RE: [Declude.JunkMail] Declude Hijack

2010-01-13 Thread David Barker
Hijack is the solution to your problem. As we count the number of emails from a specific IP or address with the latest release. When the hold2 threshold is reached these messages are quarantined, regardless of whether they are whitelisted or authenticated. We will be updating the Hijack manual

Re: [Declude.JunkMail] Declude Hijack

2010-01-13 Thread Mon Mariola - Rubén
How do I unblock an IP that is banned for exceeding the 2nd threshold? Thank you. Ruben Marti. - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Wednesday, January 13, 2010 3:27 PM Subject: RE: [Declude.JunkMail] Declude Hijack Hijack is the

RE: [Declude.JunkMail] Declude Hijack

2010-01-13 Thread David Barker
You cannot unblock a single IP. Restarting the decludeproc will reset the counter. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax mailto:dbar...@declude.com dbar...@declude.com From: supp...@declude.com

Re: [Declude.JunkMail] Declude Hijack

2010-01-13 Thread Mon Mariola - Rubén
Sorry, another question: Is there any problem with incoming and outgoing emails if I restart decludeproc? What problems can I find if I restart decludeproc? I worry about this. Thank you. Ruben Marti. - Original Message - From: David Barker To: declude.junkmail@declude.com

[Declude.JunkMail] PowerMTA

2010-01-13 Thread Dave Beckstrom
I'm seeing a lot of spam with this in the headers: PowerMTA(TM) v3.0c2 Is powerMTA mainly a spam tool or do legitimate mailers use it too? Just trying to decide if I can add some weight if that header exists. Also of late I'm seeing a lot of spam containing ssl in part of the domain name:

Re: [Declude.JunkMail] PowerMTA

2010-01-13 Thread Matt
Dave, A lot of the largest static spammer organizations use this software, but unfortunately a good number of fully legitimate companies use it also. PowerMTA also allows for full customization of the header formating and many spammers edit this to be nondescript as well. I would guess that