I need a good example of a $Default$JunkMail file. Want to see if I have a
good setup. I put a hold on the IPNOTINMX and created a big problem (held
alot of legitimate mail). I would like to see some samples of how others
have setup their $Default$JunkMail and Global.cfg files.
It seems like
What is the best way to block mail failing the EASYNET-DNSBL and IPNOTINMX
tests? I put a hold on IPNOTINMX and that held legitimate mail. I see alot
of mail failing these two tests and need to block it without hindering
legitimate mail.
Any suggestions would be greatly appreicated.
Samantha
I know I saw a bunch of strings last week regarding AOL so I hate to ask
again but here it goes.
I have users who were able to send to AOL accounts until recently. What
needs to be done on either my end or the AOL end to send mail to them?
Thanks for any insight to this.
Samantha
---
[This
I run an Exchange 5.5 server that IMail forward to. The Exchange server
allows you to put in a Reply Address. My Exchange server is macombisd.org
and the IMail server is misd.net.
Sorry for the confusion.
Samantha
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent:
According to you guys its not the mail server it is the Firewallright?
What needs to be changed on the Firewall and why is the current setup so
bad?
Thanks
Samantha
-Original Message-
From: Patrick Childers [mailto:[EMAIL PROTECTED]
Sent: Thursday, June 26, 2003 11:48 AM
To:
Hello.
I get a ton of spam that is marked with the IPNOTINMX. What is the best way
to block this? When I put a HOLD on IPNOTINMX it caught legitimate mail
too...most is spam though.
Does anyone block IPNOTINMX and how are you doing it?
Thanks
Samantha
---
[This E-mail was scanned for
Cannot receive messages from @Comcast.net accounts. When I send to another server not
running JunkMail the headers are as follows:
Microsoft Mail Internet Headers Version 2.0
Received: from rwcrmhc12.comcast.net ([216.148.227.85]) by xmail1.macombisd.org with
Microsoft SMTPSVC(5.0.2195.6713);
Just Testing...
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at
Sorry for the confusion. I just received this message. Is the Web slow or is it me
or is it Declude. Anyone noticing anything strange? I still cannot receive from
Comcast.net accounts though.
Thanks
Samantha
-Original Message-
From: Bridges, Samantha
Sent: Tuesday, August 26
Cannot receive messages from @Comcast.net accounts. When I send to another server not
running JunkMail the headers are as follows:
Microsoft Mail Internet Headers Version 2.0
Received: from rwcrmhc12.comcast.net ([216.148.227.85]) by xmail1.macombisd.org with
Microsoft SMTPSVC(5.0.2195.6713);
messages? I've received 4 at this list and 3 or 4 on the
declude Virus list
Greg
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Bridges,
Samantha
Sent: Tuesday, August 26, 2003 10:38 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Cannot receive
I looked at the SMTP logs. Looks like IMail is receiving the mail fine. Here are the
SMTP log:
08:26 12:05 SMTPD(005A0190) [64.88.0.98] connect 204.127.198.39 port 49643
08:26 12:05 SMTPD(005A0190) [204.127.198.39] EHLO rwcrmhc13.comcast.net
08:26 12:05 SMTPD(005A0190) [204.127.198.39] MAIL
Cannot receive messages from @Comcast.net accounts. When I send to another server not
running JunkMail the headers are as follows:
Microsoft Mail Internet Headers Version 2.0
Received: from rwcrmhc12.comcast.net ([216.148.227.85]) by xmail1.macombisd.org with
Microsoft SMTPSVC(5.0.2195.6713);
I have been seeing more and more Junk Mail in the past few weeks.
Here are headers from a junk message I am getting. I am afraid to block
anything individually and I don't feel comfortable using the weighting.
Declude Junk Mail runs great right out of the box, however I know I am
going to have
Of Bridges,
Samantha
Sent: Tuesday, September 16, 2003 8:48 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] How do I block this...what is best way?
I have been seeing more and more Junk Mail in the past few weeks.
Here are headers from a junk message I am getting. I am afraid to block
anything
Hello All.
Thanks for help in creating a kill list. The below is a spam message
being received. I noticed in these headers that is says:
X-RBL-Warning: EASYNET-DNSBL: Blacklisted by easynet.nl DNSBL -
http://blackholes.easynet.nl/errors.html
X-RBL-Warning: SBL:
Hello.
First of all, I am noticing an increase in the amount of spam getting
through. I blocked weight 10 yesterday but am still receiving spam.
Doesn't seem like blocking weight 10 did much. Here are headers from
one of the many spam messages. How do I go about blocking this? I seem
to be
Hello All.
Below is are the Headers from a message that was Held by declude.
This comes from an in-house system that generates email message
confirmations for job applicants. The system runs on a Web server that
generates the message and sends the message. The job applicant system
uses an
Hi Scott.
I am not blocking any of those...that is what is sooo strange.
Here is my .cfg file to prove. So if not holding, then why did it
block?
Thanks.
Sam
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 25, 2003 2:32 PM
To: [EMAIL
I am blocking weight 10. I think that is what did it.
Thanks for your help.
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Thursday, September 25, 2003 2:46 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Header Questions - Job Applicant System
Good morning all.
I blocked weight 10 and found it blocking too many legitimate mail. I
went back to Warn for weight 10 and starting getting more spam. Below
is the headers from a spam message that is failing the weight 10 test.
It is spam and I want to find another way to block mail like this.
Hello
Any ideas how to block the spam message from MS Customer Assistance? I
keep getting it and want to stop it! Aarrrgghhh.
Also, I have noticed an increase in the amount of spam getting through.
In particular, more and more sporno (porn). Is this because of the spam
domains being attacked
: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Bridges, Samantha
Sent: Wednesday, October 08, 2003 12:15 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] MS Customer Assistance SPAM
Hello
Any ideas how to block the spam message from MS Customer Assistance
been some posts here and on the Virus list of filters to use
to trap these.
John Tolmachoff MCSE CSSA
Engineer/Consultant
eServices For You
www.eservicesforyou.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Bridges, Samantha
]
[mailto:[EMAIL PROTECTED] On Behalf Of Bridges,
Samantha
Sent: Thursday, October 09, 2003 8:28 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] MS Customer Assistance SPAM
I know it is not coming from Microsoft. I know it is a virus. What I
don't understand is why Declude is not catching
Here are the headers from a spam message I received...and by the way it
looks like it came from ME! I went to DNSstuff.com and looked up the IP
which was 199.8.47.99 or 99.47.8.199. It seems to be coming from
Manchester College...probably a little group of spammers I'm guessing.
Now that I am
Hello All.
Most of the spam that I get is coming from Netherlands, Germany, France,
Italy and so on and so on.
Is there anyway to block these based on the country?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the
Where can I find the version of the declude products? I want to be sure
I am at the current versions.
Thanks
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to
How can I tell what version I am running now?
Thanks
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Monday, December 22, 2003 2:04 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude JunkMail and Declude Virus
Versions?
Where can I find the
samples your welcome to the older ones I have posted on
www.famhost.com/support/files.zip
should give you ideas on them + the IPSwitch knowledge base is good too.
~Rick
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bridges,
Samantha
Sent: Monday, January
Recently, I read an article about spyware. Does Declude or Imail
address this issue with their product(s)? A quote from an article
states: Network Associates will become the latest security software
maker to address the growing problem of stealth surveillance software
known as spyware.
How do
Title: Message
Hello.
Has anyone heard about the
fraudulent email claiming to be from the FDIC?
Below is a snippet from the
FBI on this new threat. Has anyone seen this before or recently?
What actions did you take as messaging administrators to rectify
this?
Upon
investigation I have
Pong...
-Original Message-
From: Kevin Bilbee [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 29, 2004 5:14 PM
To: JunkMail Declude
Subject: [Declude.JunkMail] test
I have not seen a message from the list since 1:33am PST. I just checked
my logs ( Imail/declude/Gateways ) to verify.
Hello.
Seems that mail from delphi.com is not being delivered. I Whitelisted
@delphi.com and received the message fine. Therefore, I assume that
Declude is blocking it. I looked the address up on www.dnsstuff.com and
saw that it was listed under 3 spam databases.
CSMA
CSMA-SBL
INTRUDERS
I
If I whitelisted it, will the logs still show which tests it failed?
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Monday, February 02, 2004 2:38 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] False spam - spam database
Seems that mail from
Hi Scott or anyone. Here is the entries from the log file. I was not
receiving messages from @delphi.com addresses until I whitelisted them.
How can I tell which tests it failed?
Thanks
Samantha
0248ca28 WARNING: Unknown filter type @titty-mail.com.
02/02/2004 14:36:43 Qa6be0c180248ca28
Is that my global.cfg file or the Declude$Junk$ file?
How do I correct it? Should I get a new global.cfg file?
Thanks Scott
Samantha
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 03, 2004 3:50 PM
To: [EMAIL PROTECTED]
Subject: RE:
How do I know if I have the current version of the Global.cfg file? How
can I tell if I need to update/upgrade my Declude software..both
JunkMail and Virus?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail
Hi Scott.
Can I take the Global.cfg from the Declude websiteput my code
in...make any changes to log file locations .copy it to the
\\..\imail\declude directory?
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Tuesday, February 17, 2004 12:18 PM
To:
Acting as a gateway for domains on other servers
I know this works for Declude virus but will this work for filter spam
too? I would suspect that it does but I didn't see it in the
documentation.
I host email for 11 of 21 school districts. The remaining 11 host their
own email servers and I
.
Let me know if I can give aid.
Keith
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bridges,
Samantha
Sent: Thursday, February 19, 2004 2:46 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Acting as a gateway for domains on other
servers
Acting
Hello.
I am setting up a blacklist for outgoing mail. I created a file named
blacklist.txt. In the Global.cfg file I put an entry in the Outgoing
Mail section to: blacklist HOLD and blacklist fromfile
c:\imail\declude\blacklist.txt x 5 0
When I send a message from the account that is
Thanks for the help. That worked.
When I change the action to REROUTE or MAILBOX, it doesn't reroute to a
mailbox. When I se the action to WARN, I can see the warning in the
headers.
Do only some actions work with outgoing email?
-Original Message-
From: R. Scott Perry
Sorry ScottI meant ROUTETOI typed what I was thinking I wanted
it to do rather than the actual command. I did put a ROUTETO as the
action. With blacklist as the test name, the actual entry was this:
Blacklist ROUTETO [EMAIL PROTECTED]
So what actions work on the outgoing email? I want
Here is my log entry from SMTP.
03:03 11:32 SMTPD(01F6030E) [64.88.83.251] HELO xmail1.macombisd.org
03:03 11:32 SMTPD(01F6030E) [64.88.83.251] MAIL FROM:[EMAIL PROTECTED]
03:03 11:32 SMTPD(01F6030E) [64.88.83.251] RCPT TO:[EMAIL PROTECTED]
03:03 11:32 SMTPD(01F6030E) [64.88.83.251]
Hello All.
What is the best way to find lost/missing messages.
1. How do I find missing messages that were most likely caught by
declude.
2. How do I find missing messages that passed declude but didn't pass
Imail?
Which logs do I start with? I need to find a message that came in and I
am
Hello
I am having a problem receiving email from a certain school district.
However, when I whitelist them the mail comes through just fine. I know
that they are being filtered by Declude. When you whitelist a domain,
the Declude headers for failed tests do not show.
Is there a way to
Good morning -
Below is a line from my declude log file. I was able to get the message
ID from my syslog and then went to my declude log file and found this.
Could someone explain to me why this was caught? I don't hold for
weight=0. The other tests are IGNORE so they should not have
Great idea!
-Original Message-
From: Joe Wolf [mailto:[EMAIL PROTECTED]
Sent: Tuesday, March 23, 2004 9:51 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Strange MONKEYFORMMAIL problems
I try to look at the config files on a regular basis, but I have to
print both of them out
Title: Message
Is there a good way to stop
spam that uses periods to separate words? For example, alot of this type
of spam comes in where the words are "disguised" with periods. For
example:
Manhoo.d
Mem.ber
Pen.is
This is a making me
crazy! I can't stop these. I know I need to read
Saw this on FoxFriends this morning...is the real thing.
Samantha
-Original Message-
From: Kevin [mailto:[EMAIL PROTECTED]
Sent: Thursday, April 01, 2004 3:08 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Google Gmail.com
Anyone think this is a hoax?
They are offering 1 gig of
, there are some of us on this list that can offer to help get
things going and such.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Bridges, Samantha
Sent: Monday, May 03
Hello All -
Here is the situation.
I am unable to receive from @fiberlinkinc.com if the message is sent
from them and is new. However, if I send a message to @fiberlinkinc.com
and they Reply to the message I sent, then I am able to receive from
them. Therefore only on Replied messages am I
Hello all -
I need to create a bounce message for all messages not received because
they contained an attachment that was currently being blocked such as
.zip..etc.
Any direction on this would be greatly appreciated. Or point me in the
right direction as to where I can obtain this
I know I saw something about this a few days ago but am not sure what
the answer was. Is the www.dnsstuff.com website down for good? Is
there a new link to it?
Thanks
Sam
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the
Scott or anyone who can help -
Below is the headers from a spam message. The Declude headers say that
it failed the Weight 10 test. I have a HOLD on Weight 10 in my
$default$.junkmail file. If I have a HOLD on the weight 10 then why did
it get through.
Thanks,
Samantha
Microsoft Mail
:[EMAIL PROTECTED] On Behalf Of Bridges,
Samantha
Sent: Thursday, May 20, 2004 11:07 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] DNSstuff Website
I know I saw something about this a few days ago but am not sure what
the answer was. Is the www.dnsstuff.com website down for good
Thanks everyone!
Scott really really deserves that cruise...but I miss him.
Does anyone know what happened to www.dnsreport.com? I tried
backup.dnsreport.comnothin'.
Thanks
Sam
-Original Message-
From: Nick Hayer [mailto:[EMAIL PROTECTED]
Sent: Thursday, May 20, 2004 2:53 PM
Thanks for all your help with this. I have done the steps below.
Before I change the MX record, I am wondering if anyone else who runs a
gateway has a sample $default$.junkmail file I can view.
I created a directory called domain.com under the Declude directory
and then created a
Hello All -
I have started providing gateway services to a new host. I see the
messages reach the spool and start to be processed. However the SMTP
log says that the message keeps requeing and giving me a status of 3
Please help. Any ideas of what to look at would be appreciated.
Samantha
Question
Make sure the system you are gatewaying for allows relay from the
gateway host.
Rick Davidson
National Systems Manager
North American Title Group
-
- Original Message -
From: Bridges, Samantha [EMAIL PROTECTED]
To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Wednesday, May 26
)
-Original Message-
From: Bridges, Samantha [mailto:[EMAIL PROTECTED]
Sent: Thursday, May 27, 2004 6:37 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Help - Gateway Question
Thanks for the replies.
Below are lines from the SMTP log. The new gateway customer is the
@lsps.org. They use
).
Your original message asked about status=3, which indicates that the
message is re-queued. Here is an Ipswitch Knowledge Base article on the
status
codes:
http://support.ipswitch.com/kb/IM-19990715-DM01.htm
Andrew 8)
-Original Message-
From: Bridges, Samantha [mailto:[EMAIL
Below are the headers from a message that was blocked. However, I
having a problem figuring out just what blocked it. I don't block
NOABUSE or NOPOSTMASTER so I am not sure why it was blocked. And that
is why those both show as X-RBL_WARNING? So what blocked it? Hoping
someone can help
I know it was blocked because I have a spam mailbox that all Declude
spam is routed to or ROUTETO [EMAIL PROTECTED] This is also where IMail is
told to send its spam.
Maybe I will just make two separate mailboxes - 1 for Declude Spam and 1
for IMail spam. That would probably be the easiest way.
Interesting Spam Article
http://www.eweek.com/article2/0,1759,1608663,00.asp?kc=ewnws060904dtx1k0
700599
Samantha Bridges
Communications Technician
Macomb Intermediate School District
44001 Garfield Road
Clinton Township MI 48038-1100
(586) 228-3300
[EMAIL PROTECTED]
http://www.misd.net
I am storing and forwarding for a domain named lsps.org. I created a
folder under the Declude directory named lsps.org. I copied the
$default.Junkmail$ file from c:\imail\declude to
c:\imail\declude\lsps.org folder. I changed nothing in the
$default.Junkmail$ file after the copy.
I want to
If you change the global.cfg file, it will affect all outgoing E-mail.
If
you change the c:\imail\declude\lsps.org\$default$.JunkMail file, it
will
only affect E-mail going to @lsps.org.
I have 10 hosts also on this server and I don't want to filter outgoing
mail for them. I only want to
Good morning -
This came out in the news this morning. Below are a few snippets from
the article just to peak your interest. Sounds as though You Got
Mail! is taking on a whole new meaning...Should be You Got
Mail, but We Got Your Personal Information!. I am sure we could all
come up
69 matches
Mail list logo
