RE: [Declude.JunkMail] RE: Database error after upgrading Incorrect HELO in Received Header
Can someone please unsubscribe me from this list? I have tried 3 times to do so. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : cr...@123marbella.com -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy Schmidt Sent: 25 June 2009 21:18 To: declude.junkmail@declude.com Subject: [Declude.JunkMail] RE: Database error after upgrading Incorrect HELO in Received Header Hi, a) As far as the HELOBOGUS test - you likely are missing the various IMAIL 11 fixes that Ipswitch created but only gives out when you ask: http://kb.imailserver.com/cgi-bin/imail.cfg/php/enduser/std_adp.php?p_faqid= 691 With the latest fixed SMTP service and Imail_API DLL, my HELOBOGUS test does not seem to trigger for all messages (but certainly for lots of spam that has 3 times the hold weight). b) Is that Imail domain using the registry or SQL for its user database. All my domains are using the registry and my Declude log appears to look normal, e.g.: 06/24/2009 23:59:58.680 q93ea0001414e0aa2.smd Did not find [ alifeedb...@service.alibaba.com ] in [ merchand...@dollardays.com ] address book 06/24/2009 23:59:58.680 q93ea0001414e0aa2.smd Finish Address Book WhiteList Best Regards, Andy -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Kevin Rogers Sent: Thursday, June 25, 2009 2:35 PM To: declude.vi...@declude.com Subject: Re: [Declude.Virus] Database error after upgrading So I emailed David about this issue and he had me turn off AUTOWHITELIST and that seemed to get rid of the error. It seems that Imail 11 changed the database it uses for contacts and this is why Declude was generating that error. But I'd really like to turn AUTOWHITELIST back on. And, since the upgrade all emails are failing the DYNHELO and HELOBOGUS tests so I've had to reduce their weights for the time being. Has anyone seen this or have any ideas how to correct? Thanks. Kevin Rogers wrote: I upgraded to 4.6.35 because of the AVG scanner issue, but now in my declude logs I am seeing error messages like this: 06/23/2009 00:38:48.986 q8f0c00670096.smd DataBase Error = ['(unknown)' is not a valid path. Make sure that the path name is spelled correctly and that you are connected to the server on which the file resides. Driver's SQLSetConnectAttr failed ] I didn't have these errors before my upgrade. Any ideas? --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] BackScatter
Hi Todd, I think grey listing prevents backscatter coming INTO your mail server, it does not prevent you getting on blacklists. If you are on a blacklist then I think you need to figure out how your smtp server is configured because it would indicate an issue somewhere. Since using Alligate (www.alligate.com) as the first line of defence in front of declude, we have had zero black listings and all the backscatter has disappeared. The backscatter rules in declude really blow which is why I would highly recommend looking at Alligate as your smtp gateway. Kindest Regards Craig Edmonds 123 Marbella Internet W: http://www.123marbella.com/ www.123marbella.com E : mailto:cr...@123marbella.com cr...@123marbella.com From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Michael Graveen Sent: 16 May 2009 13:54 To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] BackScatter I think Greylisting reduces backscatter. Greylisting stops the majority of the SPAM from ever reaching our mail server, so it never has a chance to get bounced back because of a non existent user, etc. Mike _ Hi Everyone - We've been having a few issues with mail servers refusing our mail. Today I ran a test on DNSStuff and found that our IP is on BackScatter.org. They are referencing an event on 4/27, and supposedly we will be removed after 4 weeks if they haven't had any other issues. Of course we can pay to have it removed sooner. I'm not sure if being listed in their DB is the main culprit to the server refusals that I've seen? We switched over to SmarterMail in mid-April. Since 4/27, we have implemented grey listing. Is grey listing a good first line of defense? Is there anything else I should be doing to prevent back scatter? Thanks for your thoughts on this. Todd --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Check for valid email recipients
Are you talking about backscatter? Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : cr...@123marbella.com Craig Edmonds - PGP Public Key To obtain a copy of my PGP Public Key, please go to the following URL: http://www.123marbella.com/pgp/ Craig Edmonds - LinkedIN Information To view my LinkedIn Profile, please go to the following URL http://www.linkedin.com/in/craigedmonds Craig Edmonds - BLOG To view my personal blog go to the url below http://www.craig-edmonds.com http://www.craig-edmonds.com/ LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of redbara...@qwest.net Sent: 22 March 2009 03:02 To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Check for valid email recipients I am using Declude 4.3.7 with Smarter Mail 4.3 with a couple of domain forwarding setup for basic spam virus filtering. I am running into the problem that one of the domains that are forwarded is getting slammed with invalid email address on the domain. Since SM doesn't check for a valid user on the end server I am getting a huge amount of failure noticed trying to go back to invalid senders. This is causing a very large spool and we are getting black listed. Does anyone have a script or a config that would address this? I am ok with deleting the email if it is not a valid recipient if that is my only chose. Thanks Rick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.attachment: winmail.dat
RE: [Declude.JunkMail] Check for valid email recipients
I used to get loads of backscatter attacks and then i found Alligate and I never experienced backscatter again! Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : cr...@123marbella.com From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of redbara...@qwest.net Sent: 22 March 2009 16:09 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Check for valid email recipients Yes, that is the we are currently listed on. _ From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Craig Edmonds Sent: Sunday, March 22, 2009 3:24 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Check for valid email recipients Are you talking about backscatter? Kindest Regards Craig Edmonds 123 Marbella Internet Services W: http://www.123marbella.net/ www.123marbella.com E : mailto:cr...@123marbella.com cr...@123marbella.com Craig Edmonds - PGP Public Key To obtain a copy of my PGP Public Key, please go to the following URL: http://www.123marbella.com/pgp/ http://www.123marbella.com/pgp/ Craig Edmonds - LinkedIN Information To view my LinkedIn Profile, please go to the following URL http://www.linkedin.com/in/craigedmonds http://www.linkedin.com/in/craigedmonds Craig Edmonds - BLOG To view my personal blog go to the url below http://www.craig-edmonds.com http://www.craig-edmonds.com/ LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of redbara...@qwest.net Sent: 22 March 2009 03:02 To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Check for valid email recipients I am using Declude 4.3.7 with Smarter Mail 4.3 with a couple of domain forwarding setup for basic spam virus filtering. I am running into the problem that one of the domains that are forwarded is getting slammed with invalid email address on the domain. Since SM doesn't check for a valid user on the end server I am getting a huge amount of failure noticed trying to go back to invalid senders. This is causing a very large spool and we are getting black listed. Does anyone have a script or a config that would address this? I am ok with deleting the email if it is not a valid recipient if that is my only chose. Thanks Rick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.attachment: winmail.dat
[Declude.JunkMail] website design service spam emails
Okay. I am starting to get seriously annoyed with the spam email below that keeps hitting my own inbox a couple of times a day. Does anyone know a simple way for me to pick up on these mails in declude and add weight without affecting normal mails? Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com E : cr...@123marbella.com -Original Message- From: Don [mailto:zhuazhujih2...@msn.com] Sent: 19 February 2009 08:57 To: webmaster Subject: **Spam? [WEIGHT: 18]**website design service (CA) You are receiving this email because we wish you to use our web design service. We are web design studio from China. We are specialized in web page design, website development, graphics multi-media design, flash website design and other relevant services. We pride ourselves with our technical strength, professional vision, unique style, and most of all, our highly devoted professional designers. We are in position to offer website solution, graphics design, e-commerce solution, online promotion and other medium and small business oriented services. Core offerings Business website design Business website redesign Flash website design Flash website redesign Ecommerce website design Ecommerce website redesign Company website design Company catalog design Company logo design Graphic design Google search engine optimization ERP Solutions Pls check our website to see portfolio. Best regards, Don V.DASK Information Technologies Website team Contact: ittechrespo...@gmail.com Send address to ittechun...@gmail.com for unsubscribe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CBL:IP is Blacklisted
What mail server are you running? Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com E : cr...@123marbella.com -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Todd Richards Sent: 13 February 2009 17:13 To: declude.junkmail@declude.com Subject: [Declude.JunkMail] CBL:IP is Blacklisted Hi Everyone - Late yesterday I started seeing some bounces that our IP address was being rejected because of the following: RCPT TO generated following response: 554 Denied [SHXBL] - Denied by Spamhaus XBL - See http://www.spamhaus.org/query/bl?ip=8.7.193.82 (Mode: normal) I checked and we are, in fact, listed in CBL. I went through the steps to request removal. Is there anything else I should do? I'm really not sure how we got on it anyway. Does anyone know how long it takes? I've got several people hollering at me because anything they send out is being rejected as spam. Todd --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CBL:IP is Blacklisted
I had this problem too and I have imail 8.15 so the stupid fix does not apply to me either. Therefore I had the choice (or rather the ultimatum from CBL) to either upgrade Imail or use a smtp gateway. So I now use Alligate as an smtp server. It funny...notthat they used to whitelist imail users, now they dont, they just give you the ultimatum even when you can prove that your server is legit and well protected. The guys at CBL have their heads up theirwell you can imagine it. Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com E : cr...@123marbella.com -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Todd Richards Sent: 13 February 2009 18:25 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CBL:IP is Blacklisted Thanks Andrew. I just got a note from CBL that says that they are no longer automatically removing Imail machines, as there is a fix. Not sure if my older version (8.2x) is part of that fix or what. Anyway, their message said The CBL attempts to detect compromised machines in a number of ways based upon the email that the CBL's mail servers receive. During this it tries distinguish whether the connections represent real mail servers by ensuring that each connection is claiming a plausible machine name for itself (via SMTP HELO), and not listing any IP that corresponds to a real mail server (or several mail servers if the IP address is a NAT firewall with multiple mail servers behind it). 8.7.193.82 was found to be using several different EHLO/HELO names during multiple connections on or about: 2009:02:12 ~21:30 UTC+/- 15 minutes (approximately 19 hours ago). The names seen included: enwcommunity.com, hcaa.com, mail.nnepa.com, p01c11m022.mxlogic.net, p01c11m096.mxlogic.net, p01c11m102.mxlogic.net, p01c11m107.mxlogic.net, p01c12m013.mxlogic.net, p01c12m062.mxlogic.net The first two are legitimate virtual domains on our server, the third is our server. But I have no idea where the mxlogic.net names are from? Todd -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Colbeck, Andrew Sent: Friday, February 13, 2009 10:56 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CBL:IP is Blacklisted Here's the answer, Todd. http://www.mail-archive.com/imail_fo...@list.ipswitch.com/msg103112.html It's an old problem with CBL and IMail. Certainly, CBL is at fault and by now they should have at least taken up SPF record checking to weed out false positives. I just checked your SPF record and it is valid, so this would have helped you. Andrew. -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Todd Richards Sent: Friday, February 13, 2009 8:42 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CBL:IP is Blacklisted OK, Sorry to cry wolf. I sent them an email directly (which is what they said to do if you are running Imail) and it appears that they have us removed already. Not sure why/how we got added, if it has anything to do with Imail (as they suggest) or what. I'm running several misc. scans on our server to be sure we don't have a problem. Any other suggestions of how/why, or what to check are always appreciated! Todd -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Todd Richards Sent: Friday, February 13, 2009 10:13 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] CBL:IP is Blacklisted Hi Everyone - Late yesterday I started seeing some bounces that our IP address was being rejected because of the following: RCPT TO generated following response: 554 Denied [SHXBL] - Denied by Spamhaus XBL - See http://www.spamhaus.org/query/bl?ip=8.7.193.82 (Mode: normal) I checked and we are, in fact, listed in CBL. I went through the steps to request removal. Is there anything else I should do? I'm really not sure how we got on it anyway. Does anyone know how long it takes? I've got several people hollering at me because anything they send out is being rejected as spam. Todd --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail
RE: [Declude.JunkMail] Imail frowarding bypasses Declude JunkMail?
Hi Kathy, I also get that problem when people are using rules to forward emails. Its very annoying and difficult to explain to clients. I would like to also hear about the workaround for this. Kindest Regards Craig Edmonds http://www.craig-edmonds.com/ http://www.craig-edmonds.com From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Kathy Leonard Sent: 20 December 2008 20:05 To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Imail frowarding bypasses Declude JunkMail? I have a number of people complaining about a lot of spam getting through to mailboxes. After checking, I found that these people either had Inbound rules copying messages or just forwarding to another mailbox outside the server. Other users don't see this level of spam and I wanted to know if anyone had heard of this issue and how to get around it. IMAIL version 2006.1 Declude Version 4.4.18 Kathy Leonard Thanks! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] create a TODOMAIN file
Hi All, Currently in the global.cfg file there is a section like this... # - IP TODOMAIN Example - WHITELISTTODOMAIN @example.com WHITELISTTODOMAIN @ adomain.com WHITELISTTODOMAIN @ hello.com However I would like to add a skip-spam-filtering.txt file so the above would look something like this... WHITELISTfromfile C:\IMail\Declude\Filters\skip-spam-filtering.txt Or WHITELISTTODOMAIN C:\IMail\Declude\Filters\skip-spam-filtering.txt Is this possible? And if so what format should the skip-spam-filtering.txt be? Like this? WHITELISTTODOMAIN @example.com WHITELISTTODOMAIN @ adomain.com WHITELISTTODOMAIN @ hello.com or just a list of addresses or domains like this ? @example.com @adomain.com @hello.com Kindest Regards Craig Edmonds 123 Marbella Internet Services W: http://www.123marbella.net/ www.123marbella.com E : mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] Craig Edmonds - PGP Public Key To obtain a copy of my PGP Public Key, please go to the following URL: http://www.123marbella.com/pgp/ http://www.123marbella.com/pgp/ Craig Edmonds - LinkedIN Information To view my LinkedIn Profile, please go to the following URL http://www.linkedin.com/in/craigedmonds http://www.linkedin.com/in/craigedmonds Craig Edmonds - BLOG To view my personal blog go to the url below http://www.craig-edmonds.com/ http://www.craig-edmonds.com LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] create a TODOMAIN file
Hi David, Maybe I did not explain properly. I need to be able to create a file on my mail server which contains a list of addresses and/or domains, so that when mail is sent to that email/domain its does not get scanned for spam but rather the email just gets delivered to the user. The reason I want to do this is so that I can incorporate a script which will add users domains/email addresses to the file, so that when they have an overdue invoice, their spam filtering gets turned off. (funnily enough bills get paid really fast after about a day of being bombarded with spam) The only way I can think of doing it, is by having an external file to the global.cfg. I dont fancy logging into the mail server and editing the global.cfg every time. What do you think? Is it possible? Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: 09 December 2008 15:40 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] create a TODOMAIN file Craig, TODOMAIN is for email that is being sent TO a specific domain. Whereas a fromfile is email FROM a specific address. Both these configurations are for totally different purposes and cannot be combined. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Tuesday, December 09, 2008 7:44 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] create a TODOMAIN file Hi All, Currently in the global.cfg file there is a section like this... # - IP TODOMAIN Example - WHITELISTTODOMAIN @example.com WHITELISTTODOMAIN @ adomain.com WHITELISTTODOMAIN @ hello.com However I would like to add a skip-spam-filtering.txt file so the above would look something like this... WHITELISTfromfile C:\IMail\Declude\Filters\skip-spam-filtering.txt Or WHITELISTTODOMAIN C:\IMail\Declude\Filters\skip-spam-filtering.txt Is this possible? And if so what format should the skip-spam-filtering.txt be? Like this? WHITELISTTODOMAIN @example.com WHITELISTTODOMAIN @ adomain.com WHITELISTTODOMAIN @ hello.com or just a list of addresses or domains like this ? @example.com @adomain.com @hello.com Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : [EMAIL PROTECTED] Craig Edmonds - PGP Public Key To obtain a copy of my PGP Public Key, please go to the following URL: http://www.123marbella.com/pgp/ Craig Edmonds - LinkedIN Information To view my LinkedIn Profile, please go to the following URL http://www.linkedin.com/in/craigedmonds Craig Edmonds - BLOG To view my personal blog go to the url below http://www.craig-edmonds.com http://www.craig-edmonds.com/ LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] create a TODOMAIN file
Hi David, I will try that. Thanks for the help! Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: 09 December 2008 16:19 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] create a TODOMAIN file Hi Craig, I understood what you are trying to do, but the fromfile and todomain are different functions and I can't see how this could be used for want you want to achieve. Perhaps this would work ? 1. Create or use an existing per-domain folder eg. Example.com 2. When the time comes have your script create a blank txt file and place it in the folder (example.com) with the file name of the user.junkmail eg. Joe.junkmail This would translate to Declude no action for the individual so all spam would go through.. just an idea ? David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Tuesday, December 09, 2008 9:54 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] create a TODOMAIN file Hi David, Maybe I did not explain properly. I need to be able to create a file on my mail server which contains a list of addresses and/or domains, so that when mail is sent to that email/domain its does not get scanned for spam but rather the email just gets delivered to the user. The reason I want to do this is so that I can incorporate a script which will add users domains/email addresses to the file, so that when they have an overdue invoice, their spam filtering gets turned off. (funnily enough bills get paid really fast after about a day of being bombarded with spam) The only way I can think of doing it, is by having an external file to the global.cfg. I dont fancy logging into the mail server and editing the global.cfg every time. What do you think? Is it possible? Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: 09 December 2008 15:40 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] create a TODOMAIN file Craig, TODOMAIN is for email that is being sent TO a specific domain. Whereas a fromfile is email FROM a specific address. Both these configurations are for totally different purposes and cannot be combined. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Tuesday, December 09, 2008 7:44 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] create a TODOMAIN file Hi All, Currently in the global.cfg file there is a section like this... # - IP TODOMAIN Example - WHITELISTTODOMAIN @example.com WHITELISTTODOMAIN @ adomain.com WHITELISTTODOMAIN @ hello.com However I would like to add a skip-spam-filtering.txt file so the above would look something like this... WHITELISTfromfile C:\IMail\Declude\Filters\skip-spam-filtering.txt Or WHITELISTTODOMAIN C:\IMail\Declude\Filters\skip-spam-filtering.txt Is this possible? And if so what format should the skip-spam-filtering.txt be? Like this? WHITELISTTODOMAIN @example.com WHITELISTTODOMAIN @ adomain.com WHITELISTTODOMAIN @ hello.com or just a list of addresses or domains like this ? @example.com @adomain.com @hello.com Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : [EMAIL PROTECTED] Craig Edmonds - PGP Public Key To obtain a copy of my PGP Public Key, please go to the following URL: http://www.123marbella.com/pgp/ Craig Edmonds - LinkedIN Information To view my LinkedIn Profile, please go to the following URL http://www.linkedin.com/in/craigedmonds Craig Edmonds - BLOG To view my personal blog go to the url below http://www.craig-edmonds.com http://www.craig-edmonds.com/ LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni
RE: [Declude.JunkMail] create a TODOMAIN file
Hi Darin, Thanks mate. That also sounds quite good too and I will also try it. Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: 09 December 2008 16:36 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] create a TODOMAIN file Hi Craig, While it's not a whitelist, you could use the fromfile test with a high negative weight to achieve your goal. We have a tiered set of tests that work similar to this: FROMWHITELIST_LOWfromfilepath to file\fromwhitelist_low.txt -1000 FROMWHITELIST_MEDfromfilepath to file\fromwhitelist_med.txt -2000 FROMWHITELIST_HIGHfromfilepath to file\fromwhitelist_high.txt -5000 For reference, we have all test scaled to a hold weight of 100 for granularity and easy calculations. As for the TODOMAIN test, you might instead simply set up a different .junkmail file for that domain or domains. That way you can effectively turn off filtering for it/them. We have some customers who don't want any filtering, so we have the following lines in our $default$.junkmail file to point to separate configs for those domains: REDIRECT [EMAIL PROTECTED] path to file\$postmaster$.junkmail REDIRECT [EMAIL PROTECTED] path to file\$postmaster$.junkmail REDIRECT @example.com path to file\$nofilter$.junkmail We monitor the abuse@ and postmaster@ addresses for all domains. Both the $postmaster$.junkmail and $nofilter$.junkmail are set to WARN on all tests, but we separated them in case we made changes in the future. Hope this helps, Darin. - Original Message - From: Craig Edmonds mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Tuesday, December 09, 2008 7:43 AM Subject: [Declude.JunkMail] create a TODOMAIN file Hi All, Currently in the global.cfg file there is a section like this... # - IP TODOMAIN Example - WHITELISTTODOMAIN @example.com WHITELISTTODOMAIN @ adomain.com WHITELISTTODOMAIN @ hello.com However I would like to add a skip-spam-filtering.txt file so the above would look something like this... WHITELISTfromfile C:\IMail\Declude\Filters\skip-spam-filtering.txt Or WHITELISTTODOMAIN C:\IMail\Declude\Filters\skip-spam-filtering.txt Is this possible? And if so what format should the skip-spam-filtering.txt be? Like this? WHITELISTTODOMAIN @example.com WHITELISTTODOMAIN @ adomain.com WHITELISTTODOMAIN @ hello.com or just a list of addresses or domains like this ? @example.com @adomain.com @hello.com Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : [EMAIL PROTECTED] Craig Edmonds - PGP Public Key To obtain a copy of my PGP Public Key, please go to the following URL: http://www.123marbella.com/pgp/ Craig Edmonds - LinkedIN Information To view my LinkedIn Profile, please go to the following URL http://www.linkedin.com/in/craigedmonds Craig Edmonds - BLOG To view my personal blog go to the url below http://www.craig-edmonds.com http://www.craig-edmonds.com/ LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Re:Declude vs Perry (ES)
I am not a lawyer so dont understand 100%. So Scott Perry agreed to sell the code but kept a copy anyway and when the new owners of Declude went to raise capital they found out that Scott Perry had already developed an additional product with the code they had bought. I dont see the problem myself? The new owners of declude are just protecting their interests no? Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: 09 September 2008 16:16 To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Re:Declude vs Perry Hi David - Below was forwarded to me - as a long time Decluder I am very disappointed in seeing something like this - -Nick http://dozierinternetlawpc.cybertriallawyer.com/computer-lawyer DECLUDE, INC. AND DNSSTUFF, LLC. v. R. SCOTT PERRY DISTRICT OF MASSACHUSETTS (BOSTON) 1:08-cv-11072 FILED: 06/25/08 The ownership of source code and the ownership of the code in general used to build a website is often an overlooked issue. Make sure that you have spelled out not only the ownership of the code but also the requirements relating to what code can be retrieved from the public domain. If you are using a web developer who retains ownership of source code then you risk having that developer use the code with future competitors at much lower costs and with the benefit of your intellectual capital in developing the architecture, engineering, and business processes. Declude purchased the Defendant's anti-virus, anti-spam and anti-hijacking software in September, 2000, and sold the products as Declude Virus, Declude Junkmail, and Declude Hijack. The Defendant, R. Scott Perry, allegedly used the same source code in developing an additional product, and when the Plaintiff went to venture capitalists to raise capital, the detailed due diligence revealed that Defendant had retained a copy of the source code contrary to the provisions of the purchase agreement in 2000, and had again sold some of the same code to the Plaintiff in the new product he had launched. The Plaintiff has sued the individual Defendant for copyright infringement, breach of contract, fraud, conversion, unjust enrichment, and unfair and deceptive acts and practices. Dozier Internet Law Cross-Reference Number 1190. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Alligate Problems (ES)
Yeah. Glad to hear that it all works for you. ALWAYS copy and paste domain names and email addresses!!! Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fosseen Sent: 29 August 2008 16:03 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] OT: Alligate Problems Thanks everyone for your input. It looks like my install is now working as it should be. The slow delivery times was caused by performance problems on a remote mail server and a MX record that should have been reconfigured. The simple story was that 5+ years ago I was running backup smtp servers for some of my clients. The problem was that I still had one of these clients setup with me running a backup to their mailserver. What looks to have happened is that the recent increase in mail caused their mail server beyond capacity which caused an assortment of problems from not responding, to starting to accept mail and then stall. So when their mail server was choking mail started to come into my Alligate server. When my Alligate tried to verify users it would contact the sick mail server which for all practical purposes tar-pitted the requests. Eventually Alligate was using all it's resources to establish connections to a mail server that could not complete requests, and email simply backed up. Once AGSupport reconfigured my AG box to not accept mail for the problem domain the problem went away (after is cleared it's backlog). The 2nd issue was a new domain I added I misspelled the domain name. Even after I had checked the spelling on not less than 5 occasions I missed the typo each time. Once that was corrected AG worked as expected. -- From: Scott Fosseen [EMAIL PROTECTED] Sent: Monday, August 25, 2008 5:19 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Alligate Problems | From the recommendations from this list I am currently evaling alligate. I | have to say my installation has been plagued with problems. I installed on | a fresh HP DL360 G3 with dual 2.8 Ghz Xeon processors, 4 gig of ram, and | mirrored Ultra320 SCSI 72 Gig drives. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Re: Alligate Problems (ES)
This would be just a guess but if it were me I would have Imail run on port 2525 and Alligate on 25. Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: 27 August 2008 15:05 To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Re: Alligate Problems Harry If you are running Alligate AND IMail on the same machine, how do you have DNS / Alligate / IMail configured? I'm a little confused. If IMail is set up to respond on port 25, what did you have to do to have Alligate get port 25 and NOT IMail? AND, when the Customer SENDS an email, does it go thru Alligate also? Or does the Customers email go directly to IMail? My configuration Ex: for domain xyz.com in DNS an A record points to the IP on the IMail server a MX record points to the A record mail A 123.123.123.123 MX 10 mail.xyz.com Customer (in Outlook Express) POP3 entry is mail.xyz.com SMTP entry is mail.xyz.com Customer can also go to http://mail.xyz.com http://mail.xyz.com for web email Does anything have to change : (1) in DNS (2) at the Customers end Thanks very much Ferrell Ard - Original Message - From: Harry vanderzand mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: mailto:declude.junkmail@declude.com declude.junkmail@declude.com Sent: Monday, August 25, 2008 9:32 PM Subject: RE: [Declude.JunkMail] OT: Alligate Problems I love Alligate. We have never had any problems with it and it takes care of over 80% of the spam at the front end. We run it on the same box as my imail software and when we implemented it the server went from an average of 90% utilization to around 50%. I find it well worth it Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Re: Alligate Problems (ES)
Dang. Thats good Harry. Kind of wish I did not splash out 10k for a new server specially for Alligate!!! :o( Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: 27 August 2008 15:23 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Re: Alligate Problems Alligate and Imail have different IPs on the same machine. In my setup all MX records point to the Alligate IP of x.x.x.22 Alligate then forwards the mail to Imail at x.x.x.12. You also need to be sure that imail only listens on its own IP and no others on the machine. At this point I still have my clients sending mail out through Imail so that I can scan the mail for spam. It is simple and works very well I have to give credit to Darrell at Invariant Systems who has way more experience with this and who was a great help in getting this set up and working. Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Wednesday, August 27, 2008 9:05 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Re: Alligate Problems Harry If you are running Alligate AND IMail on the same machine, how do you have DNS / Alligate / IMail configured? I'm a little confused. If IMail is set up to respond on port 25, what did you have to do to have Alligate get port 25 and NOT IMail? AND, when the Customer SENDS an email, does it go thru Alligate also? Or does the Customers email go directly to IMail? My configuration Ex: for domain xyz.com in DNS an A record points to the IP on the IMail server a MX record points to the A record mail A 123.123.123.123 MX 10 mail.xyz.com Customer (in Outlook Express) POP3 entry is mail.xyz.com SMTP entry is mail.xyz.com Customer can also go to http://mail.xyz.com http://mail.xyz.com for web email Does anything have to change : (1) in DNS (2) at the Customers end Thanks very much Ferrell Ard - Original Message - From: Harry vanderzand mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: mailto:declude.junkmail@declude.com declude.junkmail@declude.com Sent: Monday, August 25, 2008 9:32 PM Subject: RE: [Declude.JunkMail] OT: Alligate Problems I love Alligate. We have never had any problems with it and it takes care of over 80% of the spam at the front end. We run it on the same box as my imail software and when we implemented it the server went from an average of 90% utilization to around 50%. I find it well worth it Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Alligate Problems (ES)
I run Alligate also in front of my Imail server. I got it for the backscatter. No more backscatter my friends! Alligate is brilliant!! If you are having a delay of 2 hours, have you checked your /imail/proc/ folder to see if there is anything sitting in there? Youa re running smarter mail of course so dont have a /imail/proc/ folder but there must be the equivalent in smartermail. ;o) Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com E : [EMAIL PROTECTED] Craig Edmonds - PGP Public Key To obtain a copy of my PGP Public Key, please go to the following URL: http://www.123marbella.com/pgp/ Craig Edmonds - LinkedIN Information To view my LinkedIn Profile, please go to the following URL http://www.linkedin.com/in/craigedmonds LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: 26 August 2008 03:32 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Alligate Problems I love Alligate. We have never had any problems with it and it takes care of over 80% of the spam at the front end. We run it on the same box as my imail software and when we implemented it the server went from an average of 90% utilization to around 50%. I find it well worth it Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fosseen Sent: Monday, August 25, 2008 6:19 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Alligate Problems From the recommendations from this list I am currently evaling alligate. I have to say my installation has been plagued with problems. I installed on a fresh HP DL360 G3 with dual 2.8 Ghz Xeon processors, 4 gig of ram, and mirrored Ultra320 SCSI 72 Gig drives. I have settings that revert back to previous settings after I save, and I have not been able to tell how many messages are waiting to be delivered to my Smarter mail server running declude. I know I am only running an eval, but my first support request took a while. I am currently have 1 Smarter mail district complaining about long delivery times. The one email I looked up my Alligate server said it received the mail at 2pm, but my Smarter mail server shows delivery at 4pm. I was not able to find anywhere in the alligate logs where it tried to send the message to my Smarter mail server. My Smarter mail server is running on a Dual Quad core system and is hardly tasked. I guess I am looking for a word of encouragement from the alligate supporters out there that I should stay diligent or if there are any tips you can share. _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ You can go and find a mailbox right now, open the door to a tin box - tin door, no lock - with unencrypted information in English, sealed in a paper-thin envelope with spit, yet people are worried about online privacy. - Scott McNeely, CEO, Sun Microsystems _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL
RE: [Declude.JunkMail] Mail Pre-Processor recommendations (ES)
I just installed Alligate in front of my decluded mail server and it certainly cuts down alot of the traffic to the mail server. Previously the cpu on the declude mail server was 60-90% all day, now it rarely goes over 10%. No more backscatter! No more dictionary attacks. Its pretty straightforward to configure and only took me about an hour or so. A small tip though in order to save all the pain of dns changes if you have many domains, to redirect all your smtp traffic to the Alligate server, you can configure your router to send all port 25 traffic to the Alligate server instead of the mail server. Declude is an excellent product, but add Alligate to it and you you are onto a winner. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: 28 May 2008 23:32 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Mail Pre-Processor recommendations Scott, Alligate is a good gateway to use when you have something like Declude behind it. The only reason that I can think of that your Barracuda box is seeing that many messages would be because you might not be validating addresses. Like Andrew said, you can cut your connection traffic by 95% with ease, but a large number of those connections are to bad addresses (backscatter and 'dictionary' attacks). You must validate addresses at your gateway. You can run Alligate on a single core box with 1 GB of memory and a single hard drive. Just make sure to dedicate the box to Alligate in order to avoid issues when resources are that sparse. Matt Scott Fosseen wrote: I believe I have seen some replies to this already, but I though I would put this out again. I am hosting about 30 domains worth of email and filtering for an additional 10 domains. My current configuration is all mail is pre-filtered through a Barracuda 400 box, then forwarded to a Smartermail 4.x server running Declude with Sniffer, Zero Hour, invURIBL. The Smartermail/Declude box is a Dual Quad Core HP server with 2 Gig of RAM. I am currently receiving about 600k email messages a day on the Barracuda box, and it is seeing performance issues. Before I purchase a 2nd Barracuda box I though I would check to see if anyone has a better solution. Declude still catches 40-60% SPAM after the Barracuda box. Thanks _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ We live in a world today where lemonade is made from artificial flavors and furniture polish is made from real lemons. - Alfred E.Neumann MAD magazine _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E
RE: [Declude.JunkMail] PCRE check (ES)
Hi John,
Keep us posted how you get on because I have no idea about regular expressions
and would like to see how you trun out.
:o)
Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.net
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
Sent: 23 May 2008 17:07
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] PCRE check
I am taking my first stab at regular expressions.
Trying to write a line to catch all of the @ allen info xx . info from
addresses.
So far, I have mailfrom 10 PCRE @allen(*{0,6}).info
Is that to broad or not efficient? (I think that means look for any 6
characters between @allen and .info is a match.
John T
eServices For You
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email
Hi Ferrell, Its called backscatter. I had to post some info about it on my site for my own clients. Feel free to copy it. http://www.123marbella.net/kb.html#6 I am currently looking at alligate gateway in order to add some added protection to my mail network. However, declude does have a filter for this and i did install it and no one has really complained since then so it may have worked. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: 22 April 2008 17:22 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] SPAMMERS using postmaster@domain in their FROM email Importance: High Don't know if Declude (or anyone) can help, but we are seeing a L O T of bounce-backs that show that the SPAMMERS are using valid postmaster@ mailto:[EMAIL PROTECTED] domain (that we host) as their FROM address and send the SPAM out thru Post Offices other than ours. When the SPAM goes to a non-existant address, it bounces back to the valid postmaster@ mailto:[EMAIL PROTECTED] domain on my Server. We are getting 5,000 - 10,000 of these bounces per day.. Any suggestions? Thanks very much Ferrell --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: alligate
Hi All, I have installed alligate on a new dedicated server and configured everything by the looks of it. Does anyone know what DNS settings I need to make on my domain and what I need to change on my IMAIL server? I sent a support ticket to alligate about 10 seconds ago but am itching to get it working and wondered if anyone here knew. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: alligate
Hi Harry, Thanks for that. I will try it! Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: 22 April 2008 21:12 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: alligate Your MX record should be changed to the new Alligate IP address. Alligate will send mail to imail server No change needed in Imail as far as I recall Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Tuesday, April 22, 2008 2:58 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: alligate Hi All, I have installed alligate on a new dedicated server and configured everything by the looks of it. Does anyone know what DNS settings I need to make on my domain and what I need to change on my IMAIL server? I sent a support ticket to alligate about 10 seconds ago but am itching to get it working and wondered if anyone here knew. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Reasons to renew
Hi Michael, I am sorry to hear you are having a struggle, but I am running mine on HP servers also and have had no real problems at all in fact I have not had to reboot my server for over 18 months now. Is your server a dedicated mail server or do you run anything else on it? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: 19 April 2008 15:33 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Reasons to renew Michael, Judging by that screen cap you are having a rough time to say the least. I am sure you have exhausted a ton of options, but have you turned off DEP for Declude? I have seen repeated crashes like that on a system which did not exclude Declude under DEP. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Michael Hardrick wrote: Greetings All, I hate to be a Naysayer, but I will not be renewing Declude. I dont usually write negative reviews, but this is an exception. Ive lost several customers due to our inability to get Declude to function. Ive been using the product since about 2000. The past three years have been dismal. Between spools filling up, system crashes, CPU loads at 100%, Memory Leaks, Application Errors, Application Hangs, GP Faults, etc... Declude support was always there to point the finger back at me and the server. Bad DNS servers, Bad Memory, Bad CPUs, or something wrong with the version of Windows I was running. I purchased a HP Proliant (2CPUs, 6-146GB HDD, 4-GB RAM, Win2k3) and thought that would resolve the issues. The server I have running must have cron jobs to reboot the server every morning at 5AM and restart the declude service every two hours. We login into the server daily to clear pop-up errors off the server. http://www.tnweb.com/images/declude-error1.png This is the only way to keep the server running. I keep a very limited amount of traffic on the server. No need to push the envelope. Regards, Mike Hardrick TNWEB *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Craig Edmonds *Sent:* Thursday, April 03, 2008 3:37 PM *To:* declude.junkmail@declude.com *Subject:* RE: [Declude.JunkMail] Reasons to renew I second that. I am not trying to brown nose or anything here but without declude we would be completely screwed. In 3 years with declude I think I have only had to email them once with a support query and that was answered pretty much within an hour. Sure, some spam gets through now and again but there have been times where I have mucked about with the declude config settings and the spam floodgates opened and boy, my clients noticed the difference and were thanking me the next day. I have no problem renewing my subscriptions every year. Kindest Regards Craig Edmonds 123 Marbella Internet _www.123marbella.net_ LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Stephan Chayer *Sent:* 03 April 2008 22:21 *To:* declude.junkmail@declude.com *Subject:* RE: [Declude.JunkMail] Reasons to renew Dan, Todd, I feel a little like you. We are using, selling and supporting Declude for the past 4 years. It works great for us. Especially since they brought up version 4 including Commtouch and AVG, that was a nice move. We went through all the product and pricing changes for the past years. We were surprised when they conbined all the products but they honoured all the previous purchases from all our customers. We deal with other vendors that would have been much more agressive that Declude in some situations. I believe that Decluce's pricing is fair and attractive for customers, the product works
RE: Re[2]: [Declude.JunkMail] form spam filter
Sorry for the last email everyone with the attachment, i meant to send it directly to Pete at Arm Research. I clicked the reply button wrote my mail and realised about 10 milliseconds after clicking send which by that time the email had already gone from my outbox. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Pete McNeil Sent: 09 April 2008 16:41 To: Craig Edmonds Subject: Re[2]: [Declude.JunkMail] form spam filter On Wednesday, April 9, 2008, 10:01:56 AM, Craig wrote: Hi Darin, I guess what I am looking for from Declude (or a third party) is to provide me a filter that will phrase filter the incoming form mail and determine if its a spammy one or not. We may be able to help you. Please send some samples (zipped) off list -- [EMAIL PROTECTED] _M --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] form spam filter
Thanks people for the comments. I will stick with captchas for now but it would be great if declude could figure a nice filter to deal with it, at the end of the day its still incoming spam. Kindest Regards Craig Edmonds 123 Marbella Web Design in Spain W: www.123marbella.net From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: 09 April 2008 15:09 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] form spam filter Hi Matt, Some do, some don't. I've seen both methods used on some customer sites. Setting session variables on the form page definitely wouldn't work, as a spammer that hits the form would receive the same session information anyone else would. Certainly checking data against constraints is _always_ important, whether to prevent hacking, avoid data exceptions, enforce business rules, etc. The method you outline seems like it would only work if the spammer doesn't submit to all fields. Some of the attempts we've seen populated all fields, so this wouldn't work on those. I'd stick with CAPTCHA as the best and most foolproof method to avoid these problems. It's fairly easy to implement (there are a number of free examples in public domain), is familiar to most people filling out the forms, and works well. Darin. - Original Message - From: Matt mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, April 09, 2008 8:55 AM Subject: Re: [Declude.JunkMail] form spam filter The form spammers are smarter than to go directly to the mail script. They will hit for the form submission page with what appears to be IE and submit the form. They even handle cookies correctly. The trick for form spam is to take fields like your Name and E-mail and rename the variables to something like ignore-old-data1 and ignore-old-data2 and adjust your mailer script for the new names. Then you insert new form fields in the form page that are hidden with a DIV and call them Name and E-mail. Your mailer script should pretend that the E-mail was successful if these fields have data in them, but you should simply 86 the actual message. This will trick their testing software into thinking that they were successful, and the DIV's with visibility hidden will not be seen by normal visitors. You might also want to put some javascript in the form submission page that looks for a URL in the form and warn the submitter that they can't send URL's, and then also have the mailer script silently reject a submission that has a URL in it. RegEx would be required in both JavaScript and the ASP or whatever code to do the URL checking. As far as I know, this seems to work perfectly, but setting session variables on the form page doesn't do a damn thing. Matt Darin Cox wrote: Since forms all use different emailers, and the form content is different as well, your only hope is content filtering based on what the spammer submitted... like SURBL filtering or REGEX on the spammer submission. These days, web-based form processing pages should minimally check that the referring page is what it is supposed to be (i.e. the form page submit button was clicked as opposed to a spammer submitting directly to the form action URL), and better yet implement CAPTCHA, require a login, or some other similar security measure. Darin. - Original Message - From: Craig Edmonds mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, April 09, 2008 3:16 AM Subject: [Declude.JunkMail] form spam filter Hi All, Is there a filter for form spam? Some clients complain that they get form spammers sending in junk via their web forms. Some clients have captchas on their forms some don't, but I would like to be able to filter out the junk at declude level. Any ideas? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail
RE: [Declude.JunkMail] Forged-Spam Backscatter
I have been having exactly the same problem on both mail servers. Both are. Imail 8.15 Declude 4.3.64 invURIBL 3.1.1 Sniffer Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Comerford Sent: 03 April 2008 20:46 To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Forged-Spam Backscatter Over the last several weeks we have seen a dramatic increase in spam hitting our server. From about 70,000 mails a day to around 110,000 /day. Most destined for our users is getting properly filtered by declude. What is getting thru is backscatter from spam that is forging addresses from domains we host. It seems just about any address that is posted on a website seems to be being used to forge outgoing spam (not from our server) -- and is generating all sorts of bounce messages. I suspect there is not much I can do to block this backscatter without blocking legit bounce messages... but I thought I'd ask. Here is our config: Imail 8.22 Declude 4.3.64 invURIBL 3.1.1 Sniffer --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Reasons to renew
I second that. I am not trying to brown nose or anything here but without declude we would be completely screwed. In 3 years with declude I think I have only had to email them once with a support query and that was answered pretty much within an hour. Sure, some spam gets through now and again but there have been times where I have mucked about with the declude config settings and the spam floodgates opened and boy, my clients noticed the difference and were thanking me the next day. I have no problem renewing my subscriptions every year. Kindest Regards Craig Edmonds 123 Marbella Internet www.123marbella.net LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stephan Chayer Sent: 03 April 2008 22:21 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Reasons to renew Dan, Todd, I feel a little like you. We are using, selling and supporting Declude for the past 4 years. It works great for us. Especially since they brought up version 4 including Commtouch and AVG, that was a nice move. We went through all the product and pricing changes for the past years. We were surprised when they conbined all the products but they honoured all the previous purchases from all our customers. We deal with other vendors that would have been much more agressive that Declude in some situations. I believe that Decluce's pricing is fair and attractive for customers, the product works well and the support is just amazing. Bottom line, if you do not make money, you can't give support and put ameliorations in a product. I wish that everyone could continue to do business and make money. Keep the good work Stephan Chayer IntraSoft Solutions Inc. [EMAIL PROTECTED] _ De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Linda Pagillo Envoyé : 3 avril, 2008 14:35 À : declude.junkmail@declude.com Objet : Re: [Declude.JunkMail] Reasons to renew Thank you Todd. It's my pleasure! If you have any further questions, please do not hesitate to contact me either by email or call Toll free 1-866-332-5833 Ext.2 Linda Pagillo Technical Support Engineer | Declude Your Email Security is our business Direct: 978-225-8436 Office: 978.499.2933 Ext.2 Toll Free: 1-866.332.5833 Ext.2 Fax: 978.334.0700 Email: [EMAIL PROTECTED] - Original Message - From: Todd Richards mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, April 03, 2008 11:06 AM Subject: RE: [Declude.JunkMail] Reasons to renew I totally agree with Dans email. Declude has been working great for us, so its money well spent. On the other hand, our IMail SA just expired, which cost us close to $1000 a year and a half ago, and I was never satisfied to the point where I could upgrade. So that amounted to worthless money spent. Im pretty comfortable when David says an update is available that it really is ready. The support esp. Linda has been fantastic. Our SA with Declude is up in June. I have every intention of renewing. Todd From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Shadix Sent: Wednesday, April 02, 2008 1:50 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Reasons to renew I, for one, like infrequent but solid updates. I dont have time to be constantly installing and testing updates, especially if they are problematic. Also, Declude is the only affordable anti-virus / anti-spam e-mail solution that Ive encountered. I havent really been looking lately but the others that Ive seen were a lot more expensive. Everyone has to choose the product that works for them. Declude works for me. Dan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, April 02, 2008 11:58 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Reasons to renew Kevin, Every effort has been made to ensure that major releases are problem free, this has been the reason for the delay in major releases, however if you notice that between major releases we make available several interim releases just as Scott had done
RE: [Declude.JunkMail] My server has been totally revived!!!
Oka. I am off to get the trial right now! Kindest Regards Craig Edmonds 123 Marbella Internet www.123marbella.net LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: 01 April 2008 23:35 To: declude.junkmail@declude.com Cc: [EMAIL PROTECTED] Subject: [Declude.JunkMail] My server has been totally revived!!! I just want to share the effect of adding a gateway to my setup. I installed Alligate on the same server that is handling my imail/declude/sniffer/invuribl. My server was getting to be quite overloaded especially during peak time. I thought I was only processing about 40,000 mails a day. I was going by the imail daily report. Of course that was wrong. It does not include all the spam that never makes it to imail. I found that our when I installed DLAnalyzer from invariant Systems. To my amazement I was processing 500,000 mails a day. No wonder there was the odd crash of decludeproc or imail smtp After investigating solutions and a discussion with Darrell from Invariant, I decided to get Alligate. That was last week. I have it running smoothly with about 200 domains and my server has room to spare. Whereas the hardware was averaging around 90% utilization is it now at half that. Declude\imail is now reporting only 67,000 mails a day. Imail itself sees only 20,000. What a change. I sure hated to spend another 800 on spam but sure am glad I did. My hardware can last much longer. Times sure change 98% spam is huge when you get 500,000 mails a day Much thanks to Darrell for his assistance. I will gladly share more if anyone is curious Harry Vanderzand --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: AW: AW: [Declude.JunkMail] Hardware upgrade -Software Crossgrade?
Better the devil you know. Make sure smartermail works for you before switching. Kindest Regards Craig Edmonds 123 Marbella Internet www.123marbella.net From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: 11 March 2008 15:00 To: declude.junkmail@declude.com Subject: RE: AW: AW: [Declude.JunkMail] Hardware upgrade -Software Crossgrade? Matt - I'm not arguing, but simply asking as I'm looking at moving to SM. Our license with Ipswitch is 3x that of the same version of SM. The service agreement that we purchased - but never used (because I never had enough faith in the new version of IMail) is almost twice the cost of purchasing SM new. From what I've heard from everyone I've talked to, SM actually works, so the support calls are minimal anyway. You do get free updates within the version. So if once a year I have to buy the newest version at 65% of the retail, which is still much cheaper than Imail, I'm not sure what the difference is? My SA with Imail actually just expired as I haven't had a chance to test SM yet. So my dilemma is do I renew my Imail SA at almost $1000,so I can continue running 8.22, or purchase a brand new version of SM for half that through Declude, and have the features that work that we've been waiting for? As for the software protection, I was working with a rep from SmarterMail at the start of February. He informed me right then and there that they were planning a release at the end of Q1, and that I would get the new update. Doing the math, that is almost 45 days on the bat. So either they actually keep their promises (unlike Ipswitch) or they would have stretched that time to take care of me. Again, maybe I'm missing something so this wasn't to start an argument. And I apologize for continuing the OT email. Todd From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Monday, March 10, 2008 5:17 PM To: declude.junkmail@declude.com Subject: Re: AW: AW: [Declude.JunkMail] Hardware upgrade -Software Crossgrade? Wow. One thing immediately pops into my head...these people are greedy as hell! Prices continue to rise with each successive version, and they continue this odd behavior of not selling software subscriptions, but instead charging 65% of the original price for upgrades. This might be all fine and dandy except for the fact that they are on a one-year upgrade cycle, they stop updating previous versions, and you don't get a support contract with your purchase. Of course this flies in the face of the reality of the market where hosting is heavily commoditized and only getting worse. SmarterMail works well, but it's a shame that they don't understand the economies of their customers, and that works against them. I would definitely argue that by not offering a software subscription at a reasonable and standard market rate of 30% of full retail price, they fail to capture a good deal of upgrade potential and therefore upgrade revenue, and they lose goodwill by having fewer customers due to this pricing. They also lose customers by only offering 45 days (formerly 30 days) of protection for new purchases, so anyone thinking about buying it now would be better off waiting for the release just to guarantee that they weren't stuck on an unsupported version of the product. That's hugely boneheaded of them. So it would be close to a wash in revenue to do something as typical and expected as to have a software subscription for a standard market rate. Matt --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hardware upgrade -Software Crossgrade?
Hi Alex, When you move to new hardware the performance will be much better. I recently upgraded two mail servers running imail 8.22 due to performance issues and now they work really well. I have about the same amount of domains per server. Now with the upgrade I can probably double the capacity of domains. On the new server, make sure you have plenty of RAM 2GB min, Min 10k scsi drives. (we use 15k to be sure) I was thinking of migrating to smartermail but the migration looks very painful and with the amount of domains you have you are looking at several hours of downtime for sure. If you are thinking of migrating, do your research first mate. Kindest Regards Craig Edmonds 123 Marbella Internet www.123marbella.net From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Klinge Sent: 10 March 2008 13:19 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Hardware upgrade -Software Crossgrade? Smartermail actually works. ~Rick From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Monday, March 10, 2008 3:44 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Hardware upgrade -Software Crossgrade? Hello, we are going to move to an new hardware. At the moment we are running Imail 8, Declude, Sniffer. It works, but Spam detection is not perfect and overall system performance is getting worse. Should we - wait for IMail 10? - use IMail 9? - stay with Imail 8? - move to Smartermail? We host about 200 domains, with about 2000 Mailboxes. Alex --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DecludePro Eating Up CPU
:o) 1 Meg of Ram is not much Mate. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Dodell Sent: 10 February 2008 19:10 To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DecludePro Eating Up CPU I am running a Dell with a Pentium D 3.0 machine / 1 meg of RAM. Decludeproc is eating up 50 to 75% of the CPU cycles ... is this normal, increase the amount of RAM? David --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted
Hi John, I know! Its gone pretty quiet on this list. Alive and Kicking over here! Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: 24 January 2008 17:35 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted 2 years ago, I would have had a dozen replies by now and even possible a nice discussion going on. Where is everybody? John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Monday, January 21, 2008 1:05 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted I am trying to figure out how to add a line in the header of a message to indicate it is over xKB in size with that incoming message being whitelisted via authenticated sender. Example, user1 on the local Imail server sends a message to user2 on the local Imail server, hence the email is whitelisted since user1 authenticated. But the message is over 2 MB and user2 is currently traveling and using a slow broadband card. The desired action is to have a test that fails on the over 1 MB size and an inbound rule on user2 that will then move that message to a submail box called LargeFiles. This way, user2 when he connects via his Outlook does not try to download that email, instead he will be responsible for checking that folder via webmail and then if he needs it right away he can either download the attachment via webmail or move it to his normal inbox. Thoughts, Ideas, cookies? John T --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] Blackice Server EndOfLife - need replacement
Can you use eEye's Blink on a mail server? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: 04 January 2008 21:37 To: Howard Smith (N.O.R.A.D.) Subject: Re[2]: [Declude.JunkMail] Blackice Server EndOfLife - need replacement To replace blackice functions as to load on a server and monitor and block what applications sends out on individual ports. I have an offending app or task that trying to send out on random ports , I am trying to find it and block it Yep, a HIPS like BlackIce can't be replaced by a separate firewall. I have kind of been holding in reserve my newfound love for eEye's Blink, but there it is -- pls contact me off-list for more info if you want. I'm currently rolling it out to 125 stations and find it more than able. I have no relationship to the vendor. --Sandy --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Use MS IIS SMTP server as a gateway
Hi All, A little off topic but i was wondering if anyone can help me find a tutorial on how to set up my IIS server running Imail 8.15 and Declude to use the MS IIS SMTP server as a gateway. I am having or going to have problems with CBL blacklisting me again in a few days unless I use the ms smtp server as a gateway for my email. Any help on this would be great. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] upgrade/migrate from Imail 8.15 to Smartermail
The time has come to dump Imail 8.15 which has been pretty solid but due to CBL.ABUSE picking on me for using Imail 8.15 I need to get rid of imail and I cant upgrade to Imail 2006 so Smartermail is looking like the best option for now. (basically cbl said you have to upgrade your imailwe don't care if it costs you money) I have two dedicated mail servers on windows I need to upgrade. Has anyone been through the migration process of Imail to smartermail and is there much involved? Also, I run declude, do I have to make many changes to that also and does anyone know if there is a cost for that? Any advice on this would be appreciated. Kindest Regards Craig Edmonds 123 Marbella Internet W: http://www.123marbella.com www.123marbella.com E : mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] upgrade/migrate from Imail 8.15 to Smartermail
Thanks Andrew, you are a star! Great advice and much appreciated. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: 11 December 2007 13:46 To: Craig Edmonds Subject: Re: [Declude.JunkMail] upgrade/migrate from Imail 8.15 to Smartermail Hi, Just got through doing the upgrade, a few things you should do/know. 1) cleanup imail email boxes before you run the migration utilityit takes a lot longer if you don't. 2) smartermail requires using the full email address ([EMAIL PROTECTED]) for logging in (pop3). By default, it's that way with the web interface also. 3) get smartermail setup on IIS ASAP as opposed to the built in smartermail web interface... you'll have performance issues otherwise 4) the default password rules in smartermail are for at least 5 character password and different username/pw (you can't use username for the password for the account username). If you users with shorter passwords, they'll have issues so you may want to change that from the start. 5) declude is more tightly integrated with smartermail than Imail...you're gonna like that :) Give declude a call and they'll help you get that setup. 6) make sure you read the install/migration instructions carefully. 7) If you have dialup customers, they're not going to like you in the beginningsmartermail web interface is more graphical/slower 8) there is a management learning curse...smartmail is different from Imail. You'll like smartermail better after you learn to navigate. The key here is to login as the admin first and learn to get around from there. Thanks, Andrew Baldwin [EMAIL PROTECTED] http://www.thumpernet.com 315-282-0020 Tuesday, December 11, 2007, 3:25:04 AM, you wrote: The time has come to dump Imail 8.15 which has been pretty solid but due to CBL.ABUSE picking on me for using Imail 8.15 I need to get rid of imail and I cant upgrade to Imail 2006 so Smartermail is looking like the best option for now. (basically cbl said you have to upgrade your imailwe don't care if it costs you money) I have two dedicated mail servers on windows I need to upgrade. Has anyone been through the migration process of Imail to smartermail and is there much involved? Also, I run declude, do I have to make many changes to that also and does anyone know if there is a cost for that? Any advice on this would be appreciated. Kindest Regards Craig Edmonds 123 Marbella Internet W: http://www.123marbella.com www.123marbella.com E : mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Smartermail tutorials
Hi All, I stumbled across these tutorials and find them very useful and hope some of you smarter mail users will too. I bought some flash tutorials off this guy and he does a real great job and its real value for money. You send him your logo and he drops it into the tutorials and they look just like you made them yourself. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net From: DemoWolf [mailto:[EMAIL PROTECTED] Sent: 19 July 2007 22:31 To: [EMAIL PROTECTED] Subject: New SmarterMail 4 tutorials (with or without voice) now available! We've just released tutorials for SmarterMail 4, a popular email application provided by many Windows hosting providers. We have two new series for SmarterMail 4, including 16 standard tutorials and 16 VOICE audio narrated tutorials. Details and pricing is as follows: SmarterMail 4 series - includes 16 tutorials - custom branding with your company logo is free - custom text box colors are free Regular Price: $99.95 Sale Price: $49.95 http://www.demowolf.com/smartermail-4.htm SmarterMail 4 VOICE series - includes 16 tutorials with voice-audio narration - custom branding with your company logo is free - custom text box colors are free Regular Price: $179.95 Sale Price: $99.95 http://www.demowolf.com/smartermail-4-voice.htm --- REMINDER: Anyone who has previously purchased any of our standard non-voice tutorials, and would rather have the voice versions instead, will get a full credit for the money spent on purchasing the non-voice versions. In other words, you only have to pay the difference in price to upgrade to voice! --- We now have over 1,400 stock tutorials available within 24 hours, including: cPanel (7 skins), Helm, H-Sphere, Plesk, Virtuozzo, SeverCP, Direct Admin, phpMyAdmin, RVSiteBuilder, FTP, Email, SmarterMail, Updating DNS, Domain Transfers, Private Nameservers Many tutorials are available in translated versions (Dutch, Spanish, Brazilian Portuguese). Be sure to check out our voice tutorials with audio narration... 18 different voices available for custom jobs! http://www.demowolf.com/voice-tutorials.htm Custom Tutorials We specialize in custom tutorials and demos! Have an application that you want tutorials for? Want to include voice narration in the tutorials? Interactivity (i.e. click here to continue)? Custom website links? Online slide presentations? Contact us for a free, no obligation quote today! For more information on any of the above, feel free to contact me directly. My name is Rob Moore, and I am the owner of DemoWolf. I can be reached by toll free telephone (from USA or Canada), regular telephone, email or Live Chat. I look forward to hearing from you! Regards, --- Rob Moore - Founder/CEO DemoWolf.com Toll Free: 1-866-905-4678 (in USA Canada) Local Tel: 1-902-820-4678 Email: [EMAIL PROTECTED] Live Chat: click the Ask Live icon at www.demowolf.com http://www.demowolf.com/ Sent to: [EMAIL PROTECTED] | http://www.emsrvr.com/unsubscribe.php?co=4567849su=3455918039ca=84051719 One-Click to Unsubscribe This email was sent from: [EMAIL PROTECTED] at demowolf.com 3650 Hammonds Plains Rd. Unit 14, Suite 389 | Upper Tantallon, NS B3Z 1R3, Canada | 902-820-4678 Powered by: http://www.webmail.us Webmail.us - The Email Hosting Company --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] frustration
Same Here. Subscribe to the following plugins in addition to Declude...(unfortunately on its own its not enough unless you sit tweaking it all day everyday) Sniffer from Armresearch invURIBL from invariant systems ZEROHOUR from Commtouch With that combo you cant go wrong. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: 18 July 2007 23:57 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] frustration We're running pretty well... catching somewhere between 99.7% and 99.9% of incoming spam. Declude 2.0.6 (waiting on Imail 2006 to stabilize before upgrading to the latest version) on IMail 8.22, along with Sniffer and invURIBL. Darin. - Original Message - From: Uwe Degenhardt [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, July 18, 2007 5:33 PM Subject: [Declude.JunkMail] frustration Hi everybody on the list, please excuse me, but I would like to share my frustration with you. I am poured with SPAM the last two-to-three weeks. It gets worse every day. Am I the only one who is seeing this ? I am in a good contact with David of Declude. He is doing a fantastic job, but sometimes I loose my faith and my trust, that we can win the SPAM-fight. It appeals to me, as it is like the old principle: If you put water on the fire at one place, you have to run to the next place to delete it there too. And the SPAMMERs will get cleverer everyday. What do you guys think ? Are you frustrated as well ? Uwe --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: server monitoring
I have been using http://www.websitepulse.com www.websitepulse.com for the last 5 years and they have not let me down yet. Kindest Regards Craig Edmonds 123 Marbella Internet W:www.123marbella.net From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: 22 May 2007 11:05 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: server monitoring I have switched from WhatsUp to Network Monitor by Numara Software, the same company that sells Track IT. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Monday, May 21, 2007 7:47 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: server monitoring Like everything else at ipswitch it has gone up in price. $1995 for the lowest price point. Kevin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Monday, May 21, 2007 6:50 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] OT: server monitoring Hi Kevin- I monitor everything in my shop for a pulse, and check web, pop, smtp, and/or imap as appropriate using Ipswitch's What's Up, 1995 version (3.5, maybe?). I get emails to my cellphone when anything goes awry. I have no idea what it costs now, but it has served my needs well, even if the setup of this old version is a bit quirky. -Dave Doherty Skywaves, Inc. 97 Webster Street Worcester, MA 01603 508-425-7176 - Original Message - From: Kevin Bilbee mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, May 21, 2007 8:30 PM Subject: RE: [Declude.JunkMail] OT: server monitoring I guess I should have given more information. Things I want to do. Monitor our web and SMTP applications and send text message notifications to a cell phone and email address concurrently. Thanks for the responses so far anyone else have any experiences. Kevin Bilbee From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Monday, May 21, 2007 3:06 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: server monitoring I am doing research on purchasing/open source server monitoring and would like to know what Declude administrators recommend. Survey sais? Kevin Bilbee Network Administrator Standard Abrasives, Inc. [EMAIL PROTECTED] Changing the way industry works. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] ndr bypassing
Is it posible to set declude to allow NDR's to by pass spam filietring? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] ndr bypassing
Is it posible to set declude to allow NDR's to by pass spam filietring? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Image spam
Commtouch works great for me. Kindest Regards Craig Edmonds 123 Marbella Internet Marbella Guide Property Web Portal W: http://www.123marbella.com www.123marbella.com W: www.marbellaguide.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kelly Scotto Sent: Wednesday, February 21, 2007 8:04 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Image spam Thank you I will check these out. Kelly _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, February 21, 2007 12:08 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Image spam Declude and Image based spam - 4 methods 1. COMMTOUCH Commtouch Recurrent Pattern Detection contains an intrinsic mechanism to exact-match recurrent patterns across similar but not-identical messages. However in the case of images, the minute the spammer makes even the smallest changes to an image, the image-encoded data appears completely different. Commtouch identified this trend in the earliest days of image-based spam, and made the necessary enhancements to its detection engine in order to defend against this new threat with a sophisticated protection shield. Commtouch invested significant resources into developing a method for decoding the images and then sampling them using the proven RPD approach. The result is a significantly improved spam detection rate, while maintaining the same low false-positive rate. 2. CLAMWIN Using ClamAV as a virus scanner with Declude you can download the MSRBL-Images.hdb file which has additional signatures (MD5 sigs) which contains signatures created from images contained within spam emails. http://www.msrbl.com/site/msrblimagesdownload 3. FILTER-CID Identifies emails which contains images increasing the weight suffeciently on spam messages to reach the spam threshold. #EXCEPTIONS BODYENDNOTCONTAINScid: BODYENDNOTCONTAINSContent-Type: image/ #IMAGES BODY3CONTAINSsrc=3Dcid: BODY3CONTAINSsrc=cid: BODY3CONTAINSsrc='cid: BODY3CONTAINSimg src=cid: BODY3CONTAINSimg src=3Dcid: BODY3CONTAINS/cid: #IMAGE TYPES BODY2CONTAINSContent-Type: image/gif; BODY2CONTAINSContent-Type: image/jpeg; 4. VAMSOFT IMAGE SPAM AGENT This tool is an External Agent for ORF 2.1 and newer versions that improves ORF by image spam detection capabilities, but can be used by Declude. http://www.vamsoft.com/vsimagespam/vsimagespam.zip VSIMAGE externalnonzero[path]\Declude\VSIMAGE\imgspamagent.exe -check 40 David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kelly Scotto Sent: Wednesday, February 21, 2007 11:47 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Image spam Has there been a declude filter created for blocking or identifying image spam? If so can somebody post it for me to try. Thank You, Kelly --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. image001.gif Description: GIF image
[Declude.JunkMail] disable subject line warning on one email account
I would like to disable the subject line warning that gets placed in the subject line for one particular email account on a domain. He is complaining that he sees too many emails with a subject warning. Kind of like this. if the email address = [EMAIL PROTECTED] then don't put subject line warning Any rule I can place in the config file to do this? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] disable subject line warning on one email account
Hi Darin, That sounds like it. Any instructions on how to do it? Put a file in the domain directory? What would the format be? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Friday, February 16, 2007 12:41 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] disable subject line warning on one email account Not a rule, but either a domain-level or user-level config to change the WARN action to IGNORE. Darin. - Original Message - From: Craig Edmonds mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Friday, February 16, 2007 6:33 AM Subject: [Declude.JunkMail] disable subject line warning on one email account I would like to disable the subject line warning that gets placed in the subject line for one particular email account on a domain. He is complaining that he sees too many emails with a subject warning. Kind of like this. if the email address = [EMAIL PROTECTED] then don't put subject line warning Any rule I can place in the config file to do this? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Need hep - mail server sending out stock reports email
Also look at black ice server from ISS. Hijack is an excellent tool too. Kindest Regards Craig Edmonds 123 Marbella Internet www.123marbella.net www.marbellaguide.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Thursday, February 08, 2007 12:15 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Need hep - mail server sending out stock reports email Since you are using Declude, start using Hijack NOW! That is for starters. Review the logs to see where the IP is and block that IP. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard Smith (N.O.R.A.D.) Sent: Wednesday, February 07, 2007 2:24 PM To: declude.junkmail@declude.com Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: [Declude.JunkMail] Need hep - mail server sending out stock reports email Running imail 8.15,sniffer and declude - starting on 2/6/7 my mail server start sending out the stock reports email , even when I stop the imail smtp process , nothing is in the Imail logs indicating problems . I have ran full scans with frprot and Symantec . Need help please , I have already made the spamcop blacklist Howard Smith N.O.R.A.D. Inc. P.O. Box 680116 Miami, Florida 33168 www.norad.com http://www.norad.com/ [EMAIL PROTECTED] Office - (305) NETWORK (638-9675) Sales - (786) 206-0045 Fax 1 - (305) 359-5144 Confidentiality Notice: This email message, including any Attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact [EMAIL PROTECTED] by email and destroy all copies of the original message. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. image001.gif Description: GIF image
RE: [Declude.JunkMail] change location of spam email folders
Thank Darrell, That worked perfect by changing the line in $default$.junkmail Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com W: www.marbellaguide.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Sunday, December 31, 2006 4:16 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] change location of spam email folders You sure can - see example below. WEIGHT30 HOLD F:\SPAM-HOLD\%DATE% Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Craig mailto:[EMAIL PROTECTED] Edmonds To: declude.junkmail@declude.com Sent: Saturday, December 30, 2006 9:52 PM Subject: [Declude.JunkMail] change location of spam email folders Is it possible to have all the spam email folders stored in a different folder other than C:\IMAIL\spool\spam ?? say a subfolder perhaps? like C:\IMAIL\spool\spam\emails Currently declude creates folders called 31Dec2006 for example in C:\IMAIL\spool\spam and I would like them to be stored in C:\IMAIL\spool\spam\emails. I was looking around the config files and cant see a setting anywhere for it. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] change location of spam email folders
Is it possible to have all the spam email folders stored in a different folder other than C:\IMAIL\spool\spam ?? say a subfolder perhaps? like C:\IMAIL\spool\spam\emails Currently declude creates folders called 31Dec2006 for example in C:\IMAIL\spool\spam and I would like them to be stored in C:\IMAIL\spool\spam\emails. I was looking around the config files and cant see a setting anywhere for it. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Message Storage
I know you said that catch all does not work but something I do for certain clients is make two email accounts. [EMAIL PROTECTED] [EMAIL PROTECTED] Then I make a rule in Imail that sends a copy of all incoming to the incoming address and then a copy of the outgoing mail to the outgoing email address. The file sizes can get huge if it's a busy domain but I also run a vbscript every couple of days that moves the main.mbx to our backup server and renames the file 12142006main.mbx. Its not the most elegant solution but its free. I would be interested in a paid solution though if there is one out there. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of William Stillwell Sent: Thursday, December 14, 2006 7:26 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Message Storage Does anybody know of a product (that doesn't cost a arm, and three legs) that will archive all email for a specific domain for x number of years? Imail CopyAll Will not work.. No way to orginize all the email, and I don't want to archive the spam... --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?
me too. I thought the purpose of the end function was so that if the email reaches a certain weight, like 50, declude drops any further tests, thus saving precious CPU. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com http://www.123marbella.com/ E : [EMAIL PROTECTED] _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 4:42 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Importance: High Wow - really? When was that changed? I know that the filter test itself did not show as failed, but the WEIGHT always carried over! Take a look at Scott's reply when this feature was implemented and the weight-result of the END was being discussed: http://www.mail-archive.com/declude.junkmail@declude.com/msg14009.html [1] the E-mail will stop processing, [2] the test will *not* fail (this may change -- I'm not sure why it was set up that way), and [3] the weight will be exactly what it should have been when END was reached. And it's only logical. If you WANTED a filter to return 0, then you would simply place the 'END' lines at the BEGINNING of the Filter! If you place the 'END' line behind other lines that accumulated weight, then it clearly is the intention that the weights be COUNTED and that only any FURTHER weights not be added! Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, November 17, 2006 10:06 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? The END function means END the filter and do not add any of the points for that filter. If the END condition is met it is as if the filter never ran. David B www.declude.com _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Friday, November 17, 2006 10:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT? Hi, Can anyone confirm that the 'END' statement is functioning properly. I've been noticing/suspecting that certain test combinations had much too little weights and I finally have time to debug that. This is the entry in the GLOBAL.CFG CONTENT filter D:\IMail\Declude\CONTENTfilter.txt x 0 0 Means - the filter itself has a weight of 0 - all weights would be assigned IN the filter Here CONTENTfilter.txt: SKIPIFWEIGHT 20 MAXWEIGHT 9 TESTSFAILED 7 CONTAINS SNIFFER TESTSFAILED 1 CONTAINS SNIFFER-SCAMS TESTSFAILED 1 CONTAINS SNIFFER-PORN TESTSFAILED 2 CONTAINS SNIFFER-MALWARE TESTSFAILED 1 CONTAINS SNIFFER-OBFUSC TESTSFAILED -2 CONTAINS SNIFFER-IP TESTSFAILED 4 CONTAINS INV-URIBL-WT1 TESTSFAILED 5 CONTAINS INV-URIBL-WT2 TESTSFAILED 6 CONTAINS INV-URIBL-WT3 TESTSFAILED 7 CONTAINS INV-URIBL-WT4 TESTSFAILED END CONTAINS SPAMCOP TESTSFAILED END CONTAINS NJABLSOURCES TESTSFAILED END CONTAINS AHBLSOURCES TESTSFAILED END CONTAINS AHBLPSSL TESTSFAILED END CONTAINS SORBS-SPAM TESTSFAILED END CONTAINS SENDERDB-BLOCK TESTSFAILED END CONTAINS SBL TESTSFAILED 2 CONTAINS SNIFFER-IP As far as I can tell, the Filter works fine as long as there is only SNIFFER and/or URIBL and will return the proper weights around 7 through 9. However, if it hits the END statement is appears as if it always returns ZERO. In other words, it loses the weight that had been accumulated up to that point. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] delete mails before processing / 100% CPU
Not sure if this is any help but I had similar issues and found that my C:\IMAIL\spool\proc\work folder contained hundreds of thousands of messages. When I deleted all the messagaes in there, the pop 3 server share of the cpu dropped dramatically. I could not actually delete everything in the work folder initially. I had to stop the declude process in services, then rename the /work folder to /work2, started declude service again and a new /work folder was created. I actually have no idea why this worked and am not enough of an anorak to study why, but it worked for me and I do this every few days. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of netsolution webmaster Sent: Tuesday, November 14, 2006 3:59 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] delete mails before processing / 100% CPU With the massive amount of spam mail our server has difficulties to process everything in time, since two days we are on 100% CPU and customers have difficulties with pop/imap speed (before everything was ok). What ways are there to - refuse mails that have no valid recipient on the mailserver (not bounce, just refuse/drop) so they need no more processing? - refuse/drop mails that don't pass certain tests (eg. spamcop or sniffer)? OR what other methods could speed up things? We have older versions of declude /imail server (8.15) Thanks --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Paid Subscription Black Lists
Agreed. Message Sniffer is pretty good. Lets not forget the excellent tool from invariant systems... http://www.invariantsystems.com/invuribl/ Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Moore Sent: Thursday, November 09, 2006 6:59 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Paid Subscription Black Lists Message Sniffer buy it. install it. love it. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Anton Sent: Thursday, November 09, 2006 11:18 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Paid Subscription Black Lists Hi. Any one have any good luck with any paid subscriptions? We have been hit hard lately, and are willing to dish out some dough to get our stats back up. Please advise. Thanks! -Chris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] whitelisting based on rev dns
How can I whitelist based on Reverse DNS? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Results ! 92.9 percent delete rate...
Hi, Where did you get the declude log reader from? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Thursday, November 02, 2006 7:13 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Results ! 92.9 percent delete rate... Doing my monthly checkup on how my rules are working, and was blown away at the actual amount I am getting. 11 thousand a day ? Damn, we only have 250 employees ! Anyone else seeing this upswing ? Two-three months ago I was getting 6 thousand a day.. The new version of Declude is rocking.. Check it outhttp://www.casselberry.org/results.bmp Karl Drugge --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Yahoo delivery problems
Oh look. Number 1 on google for domain keys. http://antispam.yahoo.com/domainkeys Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, November 02, 2006 8:25 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Yahoo delivery problems Just throwing this out there. I had heard that Yahoo.com was using greylisting on all email that did not support domain keys. Don't now if it is true, perhaps a rumor may be worth checking out. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Thursday, November 02, 2006 11:34 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Yahoo delivery problems Hi Everyone, This isn't a Declude question but with all of the expertise here I knew someone could help. Please forgive the off-topic message. I'm receiving a bunch of deliver failures today for Yahoo. The message is: Failed Recipient: [EMAIL PROTECTED] Reason: Remote host said: 451 Message temporarily deferred - [190] I searched google and I searched Yahoo's site to see if I could find an explanation of this message -- no joy. I didn't know if it meant they are blocking our IP or if Yahoo was having problems. It sounded to me like they are blocking us. I could not find anything on Yahoo's site about who to contact, what the message means -- nothing. Can someone shed some light on what may be going on? Thanks, Dave --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Sniffer - New Engine
whats the link? I cant find it here http://kb.armresearch.com/index.php?title=Main_Page Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting S.A. Luis Alberto ArangoSent: Monday, October 30, 2006 3:10 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Sniffer - New Engine Forthose using sniffer (like me) there is a new engine that you can download. It claims to be twice as fast. That should be very useful theses days where spam traffice have increased a lot. -Luis Arango---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] the proc work folder
Hi, Am having a couple of issues with my server and have just looked in the c:/imail/spool/proc/work folder. When I browse to that folder using windows explorer, it takes ages and ages to open and looks like its empty when in fact its trying to load the files. When i right click and select properties to see if there are files in the folder, the properties box is saying there are literally hundreds of thousands of files in there. (216,843 files) Does anyone know how I can empty this folder becasue it seems to be stuck in some kind of loop. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] the proc work folder
Thanks David, that worked perfect. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, October 27, 2006 2:55 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] the proc work folder Sensitivity: Confidential 1. Are you running an Real time scanner ? 2. Stop the decludeproc service, rename the work folder, restart the decludeproc service and a new work directory should be created. David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Thursday, October 26, 2006 9:05 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] the proc work folder Importance: High Sensitivity: Confidential Hi, Am having a couple of issues with my server and have just looked in the c:/imail/spool/proc/work folder. When I browse to that folder using windows explorer, it takes ages and ages to open and looks like its empty when in fact its trying to load the files. When i right click and select properties to see if there are files in the folder, the properties box is saying there are literally hundreds of thousands of files in there. (216,843 files) Does anyone know how I can empty this folder becasue it seems to be stuck in some kind of loop. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com http://www.123marbella.com/ E : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] the proc work folder
Thanks David, that worked perfect. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, October 27, 2006 2:55 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] the proc work folder Sensitivity: Confidential 1. Are you running an Real time scanner ? 2. Stop the decludeproc service, rename the work folder, restart the decludeproc service and a new work directory should be created. David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Thursday, October 26, 2006 9:05 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] the proc work folder Importance: High Sensitivity: Confidential Hi, Am having a couple of issues with my server and have just looked in the c:/imail/spool/proc/work folder. When I browse to that folder using windows explorer, it takes ages and ages to open and looks like its empty when in fact its trying to load the files. When i right click and select properties to see if there are files in the folder, the properties box is saying there are literally hundreds of thousands of files in there. (216,843 files) Does anyone know how I can empty this folder becasue it seems to be stuck in some kind of loop. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com http://www.123marbella.com/ E : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: imail q files magically dissapearing
Hi Darrell,
In your fpreview programme (which is pretty useful) how
about making it when you "return to queue", it gives an option to recreate the q
file?
I have made a small command line vbs script which does it
but its still time consuming to enter the data one by one but cuts down the time
have to create one manually.
I wrote this last night very quickly becasue I have about
250 legitimate mails which are broken and have to fix them one by one. It very
basic but does the job for me today.
--- start script
Set ArgObj = WScript.Arguments
filename=ArgObj(0)
Sender=ArgObj(1)
Recipient=ArgObj(2)
Spoolfolder="c:\imail\spool\"Qfilename="Q"
filename ".smd"Dfilename="D" filename
".smd"Filename=Spoolfolder Qfilename
'=='write the q
file first'==Set fso
= CreateObject("Scripting.FileSystemObject")set
fname=fso.CreateTextFile(Filename,true)Set fso=nothingSet
fname=nothing
'=='now write the
content of the q
file'==Set fso =
CreateObject("Scripting.FileSystemObject")Set fname =
fso.OpenTextFile(Filename, 8, True)
fname.write
"QC:\IMail\spool\" Dfilename vbCRLFfname.write
"Hmail.mail2.123marbella.com" vbCRLFfname.write "S"
Sender "" vbCRLFfname.write "R"
Recipient "" vbCRLF
Set
fso=nothingSet fname=nothing
set ArgObj =
Nothing
--end script
Kindest RegardsCraig Edmonds123
Marbella InternetW: www.123marbella.com
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])Sent: Tuesday, October 24, 2006 8:19
AMTo: declude.junkmail@declude.comSubject: Re:
[Declude.JunkMail] OT: imail q files magically dissapearing
Craig,
fpReview loads the D* file. If you are having
failures in the SMTP transaction you will have broken files (i.e. the Q* file
does not exist OR is prefaced with t*).
I am not sure what Imail version your running but
have seen others report a signifigant increase in broken connection files in
2006.
Darrell
Check
out http://www.invariantsystems.com for
utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring,
SURBL/URI integration, MRTG Integration, and Log Parsers.
- Original Message -
From:
Craig
Edmonds
To: declude.junkmail@declude.com
Sent: Monday, October 23, 2006 6:12
PM
Subject: [Declude.JunkMail] OT: imail q
files magically dissapearing
On one of my imail
servers, my spool folder is slowly filling up with D
files.
I am using
fpreview to view the files in the spool and there are currently 180 or so
emails.
when i try to
"return to queue" I get an error saying that the q file could not be found,
whch isa bit strange becasue many many of the emails are local to the
server.
When I look in the
/spool there is a not a single q file anywhere.
Any ideas whats
happening?
Has sniffer or
declude gone nuts?
Kindest RegardsCraig
Edmonds123 Marbella InternetW: www.123marbella.com
.
---This E-mail came from the Declude.JunkMail mailing
list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED],
andtype "unsubscribe Declude.JunkMail". The archives can be foundat
http://www.mail-archive.com. ---This E-mail came from the
Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to
[EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives
can be foundat http://www.mail-archive.com.
---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] OT: imail q files magically dissapearing
On one of my imail servers, my spool folder is slowly filling up with D files. I am using fpreview to view the files in the spool and there are currently 180 or so emails. when i try to "return to queue" I get an error saying that the q file could not be found, whch isa bit strange becasue many many of the emails are local to the server. When I look in the /spool there is a not a single q file anywhere. Any ideas whats happening? Has sniffer or declude gone nuts? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com . ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: imail q files magically dissapearing
on further inspection, the files where the q spool files have dissapeared all have the ERR 02 Virus scan in the log file.I am running ClamWIN. Is this an clamwin error? 20622910:23 23:59 SMTPD(3b24000400828f94) [65.17.213.163] connect 80.33.86.200 port 1291320623010:23 23:59 SMTPD(3b24000400828f94) [80.33.86.200] EHLO gordo20623210:23 23:59 SMTPD(3b24000400828f94) Authenticated [EMAIL PROTECTED], session treated as local.20623310:23 23:59 SMTPD(3b24000400828f94) [80.33.86.200] MAIL FROM: [EMAIL PROTECTED]20623510:23 23:59 SMTPD(3b24000400828f94) [80.33.86.200] RCPT TO: [EMAIL PROTECTED]20623910:23 23:59 SMTPD(3b24000400828f94) [80.33.86.200] C:\IMail\Spool\D3b24000400828f94.SMD 719820627810:23 23:59 SMTP-() Info - Adding Queue file C:\IMail\Spool\q3b24000400828f94.smd 20627910:23 23:59 SMTP-(3b24000400828f94) processing C:\IMail\Spool\q3b24000400828f94.smd20628010:23 23:59 SMTP-(3b24000400828f94) [x] looking up sanquets.com in HOSTS and MX20629110:23 23:59 SMTP-(3b24000400828f94) Info - Adding sanquets.com to DNS cache - TTL = 40280 20629210:23 23:59 SMTP-(3b24000400828f94) ERR 029 - Virus scan call generated general fault, treating as infected20629310:23 23:59 SMTP-(3b24000400828f94) Virus detected, Not repaired, Message deleted, Virus data =""> 20629410:23 23:59 SMTP-(3b24000400828f94) Creating message from Postmaster20629510:23 23:59 SMTP-(3b24000400828f94) finished C:\IMail\Spool\q3b24000400828f94.smd status=1 Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Tuesday, October 24, 2006 12:13 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] OT: imail q files magically dissapearingImportance: HighSensitivity: Confidential On one of my imail servers, my spool folder is slowly filling up with D files. I am using fpreview to view the files in the spool and there are currently 180 or so emails. when i try to "return to queue" I get an error saying that the q file could not be found, whch isa bit strange becasue many many of the emails are local to the server. When I look in the /spool there is a not a single q file anywhere. Any ideas whats happening? Has sniffer or declude gone nuts? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com . ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] mxrate 7. sniffer 10, zerohour 0?
HI All, As you all know by now, my knowledge on these things is pretty slim but is this not a bit strange that commtouch gave this spam zero points. I am just trying to figure how good commtouch is. X-Declude-Note: # TESTS FAILED: MXRATE-BLOCK [7], SUBCHARS-50 [1], SNIFFER [10], WEIGHT10 [10], WEIGHT14 [14], ZEROHOUR [0] Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] OT: Missing purported responsible address
Does anyone know what this means? A client sent it to me this morning saying they are trying to send to that address and are getting a bounce back and the bit below makes part of the error. undeliverable to [EMAIL PROTECTED]s Body of message generated response: 550 5.7.1 Missing purported responsible address Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] catchall/nobody aliases and filter files
Thank Gary, I have also found another page here with some filtering tips... http://support.declude.com/Customer/KBCategory.aspx?categoryid=4 Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Saturday, October 14, 2006 7:09 PM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] catchall/nobody aliases and filter files You can find links to several pages with filter samples at http://it.farmprogress.com/declude/declude.htm Original Message From: Craig Edmonds [EMAIL PROTECTED] Sent: Saturday, October 14, 2006 12:53 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] catchall/nobody aliases and filter files Unfortunately I have some clients who need the nobody alias in order to catch mails. (I have seriously thought about them signing an agreement when they insist on it becasue I know its not really wise to have catchalls these days.) In the global.cfg file there is a line that says. CATCHALLMAILS catchallmails x x 0 0 Should I increase the weight up to say 10? I mean anyone sending to an account that does not exist, is more than likely someone spamming right? I am starting to fiddle with my declude setting rather than fiddling with myself so any ideas on this would be welcome. Does any one have any sample filter files for these?? #FILTER-ADULT #FILTER-COUNTRY #FILTER-FORGED #FILTER-MEDICAL Kind thanks in advance. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] zero hour score/weight
Sorry, I am lost again with what zero hour does? I have the following in a spam I received today which was one of those image spams. X-Declude-Note: # SPAM WEIGHT: 17X-Declude-Note: # TESTS FAILED: SUBCHARS-50 [1], SUBCHARS-55 [1], SUBCHARS-60 [1], WEIGHT10 [10], WEIGHT14 [14], ZEROHOUR [14] should this not have been caught? Am I confusing score and weight? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] catchall/nobody aliases and filter files
Unfortunately I have some clients who need the nobody alias in order to catch mails. (I have seriously thought about them signing an agreement when they insist on it becasue I know its not really wise to have catchalls these days.) In the global.cfg file there is a line that says. CATCHALLMAILScatchallmailsxx00 Should I increase the weight up to say 10? I mean anyone sending to an account that does not exist, is more than likely someone spamming right? I am starting to fiddle with my declude setting rather than fiddling with myself so any ideas on this would be welcome. Does any one have any sample filter files for these?? #FILTER-ADULT #FILTER-COUNTRY#FILTER-FORGED #FILTER-MEDICAL Kind thanks in advance. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] picture spam
I would tend to agree..195 bucks is not a lot of dough really, to stop a good bit of spam. I do alot of hosting and email is kind of a neccessary evil but I cost everything out so that the costs related to the email servers are dissolved into the hosting profit. Mind you, I have quite alot of "email only" accounts so quite a chunk of software licensing gets coveverd by that. A couple of grand is alot to try and dissolve but 195 bucks, no problem and should not be for a serious business. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chrisSent: Thursday, October 12, 2006 4:13 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] picture spam Oops, I meant implement this or not.. Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free978.499.2933office978.477.8930 e-fax[EMAIL PROTECTED]www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chrisSent: Thursday, October 12, 2006 10:11 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] picture spam A one time cost of 195.00 is not a large portion of your revenue and it is your option to not implement this or not Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus GuflerSent: Thursday, October 12, 2006 9:57 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] picture spam ...and give a large part of our revenue to Commtouch? Provide a feasible way to justify the additional costs for our existing customers and service contracts! THEN we could talk about Commtouch. BTW: even if it's hard work to maintain a reliable spam filter it's not an impossible thing. years of contribution from our own researches, creation of text filters, publication of new spam and filter signs, developement of - in declude long time and still missing - additional external tests allowed and still allows us to have reliable filters and no image spam in my inbox. The question is why Declude has become a competitor of our work from what it was some years ago: an excellent tool for us admins to do our own hard work. Looking at your pricing I can see anywhere limitations based on users. What if I have a single gatewayed domain? Markus From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chrisSent: Thursday, October 12, 2006 3:15 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] picture spam Guys, Commtouch hasnt missed any, stop making things hard on yourselves.. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Wednesday, October 11, 2006 5:17 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] picture spam Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Wednesday, October 11, 2006 12:49 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad language (eastern European iso-8859-2) or Cyrillic (koi8-r or iso-8859-5), etc 3. cmdspace 4. good DUL IP lists/tests 5. having forged your local domain. I still get 5-10 a day. It is a pain. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 12:08 PM Subject: [Declude.JunkMail] picture spam Has anyone figured out a reasonable way to use Declude to minimize picture spam? Sniffer is missing most. They are sent from fresh hosts, so RBLs dont catch them, and there is no target, so INVuribl misses them as well. Associates of ours are using Barracuda to stop most successfully, so it is at least possible. Ideas are welcomed. Dave
RE: [Declude.JunkMail] picture spam
It good to see that other methods work too. Unfortunately I myself dont have too much time to fiddle with filters so I rely on sniffer, commtouch, declude, invurbl, clam, norton to catch all the muck and do it all for me. One thing I will say though, on one server, I disabled Sniffer the other day and forgot to turn it back on, so for a few days I was receiving image spam and could not figure it out until I realised it was disabled. (I have commtouch on the same server btw). As soon as I turned sniffer back on, no more image spams. hm. (I dont think commtouch is "that" infalible but it does filter quite alot though) I still get a few spam emails through every day despite having alot of checks but then again my email has been around a few years but many of my clients have noticeed a huge reduction in spam since implementing spam checking early last year and the way they thank me is by renewing their services promptly. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Thursday, October 12, 2006 4:44 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] picture spam We don't use Commtouch, and do not intend to license it. However, we do not have trouble with image spam leaking through our system (still on Declude 1.82, though we do have a valid license and SA for 4.x). Acrossall hosteddomains we get on average two or three leakage reports a week. On our own domains, we see one or two spam messages get through per week on average. So, I'd say our "fidd[ing] with filters, weights, and false positives" is working pretty well. Also, I've seen statistics posted thatindicate Commtouch is not as good as Sniffer at the overall catch rate. As for the statistics you mention, note that one email account or one domain is a very poor indicator for performance on a larger cross section of domains and users. Small sample populations have large error bars. My initial response was simply to comment on the danger of using the filter. When posting such,it's important to indicate exactly what it catches and the danger of using it. Many might have read the posting and thought it would catch image spam, when it really catches attached or embedded images, potentially leading to a high number of false positives. While this is useful in a combo test, it should not be given any weight individually. While you do mentionkeeping the weight low, bear in mind that many of us have scaled our weighting system differently that the default for more granularity. Personally, I prefer tohold at 100 and scale all tests as a percentage of the hold weight. Darin. - Original Message - From: chris To: declude.junkmail@declude.com Sent: Thursday, October 12, 2006 10:08 AM Subject: RE: [Declude.JunkMail] picture spam No, I am making the assumption you will not have to deal with anymore picture spam if you use CommtouchYou can fiddle with filters, weights and false positives if youd like. I have been an advocate of Commtouch since we starting using it, matter of fact I have yet to get two pieces of spam since we started using the Gateway w/Commtouch combo. In four months I have seen just one false positive. Just my observation though!! Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Thursday, October 12, 2006 9:39 AMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] picture spam You're making an assumption that everyone uses Commtouch. Darin. - Original Message - From: chris To: declude.junkmail@declude.com Sent: Thursday, October 12, 2006 9:15 AM Subject: RE: [Declude.JunkMail] picture spam Guys, Commtouch hasnt missed any, stop making things hard on yourselves.. Chris From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Wednesday, October 11, 2006 5:17 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] picture spam Sorbs-DUL and NJABL Dynablock look to be the best. Although they miss lots. 5-10's has been discontinued. - Original Message - From: Dave Marchette To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 3:53 PM Subject: RE: [Declude.JunkMail] picture spam Thanks all for the various suggestions. Agreed- combo is the way to use that test, for sure. A bit OT, but what is the popular and accurate DUL database these days? How accurate is fiveten at DUL lookups? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Wednesday, October 11, 2006 12:49 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] picture spam I combo thegraphics hit (jpg, gif or png) with: 1. bad DNS - None or timeout 2. bad
RE: [Declude.JunkMail] From:
Oohh oohh I think I know this one!! (courtesy of someone on this list) You have to be careful, it blocks legit people who forget to put subjects to so just comment out subject like I have done. IN C:\IMAIL\Declude\$default$.junkmail === MISCFILTERS HOLD C:\IMAIL\SPOOL\SPAM\MISC-SPAM IN C:\IMAIL\Declude\global.cfg === MISCFILTERS filter C:\IMAIL\Declude\Filters\misc-filters.txt x 0 0 IN C:\IMAIL\Declude\Filters\misc-filters.txt == #misc filters #with blank subject and blank from HEADERS 30 NOTCONTAINS from: #HEADERS 30 NOTCONTAINS subject: Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Frederick Samarelli Sent: Thursday, October 12, 2006 6:26 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] From: Is there a filer to block these. From: Fred --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Interesting SMTP connection patterns
That's why I now use Blackice Server from IIS. It can detect multiple smtp connections and close ips down automatically. Its pretty slick. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Thursday, October 12, 2006 11:24 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Interesting SMTP connection patterns Yesterday I took a snapshot of the SMTP connections active on our server. I then did a reverse IP to find out where they were from. Below are the results. You can see someone from Thailand had 5 SMTP connections active and Spain had 4. You can also see that only 3 of the IPS connected were for potentially legitimate email. We don't get any legitimate email from other Countries so everything not from the USA would be spam. Any idea why a spammer would open more than one SMTP connection? 202.139.211.241 5 Thailand 88.0.230.26 4 Spain 71.55.71.1382 USA 87.219.166.92 Spain 213.85.39.108 1 Russian Federation 84.77.107.183 1 Spain 83.131.106.234 1 Croatia 84.61.135.611 Germany 83.84.74.2191 Netherlands 90.9.36.180 1 France 83.167.108.79 1 Russian Federation 67.172.162.33 1 USA 84.54.248.961 Russian Federation 86.75.242.215 1 France 201.208.171.250 1 Venezuela 88.204.240.177 1 Kazakstan 82.158.0.2371 Spain 69.30.246.125 1 USA 200.168.86.224 1 Brazil 83.167.108.44 1 Russian Federation 75.41.79.2031 USA 200.206.252.123 1 Brazil 84.60.109.148 1 Germany --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] not sure about total weight
should this not be a weight of 28?? The weight of 14 is correct but commtouch has also given it a weight of 14, so should that not be a weight of 28? X-RBL-Warning: WEIGHT10: Weight of 14 reaches or exceeds the limit of 10.X-Declude-Sender: [EMAIL PROTECTED] [209.18.102.212]X-Declude-Spoolname: D01cb1b300082fcd6.smdX-Declude-RefID: str=0001.0A090206.452A018E.007F,ss=3,fgs=0X-Declude-Note: ###X-Declude-Note: # EMAIL SERVICE BY 123 MARBELLA INTERNETX-Declude-Note: # SCANNED BY DECLUDE 4.3.7 for spam and virusesX-Declude-Note: # THANK YOU FOR USING 123 MARBELLAX-Declude-Note: ###X-Declude-Note: # SCAN TIME 10:01:29 on 09 Oct 2006X-Declude-Note: # DIRECTON: incomingX-Declude-Note: # FROM MAIL IP: 209.18.102.212X-Declude-Note: # FROM DOMAIN: ev1.netX-Declude-Note: # FROM EMAIL: [EMAIL PROTECTED]X-Declude-Note: # FROM REVDNS: ironport02.ewr.datapipe.netX-Declude-Note: # DEST EMAIL: [EMAIL PROTECTED]X-Declude-Note: # NO OF RECIPIENTS: 1X-Declude-Note: # QUEUENAME: D01cb1b300082fcd6.smdX-Declude-Note: # ROUTE: CHINA-UNITED STATES-destinationX-Declude-Note: # SPAM WEIGHT: 14X-Declude-Note: # TESTS FAILED: WEIGHT10 [10], WEIGHT14 [14], ZEROHOUR [14] X-Declude-Note: ###X-RCPT-TO: [EMAIL PROTECTED]Status: UX-UIDL: 459192760 Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Blocking these?
You can purchase a Message Sniffer subscription directly from the ARM Research web site. For only $495/year (annual subscription) or $45/mo ( monthly subscription) you will receive frequent rule base and software updates via Email, personalized support for managing and customizing your rule base(s) to fit the needs of your system, and access to any additional services and capabilities that are developed while your subscription is active. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Heimir EidskremSent: Thursday, October 05, 2006 11:25 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] Blocking these? I am confused.The renewal cost per year is $500 but you can buy a monthly subscription for $30 a months?So monthly for $360 a year or yearly for $500.Dave Beckstrom wrote: Hi John, Thanks for the info on the monthly. I didn't know they offered that. They charge $500 a year for a renewal. I own my company so either way the $500 comes out of my pocket. I spent a lot of money in the last month, which is why I don't want to spend another $500 right now. I'd like to see it made legal to hang anyone caught spamming. :) You know what I think is the worst spam? The political spam. Any politician who sends me spam asking me to vote for them is guaranteed that I will vote against them! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Doyle Sent: Thursday, October 05, 2006 1:38 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Blocking these? Dave For goodness sake, call sniffer up, they offer a monthy subscription for I think less than 30 dollars. Put it on your credit card and get your company to reimburse you next month and send them a check for the 12 months and it's done. I'd hate to think what's getting though without some sort of added filter like sniffer. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dave Beckstrom Sent: Wednesday, October 04, 2006 8:42 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Blocking these? How are you guys blocking something like the spam below? There is no URL to block on. They keep bastardizing words in the body of the email to the point where you can't hardly block based on the content. What do you guys do with these? -Original Message- From: Louis Rubin [mailto:[EMAIL PROTECTED]] Sent: Sunday, November 05, 2006 8:48 AM To: Subject: Chavez accused THIS THURS DAY OCTOBER 5 2006 BIG NEWS RELEASED ON CR SVF!!! DON'T MISS THIS INVESTMENT MOMENT, PLACE 'CRSVF' ON THE RA`DAR!!! T r a d e Ale rt: THURSDAY, October 05, 2006 'STOCK': CRSVF.OB Current Pri ce : $0.18 Pr evClose : $0.19 Recommendation: ST RO NG B UY WATCH THIS S TOCK GO HIGHER AND RI SE DON'T M I SS THIS IN VES TMENT MOMENT, PLACE CRSVF ON THE RA DAR!!! About Capital Reserve Canada: CRC is an oil and gas ser vices comp any based in Edmonton, Alberta. Through its wholly owned subsidiary, KCP Innovative Services, Inc., CRC offers technologically tools for use in four areas of the industry. The first aids in testing development of newly found resources; another measure existing wells' productivity; and the third hastens well abandonment, ensuring compliance with regulatory emission guidelines. The fourth, through its pro prie tary hardware and software technologies, is used to determine the profitability of coal bed methane deposits, which may be developed and sold as natural gas. CRC has a second wholly owned subsidiary, Two Hills Environmental, to assist with problem waste from oil gas companies, and provide undergro und storage. ADD THIS GE M TO YOUR PORTFOLIO AND WATCH IT TRADE ON THURSDAY, October 05, 2006 !! TR ADE SM ART AND W I N WITH CRSVF!!! Start to buy at 10:30 AM , October 05 2006 It will blow up --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the
RE: [Declude.JunkMail] anyone know what ssdmbs.exe is?
Hi Andrew, I downloaded the FileMon, that works nice but the exe called ssdmbs.exe did not appear again and the server started too run perfectly again, so I just shelved troubleshooting thatin favour of configuring black ice server instead, which also rocks btw once its configured. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, AndrewSent: Thursday, October 05, 2006 11:46 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] anyone know what ssdmbs.exe is?Sensitivity: Confidential Hey, Craig. Did you resolve this, and what was the outcome? Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, AndrewSent: Tuesday, September 26, 2006 8:46 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] anyone know what ssdmbs.exe is?Sensitivity: Confidential Never heard of ssdmbs.exe ... Search your filesystem for the file and see if the location or right-clicking on it gives you any insight. I like to use Process Explorer from sysinternals.com for stuff like this.It's like Task Manager but has all the features you wished it had, like right-clicking on the executable, getting properties and seeing the full path to that executable. I also like their Auto Run to tell me the start location of all the executables (like Startup, autoexec, HKLM...Run and far more). Of course their Rootkit Explorer is also good; I always find false positives in their "heuristic" type of tests like small differences in memory size allocations. RegMon and FileMon are invaluable for ferreting out what an executable is doing right now. All of these tools are free from SysInternals.com (soon to be free downloads from Microsoft.com) Andrew. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Tuesday, September 26, 2006 5:20 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] anyone know what ssdmbs.exe is?Importance: HighSensitivity: Confidential I have a process in my server taking up 80% cpu and its called ssdmbs.exe. Is this something to do with declude? I cant seem to end the process either, its says Access Denied. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Sniffer vs. Commtouch
Title: Message I am using commtouch for a month or so now and have seen a reduction too. You just put a single line in the config file and away you go. Not sure if its works with older versions. A good combo if you have enough CPU is to have sniffer and commtouch running at the same time. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn SchmidtSent: Wednesday, October 04, 2006 4:19 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Sniffer vs. Commtouch I've been using commtouch for a few weeks now and have noticed a significant reduction in spam. This is in addition to declude? Does a line get put in the config file to point to this? Does this work with an older version of Declude? We have noticed a major increase in spam in the last month or so. I was going to upgrade Declude but after seeing the issues here, I've decided against it. Instead, I'd just like to get something in addition. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: CBL Blocking
Thanks Darell and Jay, I am in contact with CBL now and they have given me 3 days to sort everything out (how nice of them!!) Jay, how do I set imail so that it will only use one helo/ehlo hostname? Sorry if its an idiot question but I cant find anything on it. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jay Sudowski - Handy Networks LLC Sent: Friday, September 29, 2006 2:38 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: CBL Blocking Sensitivity: Confidential Have you setup iMail so that it will only use one helo/ehlo hostname? -Jay From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Thursday, September 28, 2006 6:54 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: CBL Blocking Importance: High Sensitivity: Confidential Can anyone help me with this CBL blocking problem/imail?. Twice today they have blacklisted me and trust me I have done absolutely everything they have said. I have run all the tools they have suggested, my server is patched, I have 3 firewalls yet still they find reason to blacklist. This is driving me nuts and costing me headaches becasue all my clients emails are bouncing. This of course translates to thousands of dollars in losses everyday I am blacklisted. Yes, I am running Imail. Does anyone have any ideas? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: CBL Blocking
A quick polite email to them explaining that the domains they were mentioning were in fact valid. They emailed within about an hour. Thanks everyine for their help on this one. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave DohertySent: Friday, September 29, 2006 4:59 AMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] OT: CBL Blocking Follow the procedures regarding getting yourself de-listed, and be sure you pay strict attention tot he instructions for IMail users. It has worked for me several times when I've changed IPs. For more info see http://www.mail-archive.com/imail_forum@list.ipswitch.com/msg106753.html -Dave DohertySkywaves, Inc.508-425-7176[EMAIL PROTECTED] - Original Message - From: Craig Edmonds To: declude.junkmail@declude.com Sent: Thursday, September 28, 2006 6:53 PM Subject: [Declude.JunkMail] OT: CBL Blocking Can anyone help me with this CBL blocking problem/imail?. Twice today they have blacklisted me and trust me I have done absolutely everything they have said. I have run all the tools they have suggested, my server is patched, I have 3 firewalls yet still they find reason to blacklist. This is driving me nuts and costing me headaches becasue all my clients emails are bouncing. This of course translates to thousands of dollars in losses everyday I am blacklisted. Yes, I am running Imail. Does anyone have any ideas? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] OT: CBL Blocking
Can anyone help me with this CBL blocking problem/imail?. Twice today they have blacklisted me and trust me I have done absolutely everything they have said. I have run all the tools they have suggested, my server is patched, I have 3 firewalls yet still they find reason to blacklist. This is driving me nuts and costing me headaches becasue all my clients emails are bouncing. This of course translates to thousands of dollars in losses everyday I am blacklisted. Yes, I am running Imail. Does anyone have any ideas? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Blackice Server Settings
Nice! Thanks Dave. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Wednesday, September 27, 2006 11:58 PM To: declude.junkmail@declude.com Cc: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Blackice Server Settings I've gotten some requests to post the information on how to use Blackice Server to block email harvesting attacks. So here it is! Before you install Blackice Server you must turn Data Execution Prevention OFF on your server. Blackice and DEP will not coexist. On your server right click on MY COMPUTER then go to properties and then go to advanced. Under performance, select the SETTINGS button and then click on the Data Execution Prevention tab. If DEP is listed as enabled for anything, remove it for the listed services. Next, you can install Blackice. When you install Blackice server you should install it with the trusting mode enabled to allow all inbound traffic. I believe it asks you what you want when you install Blackice. I don't recall for sure if it does or not because it has been several years since I installed it. If it doesn't ask you the protection level that you want, after you install blackice you can go into the GUI and go to the firewall tab and under protection level you can select trusting: allow all inbound traffic Blackice should run without causing you any trouble so you should have time to complete the other configuration items. The whole install and configuration only took me about 15 minutes. I installed it on a dedicated email server. I don't have any experience with Blackice on a server running other stuff besides email and webmail. Also, you can always stop the Blackice service if you hit a problem. Blackice does its thing by watching traffic across the network card. If you stop Blackice then its effectively as if Blackice isn't installed on the server. When the service is stopped Blackice is gone and all is back as it was before. Attached is the issuelist.csv file which comes with Blackice server. Blackice uses this file as a database of different types of attacks. Line 227 had to be modified to indicate an action of IP|RST. The IP|RST tells Blackice to block the IP of the attacker as the action to take. Ignore the comments to the far right of line 227. The comments say to block the attacker if they attempt to send email to 10 non-existent email addresses within 120 seconds. The QTY/Timeframe is actually specified elsewhere. All you need to change in this file is to add IP|RST to line 227. The attached file already has the change. It is from the most current version if Blackice so if you just bought Blackice you can move the attached file into the Blackice directory and you're good to go. Next, in the Blackice GUI you'll want to go to the firewall tab and put a checkmark in front of Enable Auto BlockingThe GUI updates the firewall.ini file to tell Blackice that auto-blocking is enabled. The line in my firewall.ini is the following: auto-blocking = enabled, 2000, BIgui Next, go to the blackice.ini file and manually edit it to add the following 4 lines: smtp.error.count=6 smtp.error.interval=30 pam.smtp.error.count=6 pam.error.interval=30 The above settings in blackice.ini tells Blackice that if it detects an attempt to send to 6 non-existent email addresses within 30 seconds then it should activate the Email_Error action in line 227 of issuelist.csv. We set the action to be IP|RST (in issuelist.csv) which specifies that the IP should be blocked. So if the QTY/Timeframe is met, the IP is blocked. The block of the IP will automatically go away after a specified time. This is good because an IP is never permanently blocked forever. I believe the IP is removed from the blocklist after 24 hours. I have to find where you specify the length of time that the IP should remain blocked. I'll post that when I find it. Also, on those 4 config lines above you can obviously choose how aggressive you want to be at blocking email harvesting by setting a different error.count and error.interval. I figured 6 attempts at bad addresses in 30 seconds was most certainly someone trying to guess email addresses on our servers. Another thing that you will want to do is go into the Blackice GUI and go to the intrusion detection tab. Here you will want to add your internal and external IP addresses as ranges of IP addresses that you want to trust. If Blackice ever blocks an IP that shouldn't be blocked (say some customer who isn't well-behaved but who is still a customer), through the GUI you can right click on your customer's info in the EVENTS tab and then select the option to trust and accept them. This will prevent them from ever being automatically blocked by Blackice. I know the above is a bit to digest but don't let it scare you. Blackice is a simple
[Declude.JunkMail] anyone know what ssdmbs.exe is?
I have a process in my server taking up 80% cpu and its called ssdmbs.exe. Is this something to do with declude? I cant seem to end the process either, its says Access Denied. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Spam Spike
I just bought it and installed it one of my mail servers and its pretty good. Worth 300 bucks. Easy install easy to configure. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Glenn \ WCNet Sent: Wednesday, September 20, 2006 10:15 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Spam Spike How tricky is it to configure this? Current price I find is $300. G.Z. - Original Message - From: Dave Beckstrom [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, September 20, 2006 1:08 PM Subject: RE: [Declude.JunkMail] Spam Spike I run Blackice Server on the mail server. It drops the connecting IP if we receive more than a user specified number of attempts for non-existent email addresses within a user specified time limit. It then blocks that IP for a user specified amount of time before removing the block. It prevents email address harvesting from our server. Not bad for a product that cost about $200 if I recall correctly. A side benefit is that it stores a text file with the hostname/IP address in a folder for every blocked IP. Over time, I can see patterns and permanently block those IP ranges in my firewall if I so desire. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Anton Sent: Tuesday, September 19, 2006 1:02 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Spam Spike Darrell, We are averaging 40 to 50% on the processor. I was just surprised because in 3 years we haven't seen a spike this large. Most of them are dictionary style. But since they aren't from the same IP, I don't think the imail 2006 dictionary feature would help us. Thoughts? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Analyzing junkmail log files
Yeah I have the DLAnalyser on two mail servers and its also a decent product. It automatically emails me a nice html report each day showing all spam and virus activity for the previous day. Nice one Darrell. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, September 20, 2006 11:33 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Analyzing junkmail log files Karl, I would recommend DLAnalyzer - (since its our product). It can process both virus and junkmail logs, process multiple days, process multiple servers, email capability, as well as providing all types of reports. It is compatible with past and current versions of Declude. Here is a link to all the reports. http://www.invariantsystems.com/dlanalyzer/reportsamples.htm We also have a free version that covers the basic features you were used to with Delog. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Karl Hentschel writes: Up until upgrading from Declude 2.06 to 3.11 I had been using delog 1.08b from imagefxonline for analyzing my junkmail log files. After the upgrade it no longer works. Delog was a simple tool that emailed me daily and gave statistics for all the tests. From this I could determine which were the most effective. Does anybody have a suggestion for a replacement program to analyze junkmail log files that can email the results automatically. Which program has been the must successful? Or has anyone been successful using delog with declude 3.11? Thanks --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Analyzing junkmail log files
I also use baretailpro from baremetalsoft.com to look at log files. When the server is getting peaky its excellent for looking at logs on the fly because you can tell it to highlight certain keyword. They do a couple of versions. A free version and a pro version. The free version is okay but the paid version is better as you can quickly filter the log files based on keywords and its very quick even with my 100MB + log files. Soneone on this forum put me onto it. You can analyse any kind of log file with it btw. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, September 20, 2006 11:33 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Analyzing junkmail log files Karl, I would recommend DLAnalyzer - (since its our product). It can process both virus and junkmail logs, process multiple days, process multiple servers, email capability, as well as providing all types of reports. It is compatible with past and current versions of Declude. Here is a link to all the reports. http://www.invariantsystems.com/dlanalyzer/reportsamples.htm We also have a free version that covers the basic features you were used to with Delog. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Karl Hentschel writes: Up until upgrading from Declude 2.06 to 3.11 I had been using delog 1.08b from imagefxonline for analyzing my junkmail log files. After the upgrade it no longer works. Delog was a simple tool that emailed me daily and gave statistics for all the tests. From this I could determine which were the most effective. Does anybody have a suggestion for a replacement program to analyze junkmail log files that can email the results automatically. Which program has been the must successful? Or has anyone been successful using delog with declude 3.11? Thanks --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spam Spike
Hi Chris, You should also consider using declude hijack even though that only catches spammers using the smtp server. It only takes 1 idiot client to make the password easy to guess and bang, spammer sits and uses your server without you really knowing until you get blacklisted. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, September 19, 2006 7:36 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Spam Spike Comment's inline, Darrell Chris Anton writes: 1) Has anyone experienced recent spikes like this? How can I reasonably handle this? Yes, we have very often see signifigant swings in spam. How to handle it is a good question. That typically depends on what the spam campaign is. We have found recipient address validation helps the most. We than do analysis (using DLAnalyzer IP reports) and find the IP addresses who send the most spam and block those. I have run several analytics and found that these emails are not targeting a specific user or specific domain. Additionally, there are no blocks of IPs that are responsible. Is it spam going to valid users? Or just your generic dictionary attacks? 2) What are the realistic limits of Imail / Declude / Message Sniffer (I KNOW this is platform specific, just looking for ballpark). 3) What can I do to squeze out more juice from this server? Software: IMail 8.22 (because we are still scared of 2006), Declude Virus and Junkmail 2.0.6, and Sniffer most recent version Hardware: Windows Server 2003 box with a 3 ghz XEON, and 1 Gig ram. On some of the server I maintain we are doing 150K messages a day on a dual xeon 2.6ghz. With no issues (invURIBL, Sniffer). What is your current CPU usage like? Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Newest version
Title: Message and dont forget to back up your old declude files in case. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Butch AndrewsSent: Monday, September 11, 2006 5:07 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Newest version My advice, since I just did the upgrade from the same version, is to call support and have them talk you through the update. They will do this since there are many changes between the two versions -Butch*** REPLY SEPARATOR ***On 9/11/2006 at 10:43 AM Sharyn Schmidt wrote: I am running 2.06. Yeah, I know, really outdated. I have a current service agreement, but for the life of me, I can't figure out where to download the latest version from the declude site. Guess I haven't done this in a really long time. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Monday, September 11, 2006 10:29 AMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] Newest version I don't think there are any significant anti-spam advances in the new Declude base product. Declude added the CommTouch addon. Or look at INVURIBL (cheapest solution) or Message Sniffer. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module
Nice reply. You just made yourself look like a complete and utter muppet. Yes, I "was" a customer. I rest my case. hahahaha. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evans MartinSent: Saturday, September 09, 2006 10:34 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module You know, Craig, you were a customer of mine as recently as February when you ordered IPlus Info Browser from my website. You would think that a person who used to write software in support of this bunch of clowns MIGHT just have some insight into the direction that these companies are taking. I HAVE talked to MOST of the leaders of both Declude IPSwitch and expressed my concern with their direction and have been told that it is in the best interest of the company to do that which I perceived as screwing their existing customer base. They made a choice. Theyre soaking you! Theyre bleeding you for ever penny and offering up software that just doesnt do the job as well as it used to because they are more concerned about the bottom line than they are about writing quality software anymore. When the user community is crying out for one feature and they deliver something completely different, it is obvious that they just dont care about my business or yours anymore. When the same bug hangs around for two years and doesnt get fixed that bugs me. When they jack the price up so high that it runs the little guy right out of business, it concerns me. Doesnt that offend you in the least little bit? If you want to call me a muppet and demand that I be removed from this list for that reason than so be it but I think youre the one being the muppet. Why dont you lighten up and allow others to express their opinions without your BS threats. After all, thats what a forum is all about. If an announce list is what you want, why dont you be our leader and start by unsubscribing yourself. Evans Martin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Friday, September 08, 2006 3:36 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management moduleImportance: High Can someone please remove this absolute muppet from this newsgroup? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evans MartinSent: Friday, September 08, 2006 7:40 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Wow!Yet another company goes the way of IPSwitch. I'm so glad that I found ASSP. I just wish I hadn't wasted all that money and time on Declude.Does anyone want to buy my company and run off all of my customers? I'm beginning to feel like I need to go back to business school. Maybe I have missed the bus somewhere since it seems to be the way of thing among mid-sized technology based companies. Help!Evans Martin From: "Gerry Comeau" [EMAIL PROTECTED]Sent: Friday, September 08, 2006 8:16 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Valued customers,I made the decision to suspend the acceptance of cases via email([EMAIL PROTECTED]). The email function will continue to be availableuntil we're ready to "flip the switch". The reply you receive after yousend an email to the support address was modified in an attempt to educateyou that change was in the air. The date of August 28th was published andit's obviously wrong. That was the planned date. You will have adequatewarning before we make the change. Additionally, you'll continue to receiveemail notices from case submissions via the web.I'd like to say, in closing, that one of the goals of this change is toensure we're supporting our paying customers. Let's say you're a payingcustomer and you're unable to get our attention and unbeknown to you we'reworking with customers that have expired agreements or general salesquestions, I don't think you'd like that, I wouldn't. Another goal is totrack the number of cases, the time it takes to solve and case patterns.This data will be used for staffing purposes as well as informing ProductMarketing of what we see as new feature/functionality items. Naturally,bugs will be expedited to Engineering, another benefit of using the CRMsystem as they will be using the same case management tool. Lastly we willbe implementing a severity and priority process to ensure the inbound webcases are treated on a FIFO and severity/priority basis. If you have asituation that can't wait, please use the phone. My apologies for the length of this message, however I do think you'reentitled to why we're making the change
RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module
Yeah right, Joseph. Unlike Evans, I pay declude several thousand dollars a year for my declude licenses, and am absolutely thrilled with the declude product, no complaints here, it works great, its cut out nearly all the spam my 5,000 + email users used to get before. In addition, the declude customer support has been first class and I have been treated like a king by the new management team, probably because respect works both ways. There are a few people out there though who were unhappy with Barry's departure because it affected their pricing and continue to moan and complain and find things wrong with the product. I would say, based on Evans postings that he is certainly one of them and because he cant get his way, is just finding things to pick on. Evans actually admits that he is not a declude client anymore but continues to post anti declude propoganda on this forum which I think every paying declude client will agree is completely unneccessary and uncalled for. Sure, I could just ignore his rantings and moaning but its not fair to all paying declude customers which includes myself. So, ummm, my contribution to paying customers in this forum, is that I am one. As for being argumentative, then abso-f*cking-lutely mate. You are spot on there. I will argue and debate until the cows come home on a hot topic such as this. This forum is not for slagging declude off which is what Evans is doing, its for discussing and arguing the finer points of the product in order to help declude themselves make it a better product. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: Joseph Raykiewicz [mailto:[EMAIL PROTECTED] Sent: Saturday, September 09, 2006 2:00 PM To: Craig Edmonds Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module can someone remove craig from this list? his posts are purely argumentative and offer nothing useful to help out a declude customer. thanks -- From:Craig Edmonds [EMAIL PROTECTED] Date:9/9/2006 04:12 AM Nice reply. You just made yourself look like a complete and utter muppet. Yes, I was a customer. I rest my case. hahahaha. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com http://www.123marbella.com/ E : [EMAIL PROTECTED] _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evans Martin Sent: Saturday, September 09, 2006 10:34 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module You know, Craig, you were a customer of mine as recently as February when you ordered IPlus Info Browser from my website. You would think that a person who used to write software in support of this bunch of clowns MIGHT just have some insight into the direction that these companies are taking. I HAVE talked to MOST of the leaders of both Declude IPSwitch and expressed my concern with their direction and have been told that it is in the best interest of the company to do that which I perceived as screwing their existing customer base. They made a choice. They're soaking you! They're bleeding you for ever penny and offering up software that just doesn't do the job as well as it used to because they are more concerned about the bottom line than they are about writing quality software anymore. When the user community is crying out for one feature and they deliver something completely different, it is obvious that they just don't care about my business or yours anymore. When the same bug hangs around for two years and doesn't get fixed that bugs me. When they jack the price up so high that it runs the little guy right out of business, it concerns me. Doesn't that offend you in the least little bit? If you want to call me a muppet and demand that I be removed from this list for that reason than so be it but I think you're the one being the muppet. Why don't you lighten up and allow others to express their opinions without your BS threats. After all, that's what a forum is all about. If an announce list is what you want, why don't you be our leader and start by unsubscribing yourself. Evans Martin _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Friday, September 08, 2006 3:36 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Importance: High Can someone please remove this absolute muppet from this newsgroup? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com http://www.123marbella.com/ E : [EMAIL PROTECTED] _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evans Martin Sent: Friday, September 08, 2006 7:40 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management
RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module
Jo, I am nearing the end of a 20 hour day and dont have much left in me right now. I have nothing against you and I will forgive your attempt to make me look silly by calling me argumentative and nothing to offer paying declude customers as well as saying I am thick by assuming I "missed the point" and accusing me of not having a clue in the world. No harm done mate. For your info, I have managed to make myself look silly on many occasions on this forum with the daft Imail/declude questions, so I am in need of no assistance in that area, but thanks anyway. Something I will not do is feel sorry for myself and tell everyone about it and by painting good people's names in black, like Evans has done this week to Declude. If he has got a gripe and wants revenge, he should create his own forum/blog and talk about it there, not on this forum where PAYING CUSTOMERS ARE. If he wants to be proactive and contribute to the forum in a postive way, then by all means but if he is going to bring a postive slant to the whole thing, then he should just piss right off and leave us all alone to concentrate on running our successful businesses. I am allowed to say that right? The piss off bit I mean. At the end of the day its my opinon right? Craig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe RaykiewiczSent: Saturday, September 09, 2006 11:33 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Well craig, it seems you missed the point. I was simply trying to show you how silly you look for requesting someone to be removed from the list.It has been my exprience that this list works well because you have people that point out both the negative and the positive. If I follow your logic you seem to think that if I don't know there is a problem then there is no problem. That doesn't work in my world. I want to know the good the bad and the ugly.People always have differing opinions of everything. Without that we have hitler's dream world. Without that we only have 1/4th of the knowledge that we need to make sound decisions.Let Evans say what he wants. I find it informative. What makes me anymore right than you or vice versa?Joe From: "Craig Edmonds" [EMAIL PROTECTED]Sent: Saturday, September 09, 2006 8:04 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Yeah right, Joseph.Unlike Evans, I pay declude several thousand dollars a year for my decludelicenses, and am absolutely thrilled with the declude product, no complaintshere, it works great, its cut out nearly all the spam my 5,000 + email usersused to get before. In addition, the declude customer support has been first class and I havebeen treated like a king by the new management team, probably becauserespect works both ways.There are a few people out there though who were unhappy with Barry's"departure" because it affected their pricing and continue to moan andcomplain and find things wrong with the product. I would say, based on Evanspostings that he is certainly one of them and because he cant get his way,is just finding things to pick on.Evans actually admits that he is not a declude client anymore but continuesto post anti declude propoganda on this forum which I think every payingdeclude client will agree is completely unneccessary and uncalled for.Sure, I could just ignore his rantings and moaning but its not fair to allpaying declude customers which includes myself. So, ummm, my contribution to paying customers in this forum, is that I amone. As for being argumentative, then abso-f*cking-lutely mate. You are spot onthere. I will argue and debate until the cows come home on a hot topic suchas this.This forum is not for slagging declude off which is what Evans is doing, itsfor discussing and arguing the finer points of the product in order to helpdeclude themselves make it a better product.Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]-Original Message-From: Joseph Raykiewicz [mailto:[EMAIL PROTECTED] Sent: Saturday, September 09, 2006 2:00 PMTo: Craig EdmondsSubject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new casemanagement modulecan someone remove craig from this list?his posts are purely argumentative and offer nothing useful to help out adeclude customer.thanks--From:"Craig Edmonds" <[EMAIL PROTECTED]>Date:9/9/2006 04:12 AM Nice reply.You just made yourself look like a complete and utter muppet.Yes, I "was" a customer.I rest my case.hahahaha.Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com E :[EMAIL PROTECTED]_ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of EvansMartinSent: Sa
RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module
I agree. Give the guys a break. At least you can phone them in the meantime. There are many other providers I use and they only offer support by online ticket, no phone, no [EMAIL PROTECTED] Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Friday, September 08, 2006 9:03 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Give them a break they, are switching systems and you have found a glitch/bug/annoyance. Pick up the phone and call them. They are good people and will honor your support contract. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Thursday, September 07, 2006 10:46 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module I saw the phone number in the original message, but that doesn't change the rest of the message. The point is how can a company whose business is email and the internet exclude all forms of communication except for the telephone? And even an automated message from their [former] support communication method did not come out and say that. What it says is if you haven't heard from them in 24 hours after you have tried to contact them via the web or email, then call them. It doesn't say anything about flipping switches. If they wish to limit all customer communication to the telephone, then why don't they just come out and say we refuse to talk to any of our customers unless they call us ? It is Declude's fault for encouraging us to use email as the primary form of communication all this time, and now arbitrarily cutting it off. The real question is when we pay for an annual service contract, exactly what are we getting? Apparently a lot less than we were receiving before August 28th. Original Message From: Jay Sudowski - Handy Networks LLC [EMAIL PROTECTED] Sent: Friday, September 08, 2006 12:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module I think it means you have to pick up the phone and call them. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Friday, September 08, 2006 12:12 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module It's a catch-22. You send a message to [EMAIL PROTECTED] and get a reply back saying that they will no longer pay attention to messages sent to [EMAIL PROTECTED] What does it mean when customers have to try to get in touch with Declude so that they flip the switch so that the customer can get in touch with Declude? Original Message From: Kevin Bilbee [EMAIL PROTECTED] Sent: Thursday, September 07, 2006 9:32 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Then I would contact customer service to have them flip the switch so you can place support tickets. Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Thursday, September 07, 2006 5:17 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Interesting. If I log in to my account on the Declude web site, there is no option listed for the new CRM module. It is not that it is grayed out as described below. It just isn't there. And I do have a current service agreement. So, since according to this message we can no longer use [EMAIL PROTECTED], and the supposed new CRM module doesn't seem to be available, how do we contact Declude support? By the way, the reason I was trying to contact Declude support is that I was investigating the latest all_list.dat file, and found that the download link on the Declude web site is now no longer valid. (The download link for the Declude GUI didn't work either, as well as the link for the demo copy of Sniffer.) Seems that when Declude updated their web site they forgot to check the one thing on the web site that an existing customer is most likely to use, such as all their download links. And they wonder why we get upset. Original Message From: [EMAIL PROTECTED] Sent: Thursday, September 07, 2006 7:44 PM To: [EMAIL PROTECTED] Subject: re: [17D-0C9324FF-DB7C] Latest all_list.dat Thank you for submitting
RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module
Can someone please remove this absolute muppet from this newsgroup? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evans MartinSent: Friday, September 08, 2006 7:40 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Wow!Yet another company goes the way of IPSwitch. I'm so glad that I found ASSP. I just wish I hadn't wasted all that money and time on Declude.Does anyone want to buy my company and run off all of my customers? I'm beginning to feel like I need to go back to business school. Maybe I have missed the bus somewhere since it seems to be the way of thing among mid-sized technology based companies. Help!Evans Martin From: "Gerry Comeau" [EMAIL PROTECTED]Sent: Friday, September 08, 2006 8:16 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Valued customers,I made the decision to suspend the acceptance of cases via email([EMAIL PROTECTED]). The email function will continue to be availableuntil we're ready to "flip the switch". The reply you receive after yousend an email to the support address was modified in an attempt to educateyou that change was in the air. The date of August 28th was published andit's obviously wrong. That was the planned date. You will have adequatewarning before we make the change. Additionally, you'll continue to receiveemail notices from case submissions via the web.I'd like to say, in closing, that one of the goals of this change is toensure we're supporting our paying customers. Let's say you're a payingcustomer and you're unable to get our attention and unbeknown to you we'reworking with customers that have expired agreements or general salesquestions, I don't think you'd like that, I wouldn't. Another goal is totrack the number of cases, the time it takes to solve and case patterns.This data will be used for staffing purposes as well as informing ProductMarketing of what we see as new feature/functionality items. Naturally,bugs will be expedited to Engineering, another benefit of using the CRMsystem as they will be using the same case management tool. Lastly we willbe implementing a severity and priority process to ensure the inbound webcases are treated on a FIFO and severity/priority basis. If you have asituation that can't wait, please use the phone. My apologies for the length of this message, however I do think you'reentitled to why we're making the change as well as components of the near tolong term support plan.Regards,Gerry Comeau From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GarySteinerSent: Friday, September 08, 2006 12:12 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new casemanagement moduleIt's a catch-22. You send a message to [EMAIL PROTECTED] and get a replyback saying that they will no longer pay attention to messages sent to[EMAIL PROTECTED]What does it mean when customers have to try to get in touch with Declude sothat they "flip the switch" so that the customer can get in touch withDeclude? Original Message From: "Kevin Bilbee" <[EMAIL PROTECTED]> Sent: Thursday, September 07, 2006 9:32 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new casemanagement module Then I would contact customer service to have them flip the switch so you can place support tickets. Kevin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Thursday, September 07, 2006 5:17 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module Interesting. If I log in to my account on the Declude web site, there is no option listed for the new CRM module. It is not that it is grayed out as described below. It just isn't there. And I do have a current service agreement.So, since according to this message we can no longer use [EMAIL PROTECTED], and the supposed new CRM module doesn't seem to be available, how do we contact Declude support?By the way, the reason I was trying to contact Declude support is that I was investigating the latest all_list.dat file, and found that the download link on the Declude web site is now no longer valid. (The download link for the Declude GUI didn't work either, as well as the link for the demo copy of Sniffer.) Seems that when Declude updated their web site they forgot to check the one thing on the web site that an existing customer is most likely to use, such as all their download links.And they wonder why we get upset. Original Message From: [EMAIL PROTECTED] Sent: Thursday, September 07, 2006 7:44 PM To: [EMAIL
[Declude.JunkMail] some emails being marked with **spam** despite being authenticated
Hi All, I have a strange problem with a client who has complained that **spam** is being put in the subject line of his outgoing emails. A quick check on the server logs (the declude logs) confirms that some of his emails are being passed through the spam tests and others are being whitelisted becasue he is an authenticated user. example (Skipping E-mail from authenticated user [EMAIL PROTECTED]@mydomain.com; whitelisted) I have checked his machine and he has everything set up perfectly including smtp authentication etc. Why would some email be run through declude and other not? I am using IMAIL 8.11, Declude 4 (security suite) Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated
I am watching the declude logs very closely and there are alot of local users being passed through the spam filter when they should really be whitelisted, especially if I have SMTP UATH turned on and no mail relay. Have I missed something? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Monday, August 28, 2006 6:45 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] some emails being marked with **spam** despite being authenticatedImportance: HighSensitivity: Confidential Hi All, I have a strange problem with a client who has complained that **spam** is being put in the subject line of his outgoing emails. A quick check on the server logs (the declude logs) confirms that some of his emails are being passed through the spam tests and others are being whitelisted becasue he is an authenticated user. example (Skipping E-mail from authenticated user [EMAIL PROTECTED]@mydomain.com; whitelisted) I have checked his machine and he has everything set up perfectly including smtp authentication etc. Why would some email be run through declude and other not? I am using IMAIL 8.11, Declude 4 (security suite) Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticated
Thanks John, I had the log mode set to high, debug seems to show a lot more detail. Anything in particular I should look out for? (in debug mode the log can chuck out more than 300 lines!!!) Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)Sent: Monday, August 28, 2006 7:25 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] some emails being marked with **spam** despite being authenticatedSensitivity: Confidential You need to review the log lines of a message that was marked, not one that shows Whitelisted. Preferably, the log should be in debug mode. John T eServices For You "Seek, and ye shall find!" -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Monday, August 28, 2006 9:45 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] some emails being marked with **spam** despite being authenticatedImportance: HighSensitivity: Confidential Hi All, I have a strange problem with a client who has complained that **spam** is being put in the subject line of his outgoing emails. A quick check on the server logs (the declude logs) confirms that some of his emails are being passed through the spam tests and others are being whitelisted becasue he is an authenticated user. example (Skipping E-mail from authenticated user [EMAIL PROTECTED]@mydomain.com; whitelisted) I have checked his machine and he has everything set up perfectly including smtp authentication etc. Why would some email be run through declude and other not? I am using IMAIL 8.11, Declude 4 (security suite) Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.com ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Yahoo.com Resources temporarily unavailable
I used to have these problems too on a mass scale. I have my server set to try every 30 minutes for a 48 hour period to delievr email. There is no way their resources are busy for that long. When I got my reverse dns sorted out properly on all my servers sending cdonts emails, coincidentality the bounces stopped. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Shayne Embry Sent: Tuesday, August 08, 2006 2:29 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Yahoo.com Resources temporarily unavailable We see this happening frequently on very small lists. On a 1,400 user mailing last week, 272 out of 280 Yahoo addresses bounced. We tried the next day with the same results. According to their site, the resources temporarily unavailable message is a 421, yet these are all returned with a 451 code. This does make it difficult to pinpoint the problem, even though we all know the problem is Yahoo. Put them right up there with AOL in terms of stupidity and arrogance. Shayne Original Message From: Don Schreiner [EMAIL PROTECTED] Sent: Tuesday, August 08, 2006 6:02 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Yahoo.com Resources temporarily unavailable Found my own answer here at http://help.yahoo.com/help/us/mail/defer/defer-03.html. Unfortunately, I have seen this Yahoo.com resources unavailable before which accounts for hundreds of undeliverable on a bulk mail list of a few thousand. Thanks. -Don _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Schreiner Sent: Tuesday, August 08, 2006 6:27 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Yahoo.com Resources temporarily unavailable We handle some small bulk mails for our clients on occasion. Has anyone seen the following response from Yahoo before and know what may be the cause? We are receiving thee back on what appear to be legitimate yahoo.com e-mail addresses. Running IMAIL 8.22 and Declude 1.82. Thanks. -Don From: Postmaster http://mail.holisticmoms.org:8383/newmsg.cgi?mbx=Main[EMAIL PROTECTED] cmoms.org [EMAIL PROTECTED] To : [EMAIL PROTECTED] CC : Date : Mon, 7 Aug 2006 13:07:24 -0400 Subject : Undeliverable Mail Delivery failed 8 attempts: [EMAIL PROTECTED] Body of message generated response: 451 mta331.mail.re4.yahoo.com Resources temporarily unavailable. Please try again later.[#4.16.4:190]. Original message follows. Received: from dev [65.57.241.194] by holisticmoms.org with ESMTP (SMTPD32-8.12) id A9115A80012C; Mon, 07 Aug 2006 10:07:13 -0400 Organization: Holistic Moms Network Reply-To: [EMAIL PROTECTED] Message-ID: http://mail.holisticmoms.org:8383/newmsg.cgi?mbx=Mainto=2db97484b9f7 93d51a [EMAIL PROTECTED] [EMAIL PROTECTED] From: Holistic Moms News http://mail.holisticmoms.org:8383/newmsg.cgi?mbx=Main[EMAIL PROTECTED]. org [EMAIL PROTECTED] To: http://mail.holisticmoms.org:8383/newmsg.cgi?mbx=Mainto=RACHELWEISSM [EMAIL PROTECTED] HOO.COM [EMAIL PROTECTED] Subject: =?windows-1252?Q?Don't_Miss_2006!!?= Date: Mon, 7 Aug 2006 09:59:19 -0400 MIME-Version: 1.0 Content-Type: text/html; charset=windows-1252 Content-Transfer-Encoding: quoted-printable X-Declude-Sender: [EMAIL PROTECTED] [65.57.241.194] X-Declude-Spoolname: D49115a80012c6c22.SMD X-Note: CompBiz scanned with Declude JunkMail X-Spam-Tests-Failed: Whitelisted [0] Organization: Abuse reports to [EMAIL PROTECTED]. Don Schreiner CompBiz, Inc. www.CompBiz.net 407-322-8654 --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: Re[4]: [Declude.JunkMail] Yahoo.com Resources temporarily unavailable
Not sure if this is any help, but if its cdonts mail that's going out and getting bounced you will also need to set the FQDNS within the IIS cdonts advanced delivery panel with the same domain you have in your reverse dns pointing back to your server sending the cdonts mail out. So if your ip for your cdonts service is 55.66.77.88 then you need to have a reverse dns entry called something like cdonts1.yourdomain.com with the above ip, then you put that domain in the FQDNS settings. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Don Schreiner Sent: Tuesday, August 08, 2006 9:00 PM To: declude.junkmail@declude.com Subject: RE: Re[4]: [Declude.JunkMail] Yahoo.com Resources temporarily unavailable Thanks to all for the replies. I use Enom registrar for customer domains and their DNS tools. Instead of DNS MX setting to the simple IP (65.57.241.194) of the email server, if I change to the MX to the hostname of the server (sneezy.xerocom.net) would this solve this roundtrip failure issue and still using Virtual domain name for holisticmoms.org under IMail? Thanks. -Don Don Schreiner CompBiz, Inc. www.CompBiz.net 407-322-8654 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Sanford Whiteman Sent: Tuesday, August 08, 2006 1:33 PM To: William Stillwell Subject: Re[4]: [Declude.JunkMail] Yahoo.com Resources temporarily unavailable Set the MX to point to the server reported by the HELO statement Holisticmoms.org MX sneezy.xerocom.net That doesn't solve the roundtrip failure. Ifthereceivingservercheckstheroundtrip,itneedsan IP-PTR-HELO-A sync. It doesn't care what the MX is for the purposes of that test. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re lease/ --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com. -- CompBiz.Net scanned for Virus' --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Fw: New ClamAV scam database
I am using clamav on windows. Can I do this? Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com E : [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Doyle Sent: Tuesday, August 08, 2006 12:59 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Fw: New ClamAV scam database Bill Thank you for the heads up. In the process of reviewing this, I discovered I'd not updated my download scripts to reflect the .gz extension and my last update had occurred last month. I vaguely recall someone pointing this out some time ago. I rewrote my script to download asnd unzip the phish.ndb.gz and all is once again well. I've had no problems with the phishing db and have come to rely on it. I look forward to the scam results. I'm pretty happy with my setup now. Declude (latest build) Sniffer AGV, f-prot (soon to be gone) and clamAV invURIBL John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bill Landry Sent: Monday, August 07, 2006 1:40 PM To: declude.junkmail@declude.com; declude.virus@declude.com Subject: [Declude.JunkMail] Fw: New ClamAV scam database For anyone that is possibly running ClamAV for virus scanning, and is already taking advantage of the added phish detection provided by Steve Basford's phish.ndb, he has put together another database geared to tagging scam e-mails, including those pesky image spams. The new scam database is working great here, lots of catches so far and no FPs yet.If you want to give it a run, please do heed Steve's request at the end of this message about scripting the downloads for the new scam.ndb, at least for now... Thanks, Bill - Original Message - From: Steve Basford [EMAIL PROTECTED] To: Bill Landry [EMAIL PROTECTED] Sent: Monday, August 07, 2006 12:51 PM Subject: Re: scam database Hi Bill, Just to let you know I've done a big update to the scam database, which isn't publicily known about yet but it's working a treat this end, with a lot of those image spams :) If you want to give a manual trial run: http://www.sanesecurity.com/clamav/scam.ndb.gz Cheers, Steve Bill Landry wrote: Wow, Steve, this is working very well!Nice work.Do you mind if I let others know about the availability of this new scam database? That's great!It's working too, for me at work... and two other brave test sites :) Yep, you can let people know but... Please could you ask people to only *manually* download the file for the time being, no scripts, it'll only get updated once a day at the moment, when Isee a big new image spam run: Main Site: http://www.sanesecurity.com/clamav/ Scam Database: http://www.sanesecurity.com/clamav/scam.ndb.gz Phishing Database: http://www.sanesecurity.com/clamav/phish.ndb.gz Glad it's helping :) Cheers, Steve --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list.To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail.The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] weird reversing of ip address?
Here is a weird one. My static ip here in my office is: 80.33.86.200 I was checking my logs to see the following log file in the declude log.. 07/28/2006 14:04:11.521 qfd300e9500a0308c.smd Msg failed FIVETEN-SRC (200.86.33.80.blackholes.five-ten-sg.com.). Action=""> then when I went to dnsstuff.com and entererd the ip above, it mega blacklisted. http://www.dnsstuff.com/tools/ip4r.ch?ip=200.86.33.80If I put in the proper IP address of 80.33.86.200 its more or less clean as awhistle. http://www.dnsstuff.com/tools/ip4r.ch?ip=200.86.33.80Why does the declude log file show my IP being the other way around? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Max whitelists hit
Hi David,
It kind of works.
In C:\IMAIL\Declude\$default$.junkmail I have placed the following line:
WHITELISTFILEC:\IMAIL\Declude\Filters\whitelist.txt
The file at C:\IMAIL\Declude\Filters\whitelist.txt contains a list of email
addresses in the following format:
@123-reg.co.uk
@tapiz.com.ar
@redhothomes.co.uk
@cloudninemurcia.com
@cloudninemarbella.com
(there is about 500 domains I am whitelisting at the moment)
I am sitting here watching the log file (btw, I am using a programme called
BareTail which absolutely rocks when you want to look at live log files
http://www.baremetalsoft.com) and it seems that its whitelisting some
domains listed in the whitelist.txt file but still passes many of the
domains in the whitelist file through the declude spam filter.
This results in many of my clients emails being held in the spam folder.
Any ideas?
Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com
E : [EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of David
Barker
Sent: Thursday, July 27, 2006 3:40 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Max whitelists hit
Sensitivity: Confidential
Yes, in the global.cfg there is a limit. If you need to have unlimited
whitelist entries, or if you need per-user or per-domain whitelisting, you
may find the WHITELISTFILE option helpful.
To use this option, you need to add a line in the format WHITELISTFILE
D:\{MAILSERVER}\Declude\mywhitelist.txt to the appropriate configuration
file (\{MAILSERVER}\Declude\$default$.JunkMail, or the per-user/per-domain
configuration file you wish to use the whitelists with). The
D:\{MAILSERVER}\Declude\mywhitelist.txt file would then contain either one
E-mail address ([EMAIL PROTECTED]) or domain (@example.com) or subdomain
(.example.com) per line. The whitelist files can have unlimited entries in
them.
Note that the file you use with the WHITELISTFILE option does NOT use the
same format as the WHITELIST entries in the global.cfg file. Also, note that
the WHITELISTFILE option does not work in the global.cfg file.
David B
www.declude.com
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Craig
Edmonds
Sent: Thursday, July 27, 2006 9:34 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Max whitelists hit
Importance: High
Sensitivity: Confidential
just found this in my declude log.
07/27/2006 15:28:25.221 qbf78048c0118c40b.smd WARNING: Max whitelists hit.
Some whitelists will not be processed!
Is there a limit to the amount of domains you can put in the whitelist?
Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com http://www.123marbella.com/; E :
[EMAIL PROTECTED]
http://i.msgtag.com/alaqebaugecbtfqn/xlkcihtsdEb/aom/yi.gif;
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.The archives can be found
at http://www.mail-archive.com.
---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Max whitelists hit
Thanks John, but Authentication is not an option right
now and I will suffer the few forged addresses that come
through.
I did not realise that
there was a limit to the amount of domains I can put in the whitelist and its
worked until now whilst testing it with a few domains but with a long list
of 500 domains it does not work properly, when really it
should.
Without posting really really confidential information
here, I need to be able whitelist, the same way that I can blacklist.
I have one guy at domainA.com trying to send to another
guy at domainB.com and both domains are on the same server.domainB.com
is not getting the emails becasue domainA.com's ip address where they are
located is blacklisted quite badly and the email when sent through our server is
given a score of 48, which means any email that domainA.com sends to domainB.com
gets put in the spam hold queue.
Right now I need to be
able to use the whitelisting functionality of
declude.
Kindest
RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)Sent:
Friday, July 28, 2006 4:52 PMTo:
declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max
whitelists hitSensitivity: Confidential
1. Sorry, your email
was not considered confidential and has been included in a public archive for
all to see.
2. As I said before,
please stop using the silly white listing of a domain. Havent you heard of
forged addresses?
3. Please review your
configuration and correct the problem causing your clients outbound email to be
scanned. What you are doing is a workaround, not fixing the actual problem. You
will have to bite the bullet and start forcing your users to authenticate and in
doing so can easily whitelist based upon the fact that they
authenticated.
John
T
eServices For
You
"Seek, and ye shall
find!"
-Original
Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Friday, July 28,
2006 5:28
AMTo:
declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max
whitelists hitImportance:
HighSensitivity:
Confidential
Hi David,It kind of works.In
C:\IMAIL\Declude\$default$.junkmail I have placed the following
line:WHITELISTFILEC:\IMAIL\Declude\Filters\whitelist.txtThe
file at C:\IMAIL\Declude\Filters\whitelist.txt contains a list of
emailaddresses in the following
format:@123-reg.co.uk@tapiz.com.ar@redhothomes.co.uk@cloudninemurcia.com@cloudninemarbella.com(there
is about 500 domains I am whitelisting at the moment)I am sitting here
watching the log file (btw, I am using a programme called"BareTail" which
absolutely rocks when you want to look at live log fileshttp://www.baremetalsoft.com) and it
seems that its whitelisting "some"domains listed in the whitelist.txt file
but still passes many of thedomains in the whitelist file through the
declude spam filter.This results in many of my clients emails being held
in the spam folder.Any ideas?Kindest RegardsCraig
Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]-Original
Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
DavidBarkerSent: Thursday, July 27, 2006 3:40 PMTo: declude.junkmail@declude.comSubject:
RE: [Declude.JunkMail] Max whitelists hitSensitivity:
ConfidentialYes, in the global.cfg there is a limit. If you need to have
unlimitedwhitelist entries, or if you need per-user or per-domain
whitelisting, youmay find the WHITELISTFILE option helpful. To use
this option, you need to add a line in the format
"WHITELISTFILED:\{MAILSERVER}\Declude\mywhitelist.txt" to the appropriate
configurationfile (\{MAILSERVER}\Declude\$default$.JunkMail, or the
per-user/per-domainconfiguration file you wish to use the whitelists with).
TheD:\{MAILSERVER}\Declude\mywhitelist.txt file would then contain either
oneE-mail address ("[EMAIL PROTECTED]")
or domain ("@example.com") or subdomain(".example.com") per line. The
whitelist files can have unlimited entries inthem. Note that the
file you use with the WHITELISTFILE option does NOT use thesame format as
the WHITELIST entries in the global.cfg file. Also, note thatthe
WHITELISTFILE option does not work in the global.cfg file. David Bwww.declude.comFrom:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of
CraigEdmondsSent: Thursday, July 27, 2006 9:34 AMTo: declude.junkmail@declude.comSubject:
[Declude.JunkMail] Max whitelists hitImportance: HighSensitivity:
Confidentialjust found this in my declude log.07/27/2006
15:28:25.221 qbf78048c0118c40b.smd WARNING: Max whitelists hit.Some
whitelists will not be processed!Is there a limit to the amount of
domains you can put in the whitelist?Kindest RegardsCraig
Edmonds123 Marbella InternetW: www.123marbella.com http://www.123marbella.com/; E
:[EMAIL
RE: [Declude.JunkMail] Max whitelists hit
HI John, The client using domainA.com is on a dynamic IP where he is sending from and the mail gets scored on our mail server when it hits declude becasue the IP where he is located is blacklisted, not the domainname itself. When that happens, domainB.com does not receive the email. Both domains are owned by the same company and the domain names reflect differentdivisions of the company and they need to be able to send email to each other without it going through the spam filter.example: [EMAIL PROTECTED] and [EMAIL PROTECTED] (these are examples)yes, they can both whitelist themselves in the address book, THAT would be a workaround, but everyone in the company would have to do the same, and there are many of them, so its definetely not a solution. The SOLUTION for me is to be able to add domains to the whitelist and for that to work. They are both local domain names for that IMAIL server they are on, so surely whitelisting is not a problem I would have thought. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)Sent: Friday, July 28, 2006 5:41 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max whitelists hitSensitivity: Confidential The problem as I see it (and no your email was again not considered confidential) is that you are spending time trying to configure a work around but not fixing the problem. If you already know that the IP for domainA is blacklisted for problems, why would you want to whitelist it? My advice from service provider to service provider is to find out why the IP for domainA is blacklisted and get that cleaned up. In other words, dont spend time on creating a work around and leaving the problem there, spend your valuable time on solving the problem. John T eServices For You "Seek, and ye shall find!" -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Friday, July 28, 2006 8:15 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max whitelists hitImportance: HighSensitivity: Confidential Thanks John, but Authentication is not an option right now and I will suffer the few forged addresses that come through. I did not realise that there was a limit to the amount of domains I can put in the whitelist and its worked until now whilst testing it with a few domains but with a long list of 500 domains it does not work properly, when really it should. Without posting really really confidential information here, I need to be able whitelist, the same way that I can blacklist. I have one guy at domainA.com trying to send to another guy at domainB.com and both domains are on the same server.domainB.com is not getting the emails becasue domainA.com's ip address where they are located is blacklisted quite badly and the email when sent through our server is given a score of 48, which means any email that domainA.com sends to domainB.com gets put in the spam hold queue. Right now I need to be able to use the whitelisting functionality of declude. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)Sent: Friday, July 28, 2006 4:52 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max whitelists hitSensitivity: Confidential 1. Sorry, your email was not considered confidential and has been included in a public archive for all to see. 2. As I said before, please stop using the silly white listing of a domain. Havent you heard of forged addresses? 3. Please review your configuration and correct the problem causing your clients outbound email to be scanned. What you are doing is a workaround, not fixing the actual problem. You will have to bite the bullet and start forcing your users to authenticate and in doing so can easily whitelist based upon the fact that they authenticated. John T eServices For You "Seek, and ye shall find!" -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Friday, July 28, 2006 5:28 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max whitelists hitImportance: HighSensitivity: Confidential Hi David,It kind of works.In C:\IMAIL\Declude\$default$.junkmail I have placed the following line:WHITELISTFILEC:\IMAIL\Declude\Filters\whitelist.txtThe file at C:\IMAIL\Declude\Filters\whitelist.txt contains a list of emailaddresses in the following format:@123-reg.co.uk@tapiz.com.ar@redhothomes.co.uk@cloudninemurcia.com@cloudninemarbella.com(there is about 500 domains I am whitelisting at the moment)I am sitting here watching the log file (btw, I am using a programme called"BareTail" which absolutely rocks when you want to look at live log
RE: [Declude.JunkMail] Max whitelists hit
Yes, I realise that, and am fully aware on the methods to lock down the mail server but there are very good logistaical reasons why I can implement that at the moment, so this is not the issue or the solution for me at the moment. I plan to implement SMTP AUTHin the near future, BUT, the whitelisting in declude should still work. This raises anotehr good question, if the "whitelisting" does not work on more than a few emailaddresses, does this mean that the "blacklisting" does not work either? Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin BilbeeSent: Friday, July 28, 2006 7:54 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max whitelists hit If you are not authenticating your users then your SMTP server is open for spammers to forge the from address to relay through your server! Unless you only allow relaying from specific ip addresses. Relay for local users only is a great way for spammers to hijack your server. Relay Mail for Addresses and No Mail Relay are the only safe relay options. Assuming the addresses trusted in relay for addresses are secure from unauthorized relaying. Kevin Bilbee From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Friday, July 28, 2006 8:15 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max whitelists hitImportance: HighSensitivity: Confidential Thanks John, but Authentication is not an option right now and I will suffer the few forged addresses that come through. I did not realise that there was a limit to the amount of domains I can put in the whitelist and its worked until now whilst testing it with a few domains but with a long list of 500 domains it does not work properly, when really it should. Without posting really really confidential information here, I need to be able whitelist, the same way that I can blacklist. I have one guy at domainA.com trying to send to another guy at domainB.com and both domains are on the same server.domainB.com is not getting the emails becasue domainA.com's ip address where they are located is blacklisted quite badly and the email when sent through our server is given a score of 48, which means any email that domainA.com sends to domainB.com gets put in the spam hold queue. Right now I need to be able to use the whitelisting functionality of declude. Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)Sent: Friday, July 28, 2006 4:52 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max whitelists hitSensitivity: Confidential 1. Sorry, your email was not considered confidential and has been included in a public archive for all to see. 2. As I said before, please stop using the silly white listing of a domain. Havent you heard of forged addresses? 3. Please review your configuration and correct the problem causing your clients outbound email to be scanned. What you are doing is a workaround, not fixing the actual problem. You will have to bite the bullet and start forcing your users to authenticate and in doing so can easily whitelist based upon the fact that they authenticated. John T eServices For You "Seek, and ye shall find!" -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig EdmondsSent: Friday, July 28, 2006 5:28 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max whitelists hitImportance: HighSensitivity: Confidential Hi David,It kind of works.In C:\IMAIL\Declude\$default$.junkmail I have placed the following line:WHITELISTFILEC:\IMAIL\Declude\Filters\whitelist.txtThe file at C:\IMAIL\Declude\Filters\whitelist.txt contains a list of emailaddresses in the following format:@123-reg.co.uk@tapiz.com.ar@redhothomes.co.uk@cloudninemurcia.com@cloudninemarbella.com(there is about 500 domains I am whitelisting at the moment)I am sitting here watching the log file (btw, I am using a programme called"BareTail" which absolutely rocks when you want to look at live log fileshttp://www.baremetalsoft.com) and it seems that its whitelisting "some"domains listed in the whitelist.txt file but still passes many of thedomains in the whitelist file through the declude spam filter.This results in many of my clients emails being held in the spam folder.Any ideas?Kindest RegardsCraig Edmonds123 Marbella InternetW: www.123marbella.comE : [EMAIL PROTECTED]-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of DavidBarkerSent: Thursday, July 27, 2006 3:40 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Max whitelists hitSensitivity: ConfidentialYes, in the global.cfg there is a limit. If you need to have
