiencing the same problem. Gary Original Message From: Michael Jaworski [EMAIL PROTECTED] Sent: Friday, November 10, 2006 10:45 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] CMDSPACE/SmarterMail We just started using CMDSPACE and noticed the test does not appears to be working on SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14. I am not seeing any errors in the debug level logs files. A check of the release logs it appears support for CMDSPACE test in Smartermail was provided in 4.0.9. (Feb 2006) Anyone seeing the same thing? Here are my relevant entries without quotes: Global.cfg - CMDSPACEcmdspaceX X 8 0 $default$.junkmail - CMDSPACEWARN Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CMDSPACE/SmarterMail
Thanks, David. It's little things like this short acknowledging message that can go miles towards making your customers feel better about Declude's support. Gary Original Message From: David Barker [EMAIL PROTECTED] Sent: Friday, November 10, 2006 3:10 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail I see that too, I will look into this. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Friday, November 10, 2006 2:27 PM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] CMDSPACE/SmarterMail I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and have had CMDSPACE configured for quite a while, but hadn't thought anything about it. When I saw your message I ran DLanalyzer on my logs for the past two weeks and saw that there were no hits for CMDSPACE at all. So it seems I am experiencing the same problem. Gary Original Message From: Michael Jaworski [EMAIL PROTECTED] Sent: Friday, November 10, 2006 10:45 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] CMDSPACE/SmarterMail We just started using CMDSPACE and noticed the test does not appears to be working on SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14. I am not seeing any errors in the debug level logs files. A check of the release logs it appears support for CMDSPACE test in Smartermail was provided in 4.0.9. (Feb 2006) Anyone seeing the same thing? Here are my relevant entries without quotes: Global.cfg - CMDSPACE cmdspaceX X 8 0 $default$.junkmail - CMDSPACE WARN Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CMDSPACE/SmarterMail
My understanding from quite a while ago is that SmarterMail did not pass the CMDSPACE info on to Declude (somehow). So the test is irrelevant in SmarterMail. Maybe this has been corrected in some newer version of SmarterMail?? Goran Jovanovic Omega Network Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Friday, November 10, 2006 3:40 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail Thanks, David. It's little things like this short acknowledging message that can go miles towards making your customers feel better about Declude's support. Gary Original Message From: David Barker [EMAIL PROTECTED] Sent: Friday, November 10, 2006 3:10 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail I see that too, I will look into this. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Friday, November 10, 2006 2:27 PM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] CMDSPACE/SmarterMail I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and have had CMDSPACE configured for quite a while, but hadn't thought anything about it. When I saw your message I ran DLanalyzer on my logs for the past two weeks and saw that there were no hits for CMDSPACE at all. So it seems I am experiencing the same problem. Gary Original Message From: Michael Jaworski [EMAIL PROTECTED] Sent: Friday, November 10, 2006 10:45 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] CMDSPACE/SmarterMail We just started using CMDSPACE and noticed the test does not appears to be working on SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14. I am not seeing any errors in the debug level logs files. A check of the release logs it appears support for CMDSPACE test in Smartermail was provided in 4.0.9. (Feb 2006) Anyone seeing the same thing? Here are my relevant entries without quotes: Global.cfg - CMDSPACE cmdspaceX X 8 0 $default$.junkmail - CMDSPACE WARN Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] AUTOREVIEW OFF
I have this in the declude.cfg file but I am still getting files in the review directory. I find this feature really annoying. Is this the correct command: AUTOREVIEWOFF Is this suppose to be in the declude.cfg file or global.cfg? It seems like a larger amount of those files are legit email. Thanks... --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] AUTOREVIEW OFF
I believe it goes in the declude.cfg and any changes to the file require a restart of the Decludeproc service. John T eServices For You Life is a succession of lessons which must be lived to be understood. Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Heimir Eidskrem Sent: Friday, November 10, 2006 4:33 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] AUTOREVIEW OFF I have this in the declude.cfg file but I am still getting files in the review directory. I find this feature really annoying. Is this the correct command: AUTOREVIEWOFF Is this suppose to be in the declude.cfg file or global.cfg? It seems like a larger amount of those files are legit email. Thanks... --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Seeking IMail Expert and Consultant for Hire
Hi Jay and thanks for reply. Yes we seriously considered SmarterMail, but need IMail ODBC due to a Coldfusion application we wrote and requires database backend. Rewriting all the code over to XML that SmarterMail uses, proved too resource intensive and costly. Yes we agree about message Sniffer and have been using for years and continue to do so. I believe it is the one thing that has allowed us to hang in there this long. I received some good replies from folks off list and going to help us out. Thanks. -Don -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay Sudowski - Handy Networks LLC Sent: Friday, November 10, 2006 1:26 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Seeking IMail Expert and Consultant for Hire Hi Don - Have you considered moving away from iMail? SmarterMail is a great value and it sounds like things are only going to continue to improve with SmarterMail 4.0, which is due early next year. Also, have you looked at Message Sniffer (www.armresearch.com)? It's about $450/yr, but worth every penny. - Jay Sudowski // Handy Networks LLC Director of Technical Operations Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003 Hosting Solutions Tel: 877-70 HANDY x882 | Fax: 888-300-2FAX www.handynetworks.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Schreiner Sent: Friday, November 10, 2006 6:37 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Seeking IMail Expert and Consultant for Hire Dear Declude List, I am seeking an IMail/Declude/Sniffer, etc. expert for consultation and hire via telephone, e-mail, and remote Terminal Server. Please contact me off list if interested in helping teach this old dog new tricks. Below is some info about our situation. With ongoing issues, bugs, and version changes (both IMail and Declude), we need help with not only decision making moving forward, but the best configurations for our clients filtering Spam and Virus'. All our licenses and SA's are up-to-date, but we remain at IMail 8.22 and Declude 1.82. Our license renewal dates are forthcoming for IMail in December, and Declude next year. Product knowledge with great results of other technologies like MXGuard, invURIBl, ASSP, ClamAV, Log Analyzers, etc. is desired, as we are certainly would consider if better alternatives can be proven. I recently tried implementing MXGuard and invURIBL with limited success and reverted back to our original set-up, as it seemed to be catching more Spam. Not sure it was these products fault, but perhaps myself in the set-up? We have been using IMail/Declude since early version 4.0 days and with mostly acceptable filtering results until these last few years, and growing worse in recent months with .gif and stock spams. I currently need some concentrated help with set-up, upgrades, and guidance. While we are a small hosting and Coldfusion Dev firm (about 100 hosting clients since the early 90's), we also work with a lot of churches and the recent Spam getting through is not acceptable. Our current issues are not with performance/volume of e-mail as we only process about 30-40k messages in/out daily. We want to upgrade to our licensed latest version of IMail (and Declude), but any existing IMail and Web Mail issues would not be acceptable to our clients (i.e. slowness, miscalculated bytes, etc.) Our current set-up and tools are as follows: -Windows 2000 Advanced Server -IMail 8.22 / Declude 1.82 / Sniffer -SQL 7 Database (separate server and do not use IMail registry) -F-Prot -BlackIce (use for intrusion detection and tar-pitting dictionary attacks) -The old Spam Review to ID False Positives I hope some folks here are interested and no problem reimbursing for same. Again, please contact me off list if interested. Thanks. -Don Don Schreiner CompBiz, Inc. www.CompBiz.net 407-322-8654 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- CompBiz.Net scanned for Virus' --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] AUTOREVIEW OFF
Bad idea here. This functionality was designed to keep a 'killer message' from continually crashing decludeproc.exe. Declude will move all actively processed messages into a Review folder upon shutdown or crash so that if there was a killer message, it wouldn't cause repeated issues. I have definitely run into this problem multiple times, and while the issue I experienced is apparently fixed in more recent versions, there are certainly others waiting. On the flip side, moving all such messages to Review creates a situation where one must constantly monitor it and that is far from optimal. Here's my work around. I created a script that I run on a schedule of once every 30 minutes that moves everything from Review to Proc. This way, if there is a killer message, it will only crash Declude once every 30 minutes instead of constantly in the event of AUTOREVIEW ON. I have found this to work, however one must still watch their server as having Declude crash 40 times over the space of two days can cause a general system instability, but Declude crashes on a particular message are generally not repeatable on the same message. So leave AUTOREVIEW OFF and then create a CMD file with the following command and schedule it to run once every 30 minutes, and you won't have to worry about monitoring that folder constantly, though if you continually find files in there, one of them is likely to be a killer message (which will be names in your C:\DECLUDE.GP1 file). Obviously you should customize the paths for your system. MOVE /Y F:\proc\review\*.* F:\proc With a little more work, one could write a script that checked for the file name in the C:\DECLUDE.GP1 file and if the same name is found twice in a row, that file could be removed from Review before throwing the contents back into Proc. This is in fact how Declude should approach this problem rather than just a blind copying of files into Proc, or blind moving of files into Review. Matt Heimir Eidskrem wrote: I have this in the declude.cfg file but I am still getting files in the review directory. I find this feature really annoying. Is this the correct command: AUTOREVIEWOFF Is this suppose to be in the declude.cfg file or global.cfg? It seems like a larger amount of those files are legit email. Thanks... --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] AUTOREVIEW OFF
I appreciate your suggestion and will implement it but I find it pretty amazing that decludes error handling is crashing the program and moving a message. Decludeproc.exe crashes constantly on our server. Matt wrote: Bad idea here. This functionality was designed to keep a 'killer message' from continually crashing decludeproc.exe. Declude will move all actively processed messages into a Review folder upon shutdown or crash so that if there was a killer message, it wouldn't cause repeated issues. I have definitely run into this problem multiple times, and while the issue I experienced is apparently fixed in more recent versions, there are certainly others waiting. On the flip side, moving all such messages to Review creates a situation where one must constantly monitor it and that is far from optimal. Here's my work around. I created a script that I run on a schedule of once every 30 minutes that moves everything from Review to Proc. This way, if there is a killer message, it will only crash Declude once every 30 minutes instead of constantly in the event of AUTOREVIEW ON. I have found this to work, however one must still watch their server as having Declude crash 40 times over the space of two days can cause a general system instability, but Declude crashes on a particular message are generally not repeatable on the same message. So leave AUTOREVIEW OFF and then create a CMD file with the following command and schedule it to run once every 30 minutes, and you won't have to worry about monitoring that folder constantly, though if you continually find files in there, one of them is likely to be a killer message (which will be names in your C:\DECLUDE.GP1 file). Obviously you should customize the paths for your system. MOVE /Y F:\proc\review\*.* F:\proc With a little more work, one could write a script that checked for the file name in the C:\DECLUDE.GP1 file and if the same name is found twice in a row, that file could be removed from Review before throwing the contents back into Proc. This is in fact how Declude should approach this problem rather than just a blind copying of files into Proc, or blind moving of files into Review. Matt Heimir Eidskrem wrote: I have this in the declude.cfg file but I am still getting files in the review directory. I find this feature really annoying. Is this the correct command: AUTOREVIEWOFF Is this suppose to be in the declude.cfg file or global.cfg? It seems like a larger amount of those files are legit email. Thanks... --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] AUTOREVIEW OFF
The default is AUTOREVIEW OFF which just moves the in-process messages to Review in order to protect decludeproc from crashing. After people started seeing their Review folder fill up with messages Declude created the AUTOREVIEW ON function to move the messages back. Unfortunately both of these are not full solutions to the problems since each issue creates the other one. It is very important to have this functionality in some sense because of the ever present danger of a killer message. IMail for instance has had issues with killer messages, the last one was patched in 8.2, and it would have caused Queue Manager to crash repeatedly until the problematic message was removed. While I would imagine that Declude tries to fix killer message issues as they come up, there is always the possibility of an unexpected condition causing a leak or crash, so this functionality is vital. This is true of any program that acts on a spool in this way. My only recommendation is that if Declude can log a GPF that identifies the message that was being processed when it crashed, it would make sense to only move a message to Review if it caused two successive crashes. This would protect from copying non-problematic messages to Review, and it would also protect decludeproc from continual crashes. Regarding your own instability issues, having a pre-scanning gateway is good for not only blocking spam, but also for blocking potential killer messages. Alligate for instance kills almost all zombie spam, and it is the unexpected message formating that causes virtually all killer message issues, and this is not common in static spam or legitimate E-mail. Those behind such a gateway will have many fewer crashing issues. The same goes for IMail where if you are deleting or holding messages with Declude, they will not be handled by Queue Manager which then protects Queue Manager from crashing. Well protected servers are also more stable. Matt Heimir Eidskrem wrote: I appreciate your suggestion and will implement it but I find it pretty amazing that decludes error handling is crashing the program and moving a message. Decludeproc.exe crashes constantly on our server. Matt wrote: Bad idea here. This functionality was designed to keep a 'killer message' from continually crashing decludeproc.exe. Declude will move all actively processed messages into a Review folder upon shutdown or crash so that if there was a killer message, it wouldn't cause repeated issues. I have definitely run into this problem multiple times, and while the issue I experienced is apparently fixed in more recent versions, there are certainly others waiting. On the flip side, moving all such messages to Review creates a situation where one must constantly monitor it and that is far from optimal. Here's my work around. I created a script that I run on a schedule of once every 30 minutes that moves everything from Review to Proc. This way, if there is a killer message, it will only crash Declude once every 30 minutes instead of constantly in the event of AUTOREVIEW ON. I have found this to work, however one must still watch their server as having Declude crash 40 times over the space of two days can cause a general system instability, but Declude crashes on a particular message are generally not repeatable on the same message. So leave AUTOREVIEW OFF and then create a CMD file with the following command and schedule it to run once every 30 minutes, and you won't have to worry about monitoring that folder constantly, though if you continually find files in there, one of them is likely to be a killer message (which will be names in your C:\DECLUDE.GP1 file). Obviously you should customize the paths for your system. MOVE /Y F:\proc\review\*.* F:\proc With a little more work, one could write a script that checked for the file name in the C:\DECLUDE.GP1 file and if the same name is found twice in a row, that file could be removed from Review before throwing the contents back into Proc. This is in fact how Declude should approach this problem rather than just a blind copying of files into Proc, or blind moving of files into Review. Matt Heimir Eidskrem wrote: I have this in the declude.cfg file but I am still getting files in the review directory. I find this feature really annoying. Is this the correct command: AUTOREVIEWOFF Is this suppose to be in the declude.cfg file or global.cfg? It seems like a larger amount of those files are legit email. Thanks... --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives
