[Declude.JunkMail] Multiple recipient problems

2001-09-10 Thread Charles Frolick
Anyone else been hearing of problems sending to multiple recipients in the rage of 90 or more? I am running v1.25a with JM and HJ installed. My low bar for HJ is 50, high bar is 500 b/c I have one customer who absolutely insists she has to send her newsletter out to at least 300 people from one

RE: [Declude.JunkMail] Declude crashing and taking up 99% CPU

2001-09-25 Thread Charles Frolick
Hey Scott, Just throwing an idea out there, since most spam mail hits multiple addresses in the same server, often as seperate messages, how about a failed message cache that could automatically fail a message if it failed in the last hour or some other configurable time span? It would probably

RE: [Declude.JunkMail] Product Info Questions

2001-10-18 Thread Charles Frolick
Scott, Along the lines of undocumneted tests, is ADULT another test in beta? I saw it on your recently cught spam page. Thanks, Chuck Frolick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, October 18, 2001 2:47 PM To:

RE: [Declude.JunkMail] Product Info Questions

2001-10-18 Thread Charles Frolick
I am running pro and use my mailbox as a test box for tests before setting the default filters for all other users, and would like to test the undocumented tests out, are there any others, have you thought about making a uae at your own risk list for the more daring lot out here? To me, your

[Declude.JunkMail] Issue with wrong .junkmail file used

2001-10-24 Thread Charles Frolick
Scott, I recieved some spam that was processed by the $default$.junkmail file when there is a cmfrolick.junkmail file to process my mail, and I am running the pro version. Below is a snipet from the log file. 10/24/2001 10:03:18 Qd82914c 000615 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]

RE: [Declude.JunkMail] Declude JunkMail v1.28

2001-11-01 Thread Charles Frolick
Scott, In the release notes you mention that HEUR has been set to have mutliple levels. How does this benefit us? Does a level 1 return a weight of 1 and so on? Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R.

[Declude.JunkMail] Fail Codes for built-in tests.

2001-11-06 Thread Charles Frolick
Scott, Would it be possible to list at least the common codes for some of your tests? I had a customer ask about SPAMHEADERS today, I found the answer in my archives of the list, but if we had a list of common ones, it would be nice. Thanks, Chuck Frolick ArgoNet, Inc. --- This E-mail came

[Declude.JunkMail] HEUR test and List Servers

2001-11-06 Thread Charles Frolick
Scott, I noticed a number of list servers, including Ipwitch's, fail the HEUR test horribly, but others don't trip it at all. (the non weighted version of the test) What would a list server need to do to keep scores low? Thanks, Chuck Frolick ArgoNet, Inc. --- This E-mail came from the

[Declude.JunkMail] *.pid files littering c:\

2001-12-10 Thread Charles Frolick
Scott, I was just looking to see if Declude had generated any declude.gp? files, and discovered that c:\ is littered with 28MB of *.pid files. They date back to before I switched to 1.29, and I did not install 1.28. I do have the PIDDEBUG option set to on, and it correctly generates them in

RE: [Declude.JunkMail] v1.33 Still Has Problem with Large 'All Receipients' List

2002-01-16 Thread Charles Frolick
have been poor seeing as how (from their perspective) we had already ruined their day! --- elp2 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Charles Frolick Sent: Wednesday, January 16, 2002 10:16 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail

[Declude.JunkMail] Whitelisting Hijack

2002-01-18 Thread Charles Frolick
Can Hijack be whitelisted? Chuck Frolick ArgoNet, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

RE: [Declude.JunkMail] fromfile

2002-02-27 Thread Charles Frolick
Might be easier to make a seperate test that uses regular expression test. This would give us more control, and we could build more complex whitelist and blacklist entries. Just a thought. Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: MISSING_REVERSE_DNS:Re[2]: [Declude.JunkMail] Spamcop issue

2002-03-04 Thread Charles Frolick
Have you ever tried Windows Scripting Host? It runs both VBScript(Which I have written many very useful utilities in), and JScript(JavaScript Clone), and if that's not enough, go to http://www.activestate.com/Products/Language_Distributions/ and download Perl, Tcl, or Python to add to the fun.

RE: [Declude.JunkMail] BLARS:Message Processing Order

2002-03-11 Thread Charles Frolick
Don't know how much to trust it, but MS states that their SMTP service is designeg so that you cna build third party filters then use it to forward to your other servers, I believe you can even use rules in the filters to forward to different servers. Might be worth a look. Might even be a way

RE: [Declude.JunkMail] DORKZTL:Spammers lose in small-claims court

2002-03-26 Thread Charles Frolick
The issue is specific to his domain, since I use Savvis for my backbone, I thought it best to check, and everything is fine for my block 209.144.1.0/24 in both servers. Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott

RE: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread Charles Frolick
Along the lines of Hijack, I still occasionally get customers complaining of mail disappearing when the send to a large number of recipients in a single email, usually in the order of 80 or more. I have a tough time convincing customers to break up messages and it does not seem to be universal.

RE: [Declude.JunkMail] Declude HiJack.

2002-04-01 Thread Charles Frolick
I created a vbscript that is called by task scheduler that sends out an email if either hold has messages. I attached it zipped up. Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Monday, April 01, 2002

RE: [Declude.JunkMail] Will this ever be possible?

2002-04-23 Thread Charles Frolick
Sounds like you want a program that is like SpamCop for your server, sounds cool actually. It could integrate with Imail's black lists or Declude's. You could use a program alias in Imail to dump to the parser. Wish I had the time to write it. Chuck Frolick ArgoNet, Inc. -Original

RE: [Declude.JunkMail] Will this ever be possible?

2002-04-23 Thread Charles Frolick
I agree, it should definately not be a simple 'if they submit it, add it' program, it needs to have a database involved with some form of statistics, it's not a simple project, and it would need some way of controlling false or bad reports. It would have to be a single site version of the

RE: [Declude.JunkMail] New Test?

2002-04-25 Thread Charles Frolick
One problem, I recieve very legitimate email to [EMAIL PROTECTED], that is sent to abuse@ for all domains thought to be involved for spammers and other issues. There are cases where someone is just trying to get ahold of several parties using standard addresses like abuse, hostmaster,

RE: [Declude.JunkMail] Aside.

2002-05-06 Thread Charles Frolick
I feel very fortunate, all we ever recieved were emails asking how to better use the spam tags to get the junk out of their box. Some customers didn't even notice, even after we sent an email explaining the service, they called wanting to know what to do about the spam, we told them to filter on

[Declude.JunkMail] Feature suggestion.

2002-05-14 Thread Charles Frolick
Scott, It would be nice to have a similar feature to the WHITELIST TODOMAIN feature that could impose an action to all email bound for a domain. I currently use CATCHALL to bounce all email to a suspended domain with a nice little Temporarily not available message, which gets customer's

RE: [Declude.JunkMail] Weird extension on Imail D files

2002-05-17 Thread Charles Frolick
I have Imail 6.06 and have had a few of reports from customers claiming to be getting someone else's email, however it is rare, and harder to track since they almost always delete the email before letting us know. This makes sense as to what may have happened, not saying it was, but it is

RE: [Declude.JunkMail] Bounce strategies?

2002-05-20 Thread Charles Frolick
To solve that problem and postmaster bounces to bad addresses (spammers sending to full or non-existing mailboxes) I wrote a script that scans the spool for the bounce messages and removes them from queue after 3 failed delivery attempts, my default is 24 attempts. This virtually eliminated

RE: [Declude.JunkMail] Could you explain HELOBOGUS?

2002-06-10 Thread Charles Frolick
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, June 07, 2002 6:53 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Could you explain HELOBOGUS? When this happens, it's a configuration error on the other end of the

RE: [Declude.JunkMail] aliases and junkmail

2002-06-18 Thread Charles Frolick
Scott, How would it handle a mailbox with a forward to address defined? i.e. If alias@domain1 was a mailbox, but had the forward list of alias@domain2. Just curious, since Imail will not leave a copy on forward unless you use .,email@domain. Chuck Frolick ArgoNet, Inc. -Original

RE: [Declude.JunkMail] Archive?

2002-06-20 Thread Charles Frolick
The adult test has very few hits, even for blatantly adult emails. Probably one out of every 15-20 porn ads gets caught, and I subscribe to some joke lists with frequent crude jokes, and they are rarely tagged. The idea about using the FILTER test with a well designed filter will probably be

[Declude.JunkMail] Addition filter test

2002-06-21 Thread Charles Frolick
Scott, Not sure how feasible it is, but a large number of spam mails contain a URL with an IP address (http://127.0.0.1/), I know legitimate mail can too, but as a weighted test it could be useful. I was thinking as part of the filter test, but even as a stand alone test it might work. Most of

[Declude.JunkMail] FYI about FTC stance on spam

2002-07-10 Thread Charles Frolick
I know this has been mentioned here before, referencing an article about it, but I just went poking around on ftc.gov and found they have a section dedicated to spam that allows consumers to file complaints as well as gives information about what they can do to reduce spam on their own. I looked

[Declude.JunkMail] Problems with weightrange

2002-07-11 Thread Charles Frolick
OK, just checking to see if anyone else had this. My logs look like this. 07/10/2002 23:59:59 Q10cc20e 001137 OSRELAY:5 SPAMCOP:10 BADHEADERS:5 nWEIGHT5:9 nWEIGHT10:14 nWEIGHT15:19 nWEIGHT20:29 nTAG5:9 nTAG10:14 nTAG15:19 . Total weight = 133 07/10/2002 23:59:59 Q10cc20e 001137 Msg failed

RE: [Declude.JunkMail] Feature Request, Declude Console

2002-08-12 Thread Charles Frolick
From what I have read, in Win2k terminal services cannot connect to the console session, however the next release of server will include this capability, so will have remote control rather than a mere terminal. Many programs have the same issue since the default action for a service that

RE: [Declude.JunkMail] Per User/Domain Global.cfg

2002-08-21 Thread Charles Frolick
Along a similar line, can outgoing rules be per domain? If so, how would we do that? Chuck Frolick ArgoLink.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, August 21, 2002 7:45 AM To: [EMAIL PROTECTED] Subject: Re:

RE: [Declude.JunkMail] They are getting sneaky!

2002-08-22 Thread Charles Frolick
You probably could instead, make it add an additional X-Note: header that indicates postfix had to repair the headers and filter on this. It would not be a bad idea if all mail servers indicated when they had to repair broken headers. Chuck Frolick ArgoNet, Inc. -Original Message- From:

RE: [Declude.JunkMail] Address Book Only in Declude?

2002-08-29 Thread Charles Frolick
I do have one question, how do you manage the size of the spam folder when they use that option? I would love to use the MAILBOX action, but have no way of cleaning out the spam folder without affecting the other folders, including inbox, as well. We currently do not use aging as a restriction

[Declude.JunkMail] Declude Queue Question

2002-09-12 Thread Charles Frolick
Scott, Is there any trick to getting declude queue to work? I came in to work to see 5000+ messages in my spool directory, and a bunch of popups since the machine ran out of memory and could no longer allocate space to the new processes. It has happened in the past several times, not real

RE: [Declude.JunkMail] Fighting the Menace of Unwanted E-Mail

2002-09-17 Thread Charles Frolick
I always figured since my hotmail profile says I'm male and over 21 that's why it gets about 160 spam mails (that don't fail their spam filters) per week. Don't they do the same thing Juno mail does and pay for the service by selling the address to 'Advertising Partners'? My 17 year old sister

RE: SPAMCOP:Re: [Declude.JunkMail] HELOBOGUS

2002-09-18 Thread Charles Frolick
It does fail to recognize that ISP's, and especially Hosting Providers, often have people using their email from work or, in the case of personal domains, from another service provider, which means their test messages from [EMAIL PROTECTED] to [EMAIL PROTECTED] would be from a foreign IP. But as

RE: [Declude.JunkMail] Whitelist Request

2002-09-18 Thread Charles Frolick
: [Declude.JunkMail] Whitelist Request That's what I did...using the address list, I give it a weight of -140, which is more than the total of ALL of my tests added together... Bill -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Charles Frolick Sent: Wednesday

RE: [Declude.JunkMail] Whitelist Request

2002-09-18 Thread Charles Frolick
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Charles Frolick Sent: Wednesday, September 18, 2002 12:46 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Whitelist Request Would you mind sharing your list? Mine, sadly enough, only has 8 rules

RE: [Declude.JunkMail] H:Best Practices for Handling Spam

2002-10-01 Thread Charles Frolick
As far as the clearing the spambox goes, IMail includes a program that can clear old mail, unfortunately it clears all mailboxes found in a directory recursively. I have looked into writing a utility to do the same but be direct able at individual .mbx files, but the problem comes from the two

RE: [Declude.JunkMail] Per User - Alias Account

2002-10-03 Thread Charles Frolick
Have you tried making both of them a group alias, and point them to the same text file? This will make it so you only have to edit the one file and both aliases point to the same mail boxes. It also makes it scriptable for edits, it you really need to go that far. Chuck Frolick ArgoNet, Inc.

RE: [Declude.JunkMail] Newbie question about baseline

2002-10-07 Thread Charles Frolick
I wrote a very simple batch file that runs nightly and holds mail for up to 10 days, alternately you could use a program called xxcopy that can delete, copy, or move files based on age. I included the batch file, zipped up. Nothing special, no extra programs needed. Chuck Frolick ArgoNet, Inc.

[Declude.JunkMail] Looking for feedback

2002-10-23 Thread Charles Frolick
I am working on a web based held message review app that allows customers to redeliver false positives or delete the spam on their own. I have a test mailbox set up and a basic info page. The app is at http://spmareview.argolink.net, the test box is [EMAIL PROTECTED], pass is demo. The info page

RE: [Declude.JunkMail] client Question

2002-10-25 Thread Charles Frolick
Ok, Sounds like everyone is building a tool of some sort, might no hurt to get some collaboration going. I recently posted a link to a spam reviewing ASP app, and I am working on a way to modify the users rules files to filter based on a standard declude config. If any ASP developers want a look

RE: [Declude.JunkMail] Catching SPAM when the sender = recipient

2002-10-25 Thread Charles Frolick
The owner of my company also has another company in the office, and they all send out as the group alias and CC the group alias so everyone has a complete copy of communications with customers. No one can say I didn't know what he said to the customer. Chuck Frolick ArgoNet, Inc. -Original

RE: [Declude.JunkMail] Declude log test analyzer

2002-10-28 Thread Charles Frolick
I use Sawmill fro my customers web stats, and for custom stats for internal use, it is an excellent product. Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner;declude.com]On Behalf Of Dan Cummings Sent: Monday, October 28, 2002 4:16 PM

RE: Re[2]: [Declude.JunkMail] Declude log test analyzer

2002-10-29 Thread Charles Frolick
I'd stay with their current, and you'll either have to build your own filter for Declude logs or ask them to build it for you, they will for registered users without a charge, and if it is a common log format add it to their permanent list. The different levels of info used in the various Declude

[Declude.JunkMail] Update of SpamReview web app (not related to SpamReview hold manager)

2002-10-30 Thread Charles Frolick
Ok, I just uploaded a new revision to my Spambox App. The URL is http://spamreview.argolink.net email is [EMAIL PROTECTED] pass is demo Info at http://spamreview.argolink.net/doc It now has full capability to manage settings per user. A few more issues to resolve and I will look at packaging it

[Declude.JunkMail] Update on SpamReview Web App

2002-11-05 Thread Charles Frolick
I have an updated, almost ready for beta, version up now. Please have a look and let me know what you think. My next update message should be to notify of a downloadable beta (full source), then hopefully a workable freeware release. Again, the info. http://spamreview.argolink.net user: [EMAIL

RE: [Declude.JunkMail] Postini type interface for JunkMail?

2002-11-11 Thread Charles Frolick
I am working on an interface to control Imail rules to hold or delete mail based on rankings from weight tests in declude. I have 6 seperate ranks of spam from NONE (which as always can include misses) to VHIGH. It's not very pretty right now, but it is fuctional. I plan on adding fuctionality,

RE: [Declude.JunkMail] SpamReview Web App Released

2002-11-27 Thread Charles Frolick
PROTECTED]] On Behalf Of Charles Frolick Sent: Wednesday, November 27, 2002 1:25 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] SpamReview Web App Released I have posted a copy of my SpamReview web app for download. It is sourceware, modify to your needs. I will provide as much support

RE: [Declude.JunkMail] Imail Web Based Interface

2002-12-02 Thread Charles Frolick
I just posted asp source to my app which is similar in concept to Tom's, except it also has a spambox to manage held spam for the user. I know some people have looked at it, but I haven't received any feedback yet. It aollows for management of the spam messages separate from Imail's aging since

[Declude.JunkMail] Blacklisting based on % of bad addresses

2002-12-03 Thread Charles Frolick
Does anyone know if any of the Imail log analyzers reports number of good and bad deliveries by remote servers? I want to look at blacklisting remote addresses that send high percentage of messages to invalid addresses. These are most likely from mailing lists and therefore likely spam. I keep

RE: [Declude.JunkMail] Blacklisting based on % of bad addresses

2002-12-03 Thread Charles Frolick
PROTECTED]] On Behalf Of Charles Frolick Sent: Tuesday, December 03, 2002 12:14 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Blacklisting based on % of bad addresses Does anyone know if any of the Imail log analyzers reports number of good and bad deliveries by remote servers? I want

RE: [Declude.JunkMail] IBM article about spam and telemarketers

2002-12-11 Thread Charles Frolick
This is a very naive approach. If it deals with billing, it will need lots of legislation, tax law consideration, it will cause the owner of the phone number or email to deal with taxes for the collected income. Not to mention the crack pots that will say it is $10,000 to place an unwanted call

RE: [Declude.JunkMail] OT: MS update

2002-12-18 Thread Charles Frolick
Great a patch for a very old issue is going to cost me $600 to get a new service agreement for other upgrades I didin't want. (Still running 6.06, patch is for 7.13, funny how ver.7 has had 13 revisions and no where near ver.8, ver.6 only needed 6) Chuck Frolick ArgoNet, Inc. -Original

[Declude.JunkMail] REDIRECT in $default$.junkmail

2002-12-19 Thread Charles Frolick
Scott, Is the REDIRECT statement processes per domain as well or only on the global $default$.junkmail file? I have redirects for several addresses in our primary domain, but I need to have a different set of actions for all of our hosting accounts, so I have per domain set up for our primary

RE: [Declude.JunkMail] relays.osiriusoft.com

2002-12-19 Thread Charles Frolick
If you get the right software Win32 DNS doesn't need a lot of machine either. I run win2k on a dual p150 and a ppro200. Both machines only have 128MB RAM, I run Simple DNS Plus by jhsoft.com, no problems, that's with running a small ISP and hosting over 200 domains in DNS. Plus the software is

[Declude.JunkMail] Log Levels

2002-12-23 Thread Charles Frolick
Scott, Would it be possible to get a little more info on what is logged at the different levels, ERROR, WARNING, and DEBUG are pretty self explanatory, and probably rarely used, but I'm unclear on the differences between LOW, MID, and HIGH. Thanks, Chuck Frolick ArgoNet, Inc. --- [This E-mail

RE: [Declude.JunkMail] Log Levels

2002-12-23 Thread Charles Frolick
I was really looking for even a basic list of additional lines, but that's ok, I'll just capture logs at the different levels and figure it out the old fashioned way. Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R.

[Declude.JunkMail] Weird issue with an alias.

2002-12-24 Thread Charles Frolick
I have an alias for [EMAIL PROTECTED] that points to several addresses. For some reason the first address never recieves the email, there are no imail rules set up either globally or for the address and the ldeliver line says it is delivered to NUL. The only other odd thing is for some reason in

[Declude.JunkMail] External test question

2003-01-03 Thread Charles Frolick
Scott, If an external test was the last one defined would the following work? MYTEST external nonzero c:\mytest.exe %TESTSFAILED% 0 0 The reason is, I'm thinking about creating an app to plot the hit rate for my tests, but I want to make it a data gatherer rather than a log analyzer (spreads out

RE: [Declude.JunkMail] Junkmail and Imail 6.05

2003-01-14 Thread Charles Frolick
This is not an uncommon problem. From what I know, Imail 7.x still has it. In my research, I have not found a tool to clear just one folder in a mailbox based on date, but I did develop an application to manage spam using a combination of weighting, Imail rules, and an external server software

RE: Re[2]: [Declude.JunkMail] WhiteList Per User or Domain?

2003-01-17 Thread Charles Frolick
One problem with held or bounced mail that notifies the intended recipient that it was blocked, is, you did not elimiate the spam, only change it's contents to hundreds of notifications of unwanted mail. This will get very old, very fast, and lead to the blacklists you are trying to avoid.

RE: Re[4]: [Declude.JunkMail] WhiteList Per User or Domain?

2003-01-17 Thread Charles Frolick
]] On Behalf Of Roger Heath Sent: Friday, January 17, 2003 10:51 AM To: Charles Frolick Subject: Re[4]: [Declude.JunkMail] WhiteList Per User or Domain? Reply to: Charles Frolick Re: [Declude.JunkMail] WhiteList Per User or Domain? on Friday 9:35:39 AM We already capture most spam and virus using

RE: [Declude.JunkMail] Hijack Enhancement

2003-02-03 Thread Charles Frolick
Scott, How about a small executable that talks to console the same way Declude.exe does to send a release signal? Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Monday, February 03, 2003 10:03

[Declude.JunkMail] New Util

2003-02-07 Thread Charles Frolick
I have made available a new util for all to use. It produces MRTG like graphs of failed Junkmail tests as well as the message count. I have also created a web page for all of my utils to be downloaded. http://spamreview.argolink.net/software/. If you want to see the graphs it can make go to

RE: [Declude.JunkMail] New Util

2003-02-07 Thread Charles Frolick
I forgot to mention that the stats grapher works from log level LOW on up, although I did not test DEBUG, I do not forsee an issue. Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Charles Frolick Sent: Friday

[Declude.JunkMail] Log Question

2003-02-07 Thread Charles Frolick
Has anyone else noticed bad log lines in the JM log? I will get a short spurt of partial log entries, usually without a newline to separate them, occasionally just the end of an entry on a line by itself. Never seems to last more than a minute. It can really mess with log analysis. Thanks, Chuck

RE: [Declude.JunkMail] f-prot

2003-02-18 Thread Charles Frolick
Ok, I do not see F-prot on the F-secure site at all, and F-secure antivirus is $80 for personal edition, $424 for the server edition, and I so not see mention of 20 user license. Thanks, Chuck Frolick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R.

RE: [Declude.JunkMail] f-prot

2003-02-18 Thread Charles Frolick
]] On Behalf Of Charles Frolick Sent: Tuesday, February 18, 2003 4:17 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] f-prot Ok, I do not see F-prot on the F-secure site at all, and F-secure antivirus is $80 for personal edition, $424 for the server edition, and I so not see

RE: [Declude.JunkMail] Making My Own Tests

2003-02-18 Thread Charles Frolick
He could also use WEIGHT02 weightmatch x x 2 0 Since weightmatch matches exactly that weight. I will recommend using little bit bigger catch boxes though. I think you will get a very good picture by having ranges set up along these lines: WEIGHT00-04 weightrange x x 0

RE: [Declude.JunkMail] High Resource Usage

2003-02-19 Thread Charles Frolick
It's not Declude and Imail that's the problem, it's the extreme number of postmaster messages balling up in your spool that will never be delivered. At least that has been my experience, I'm in the same boat (small isp ~6,000 accounts but 60k - 80k messages per day). I wrote a utility to help

[Declude.JunkMail] Interesting Question

2003-02-25 Thread Charles Frolick
Scott, Since IPNOTINMX only has use when it passes, there is no way to add a header using WARN, and it doesn't show up in %FAILEDTESTS% (obviously), so the problem is, it adjusts the weight but unless you go to the log file, you don't know for shure it did. Is there a way to make it show up in

RE: [Declude.JunkMail] Interesting Question

2003-02-25 Thread Charles Frolick
with no reverse DNS entry. X-Declude-Sender: [EMAIL PROTECTED] [63.109.193.64] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Weight: 20 X-Spam-Tests-Failed: BADHEADERS, HELOBOGUS, IPNOTINMX, REVDNS, WEIGHT05, WEIGHT10, WEIGHT15, WEIGHT20 Dave Charles

RE: [Declude.JunkMail] Where I'm At Now and Where Should I Be Goi ng?

2003-02-28 Thread Charles Frolick
I agree as an ISP that SPAMCOP alone does not work, but as a corporate email, it might be considerably different, positive or negative. Another test you might consider is SpamChk, I just started using it and it makes a huge difference in my mail box, I do need to tune it though, it trapps my Daily

RE: [Declude.JunkMail] Where I'm At Now and Where Should I Be Goi ng?

2003-02-28 Thread Charles Frolick
I see you updated it recently, I was killing myself yesterday to remember the name of Spammanager, had to search the archives. Also, could you include a link to my add-ons site http://spamreview.argolink.net/software, I have several tools there, one is the zipfile for the Hijack notifier. As I

RE: [Declude.JunkMail] Where I'm At Now and Where Should I Be Goi ng?

2003-02-28 Thread Charles Frolick
Thank you, it is a nice way to see how the filters are doing, and it keeps the data set small, all 28 of my tests take up less than a meg to store (rrd's are created at their final size). Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [Declude.JunkMail] Declude.JunkMail Statistics

2003-02-28 Thread Charles Frolick
Delog is good, there is a thread about a beta log analyzer Log Analyzer - Comments Needed, sounds real promising. You might check those out. I seem to remember there being others, but can't think of them off hand. The only other one is Netcomm LogTool, but I don't think you want to spend $200

RE: [Declude.JunkMail] Forcing sum of weights to exact weight question...

2003-03-03 Thread Charles Frolick
Hey scott, ever thought about adding a special action keyword like FORCE, to force an action in the odd situation where you want to override the the severity scale? It would only need to be handled in the .junkmail files. Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From:

[Declude.JunkMail] Message body in Headers Problem

2003-03-05 Thread Charles Frolick
Has anyone else been seeing messages where the body is in the headers? I have a n example below. Just started happening, and since declude appends to the end, the body shows blank in Outlook. Bad MSG Received: from 202.88.150.30 [202.88.150.30] by argolink.net (SMTPD32-6.06) id

RE: [Declude.JunkMail] savvis.net

2003-03-11 Thread Charles Frolick
I looked through those since I use Savvis as well and have been very pleased. It looks like most where DNS servers serving spamvertised domains, the first one was used to relay mail through a router in what sounds like a bad router design, but is a webmail company who may not have secured their

RE: [Declude.JunkMail] Spaced Out

2003-03-21 Thread Charles Frolick
Sounds like this test might be a good negative weight test like IPNOTINMX. Of course if they use a good mailfrom it could reduce the positive. Any thoughts? Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott

RE: [Declude.JunkMail] Habeas headers

2003-03-25 Thread Charles Frolick
This should not be an issue since Habeas headers implies they are adhereing to the strict rules put forth by Habeas, and had to pay for the right to use them, if they are in violation, report them to Habeas, who will take legal action against topica.com for violating the agreement. Thanks, Chuck

RE: [Declude.JunkMail] Reference documents needed

2003-03-26 Thread Charles Frolick
The online docs and the mailing list archives tends to be a very good reference, however since the program is so flexible, even Scott doesn't know it's full potential. There are often threads where people have managed to come up with some new and unforseen way of using Declude. Now, that being

RE: [Declude.JunkMail] Custom Filter file Log question

2003-04-01 Thread Charles Frolick
My only thought is, by some weird chance a spammer is using a real return adress (I know that is truly funny), they would be able troubleshoot the fails by sending to an invalid email address or a known full mailbox and simply read the headers in the standard bounce message. But I think this is a

[Declude.JunkMail] Interesting article on SPAM

2003-04-02 Thread Charles Frolick
Here is an interesting article on spam from the legitimate marketer's perspective. http://sanjose.bizjournals.com/sanjose/stories/2003/03/31/story4.html Thanks, Chuck Frolick ArgoNet, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came

RE: [Declude.JunkMail] Queue size quota\alert

2003-06-06 Thread Charles Frolick
I built a simple VBScript for alerting if mail gets held in the Hijack hold folders, it wouldn't take much to make it alert if number of Q files in Overflow exceeds a threshhold or if any files exist at all. It is available at http://spamreview.argolink.net/software, called the Hijack Held

RE: [Declude.JunkMail] OT: The Titian Key Product to Remove Spam.. patent pending?

2003-06-06 Thread Charles Frolick
If you read the article they link to, it is a combination of challenge response and virtual addresses, complete with the problems of not one, but both anti-spam systems. They did do some interesting things, but still seems like more work to deal with than most users will tolerate over the long

RE: [Declude.JunkMail] observation to share...

2003-05-29 Thread Charles Frolick
Scott, Have you thought about using Declude Console as a short term dns cache for Declude? I think the results Kami is seeing is because Ipswitch included a DNS cache in the new Queue Manager, and their ip4r test may be using it instead of the DNS. Declude could definitely benefit from it since

RE: [Declude.JunkMail] New Variable Question ?

2003-05-31 Thread Charles Frolick
I use weightrange to define 6 distinct levels of spam (the last one actually is just weight so anything over is caught). Then all I do is add a header X-SPAM-Level: TESTNAME. End result is what you are asking for, just use stars instead of TESTNAME. Global.cfg SPAM-NONE weightrange

RE: [Declude.JunkMail] Logging optimization question

2003-06-09 Thread Charles Frolick
Speaking of logging, would it be possible to add using a syslog daemon as an option, I don't know off hand if it will save any processing power, but it seems like it might since you will no longer have to manage log file resources (locking, checking creation, destination folder). It would

RE: [Declude.JunkMail] How Did DJM Pro Arrive At This Weight?

2003-06-20 Thread Charles Frolick
They are all applied. The trick is, so far there are very few, and only recently used, negative if pass tests. It might not be hard for Declude to add a %TESTPASSED% variable, but if you use a lot of tests, this will be a very long list, especially for good email. It has been suggested for them

RE: [Declude.JunkMail] SPAMDOMAINS

2003-06-25 Thread Charles Frolick
Would you mind sharing your two lists? I would like to be more aggressive with SPAMDOMAINS, but I know the FP potential. Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Wednesday, June 25, 2003

RE: [Declude.JunkMail] Console and Hijack question

2003-06-26 Thread Charles Frolick
I thought Win2003 was supposed to have added console access to Terminal Services (I have some recollection that you are running 2003, could be wrong though)? If you are not running 2003, just install VNC for the occasions you need console access. That's what I had to do. Thanks, Chuck Frolick

RE: [Declude.JunkMail] Console and Hijack question

2003-06-26 Thread Charles Frolick
I don't know what they did, and it is running as a service, but, SimpleDNS Plus by jhsoftware.com had a similar issue with the need for console access, however they found a way around it in their beta version (not publicly released thought). I may have to poke at it a bit to see if I can figure it

RE: [Declude.JunkMail] Console and Hijack question

2003-06-26 Thread Charles Frolick
You don't have to leave it logged on, you can log in and out remotely with VNC, you can even lock out the local inputs while in remote mode. Thanks, Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent:

[Declude.JunkMail] Question about DNSStuff.com Spam DB lookup

2003-07-01 Thread Charles Frolick
Scott, I had someone point out that two addresses in my range (209.144.1.100, 209.144.1.14) are listed in ORDB, I went to DNSStuff.com and the lookup tool said they were not, bud a direct query of ORDB shows them. I know the l;istings are old, from 2001, and neither IP is in use for mail, so I

RE: [Declude.JunkMail] re: Strange logging

2003-07-03 Thread Charles Frolick
When I wrote the stats grapher app, I ran across the same problem at all log levels (I generally run MID). When I mentioned it on the list, some otheres who wrote log analyzers had noticed the same thing. I'm sure it has to do with the volume of mail received, since more mail means more declude

RE: [Declude.JunkMail] re: Strange logging

2003-07-03 Thread Charles Frolick
I love email, I received your reply about an hour and a half before I received my post, and the headers show the delay was in delivery to my mail server from declude.com, yet I received 4 other posts between. Don't worry about finding what happened, I'm sure it is temporary errors (my server busy)

  1   2   >