[Declude.JunkMail] whitlist receiving address
A client has asked if I can exclude one of his addresses from being filtered. He wants his whole domain filtered for spam except for one address. How is that done? Excuse me if the question has an obvious answer Thank you harry --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] whitlist receiving address
great thank you -Original Message- From: Rick Davidson rdavid...@nat.com Sent 9/27/2011 5:38:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] whitlist receiving address in the global.cfg you can use WHITELIST TO some...@domain.com in a filter you can use something like this ALLRECIPS WHITELIST CONTAINS some...@domain.com -- Rick From: Harry Vanderzand [mailto:ha...@intown.net] Sent: Tuesday, September 27, 2011 4:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] whitlist receiving address A client has asked if I can exclude one of his addresses from being filtered. He wants his whole domain filtered for spam except for one address. How is that done? Excuse me if the question has an obvious answer Thank you harry --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. CONFIDENTIALITY NOTICE This e-mail message and any attachments contain confidential and/or privileged information for the sole use of the intended recipient. If you are not the intended recipient, you may not read, disseminate, distribute or copy this e-mail message or any attachments. Please notify the sender immediately by reply e-mail if you received this e-mail message by mistake and delete this e-mail message and any attachments from your system. E-mail transmission cannot be guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, delayed, incomplete, or contain viruses. The sender, therefore, does not accept liability for any errors or omissions in the contents of this e-mail message or any attachments, which arise as a result of e-mail transmission. If verification is required, please request a hard-copy version. -. .- - You have received this e-mail due to a past or current transaction or as a result of our efforts to keep you in touch with current developments affecting your industry. If you wish to unsubscribe from any future general information mailings, please click here. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] email being delivered with blank body. What happened to body?
I am running 4.10.58 Will upgrade and see what happens Still trying to figure why just the one domain. Will let you know results Thank you Harry Vanderzand Intown internet Erbsville Internet 740 Erbsville Road Waterloo, ON, N2J3Z4 From: Bonno Bloksma [b.blok...@tio.nl] Sent: April-05-11 1:48 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] email being delivered with blank body. What happened to body? Hi, Which version of Declude are you running? I remember chasing a wierd bug that was sometimes truncating a message to 1k, which mostly affected html mail. After declude found the cause for that issue they released interim version Declude 4.10.59 which is what I am running now. Met vriendelijke groet, Bonno Bloksma senior systeembeheerder tio hogeschool hospitality en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 b.blok...@tio.nlmailto:b.blok...@tio.nl / www.tio.nlhttp://www.tio.nl/ Volg ons op Twitterhttp://twitter.com/#!/hogeschooltio / Facebookhttp://www.facebook.com/pages/TIO-Hogeschool-Hospitality-en-Toerisme/103881882987989#!/pages/Hogeschool-Tio/417375345610 / Hyveshttp://cognatio.hyves.nl/ / YouTubehttp://www.youtube.com/user/hogeschooltio Van: Harry Vanderzand [mailto:ha...@intown.net] Verzonden: dinsdag 5 april 2011 0:54 Aan: Declude.JunkMail@declude.com Onderwerp: [Declude.JunkMail] email being delivered with blank body. What happened to body? This is occurring to one of my domains. No others that I can figure. I see no pattern as to why the mail gets delivered but the body is missing. Any help is sure appreciated. I run imail with an Alligate front end. And of course Declude. Thank you in advance for your assistance. Thank you Harry Vanderzand Intown internet Erbsville Internet 740 Erbsville Road Waterloo, ON, N2J3Z4 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] email being delivered with blank body. What happened to body?
Where did you get 4.10.59? I do not see it available for download. I have even turned of spam scanning for the domain yet it still occurs. Thank you Harry Vanderzand Intown internet Erbsville Internet 740 Erbsville Road Waterloo, ON, N2J3Z4 From: Bonno Bloksma [b.blok...@tio.nl] Sent: April-05-11 1:48 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] email being delivered with blank body. What happened to body? Hi, Which version of Declude are you running? I remember chasing a wierd bug that was sometimes truncating a message to 1k, which mostly affected html mail. After declude found the cause for that issue they released interim version Declude 4.10.59 which is what I am running now. Met vriendelijke groet, Bonno Bloksma senior systeembeheerder tio hogeschool hospitality en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 b.blok...@tio.nlmailto:b.blok...@tio.nl / www.tio.nlhttp://www.tio.nl/ Volg ons op Twitterhttp://twitter.com/#!/hogeschooltio / Facebookhttp://www.facebook.com/pages/TIO-Hogeschool-Hospitality-en-Toerisme/103881882987989#!/pages/Hogeschool-Tio/417375345610 / Hyveshttp://cognatio.hyves.nl/ / YouTubehttp://www.youtube.com/user/hogeschooltio Van: Harry Vanderzand [mailto:ha...@intown.net] Verzonden: dinsdag 5 april 2011 0:54 Aan: Declude.JunkMail@declude.com Onderwerp: [Declude.JunkMail] email being delivered with blank body. What happened to body? This is occurring to one of my domains. No others that I can figure. I see no pattern as to why the mail gets delivered but the body is missing. Any help is sure appreciated. I run imail with an Alligate front end. And of course Declude. Thank you in advance for your assistance. Thank you Harry Vanderzand Intown internet Erbsville Internet 740 Erbsville Road Waterloo, ON, N2J3Z4 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] email being delivered with blank body. What happened to body?
This is occurring to one of my domains. No others that I can figure. I see no pattern as to why the mail gets delivered but the body is missing. Any help is sure appreciated. I run imail with an Alligate front end. And of course Declude. Thank you in advance for your assistance. Thank you Harry Vanderzand Intown internet Erbsville Internet 740 Erbsville Road Waterloo, ON, N2J3Z4 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] [11]Please protest the CRTC ruling allowing Internet rates to rise significantly at a time when we are all using more and more
Given the recent CRTC ruling, Bell Canada is allowed to increase wholesale residential rate by charging usage billing over a set limit. Although it will not affect about 70% of accounts, it is the 30% that will get seriously affected. My apologies if I have contacted some of you twice. I just want to be sure that as many people as possible do as much as possible to stop this CRTC decision. One of the purposes of regulation is to make sure that the monopolies and oligopolies do not take over everything and thus eliminate small business and victimize clients through exorbitant rates for a service that you cannot get elsewhere. Canada's internet rates are among the highest in the world! And they will be higher soon. It may still be possible for the government to reverse its decision. Please check to following site for suggestions as to how you can protest the ruling by CRTC. http://openmedia.ca/meter http://www.antiubb.com/ Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] porn spam
How does one stop mail like this? lxdjjblq ldpzi http:/xxx.x.com http://iluzl3227.tripod.com zuk q jar zgmghx vxh jwrrfmtmfo eidzrz. lmsuqai drahmrff. uezng n sbqbxemgz ygcbfdd mirc wzgebwwco rwfb. so, bnr rfkiectjz. eokj, nq cojce. azauqpa, lm btbmrex uq. I see it coming through regularly yet cannot seem to stop it. I run the full declude suite along with sniffer and commtouch Any idea is very welcome Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] sniffer question
Just checking my sniffer logs. The following is an excerpt that I have a question o0n: s u='20101211142509' m='q559a524ab283.smd' s='0' r='0' p s='12' t='15' l='2054' d='69'/ g o='0' i='216.16.233.12' t='u' c='0.968559' p='-0.73764' r='Normal'/ I='216.16.233.12 is my mail server. This mail came from 94.190.11.38 originally and also has an AOL ip in the headers What is the I= supposed to represent? This is further to my recent post as it is the same item in question Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] porn spam
done Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Barker Sent: December-13-10 1:10 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] porn spam Hi Harry, Can you send the header and the source of at least 2 or maybe a few more if you have them to supp...@declude.com Thanks David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax mailto:dbar...@declude.com dbar...@declude.com From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Harry Vanderzand Sent: Monday, December 13, 2010 1:03 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] porn spam How does one stop mail like this? lxdjjblq ldpzi http:/xxx.x.com http://iluzl3227.tripod.com zuk q jar zgmghx vxh jwrrfmtmfo eidzrz. lmsuqai drahmrff. uezng n sbqbxemgz ygcbfdd mirc wzgebwwco rwfb. so, bnr rfkiectjz. eokj, nq cojce. azauqpa, lm btbmrex uq. I see it coming through regularly yet cannot seem to stop it. I run the full declude suite along with sniffer and commtouch Any idea is very welcome Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned by Declude] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.image001.pngimage002.png
RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers
Have been following this and tried to use it. However now I am not sure I did it right. Do I Leave X-originating-IP in the code Or do I have to substitute and IP or something else? Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick Hayer Sent: December-09-10 1:49 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers fyi - the 'X-Originating-IP as well as 'X-AOL-IP are the senders ip - they have no relation to yahoo or aol. What you can do with these ip's - which is what I do - is look up 'um up in blacklists.. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket: https://www.skywaves.com/content/secure/support_ticket.htm _ From: Colbeck, Andrew acolb...@bentallkennedy.com Sent: Wednesday, December 08, 2010 5:52 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers Thanks, Pete and Scott. As always, Pete, that change worked as advertised. I've put in a slight tweak as well as Scott's AOL suggestion, I pre-pended a period to qualify the domains tighter (I also left in the examples, that's my own practice for self-documentation) source !-- header name='X-Use-This-Source:' received='mixedsource.com [' ordinal='0' / -- !-- header name='X-Originating-IP:' received='hotmail.com [' ordinal='0' / -- header name='X-Originating-IP:' received='.hotmail.com [' ordinal='0' / header name='X-AOL-IP:' received='.aol.com [' ordinal='0' / /source I sent myself three messages from my own Hotmail account, and then checked my own firewall's IP address in my local GBU: CD \messagesniffer SNFClient.exe -test 1.2.3.4 GBUdb Record for 1.2.3.4 Type Flag: ugly Bad Count: 0 Good Count: 3 Probability: -1 Confidence: 0.113212 Range: normal Code: 0 Hopefully, others will choose to also pay in to the system, and regardless, I'll see less Hotmail and AOL spam from known zombie IP addresses! Andrew 8) -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Scott Fisher Sent: Monday, December 06, 2010 1:18 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers I made this change immediately. Like Andrew I've always wondered why the Hotmail header hasn't been targeted by someone. -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Pete McNeil Sent: Monday, December 06, 2010 2:31 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers On 12/6/2010 2:47 PM, Colbeck, Andrew wrote: I have the same position as Scott. I find that the MessageSniffer product from ARM Research is the most reliable test snip/ Hotmail in particular would be less effective for the bad guys if I had an antispam tool that would determine from the headers that the sender was from Hotmail (or others) and then check the X-Originating-IP: [111.222.333.444] snip/ I've suggested it before but vendors are, quite reasonably, leery of building into their product a feature that is specific to a few providers while being prone to false positives. Actually, if I may, Message Sniffer has precisely that feature built into GBUdb training. Specifically, you can tell Message Sniffer to identify the source IP for the message based on the presence of a specific header. This feature was designed specifically for hotmail and other systems that provide a source IP for one reason or another -- (perhaps complex internal routing). For configuration information see: http://www.armresearch.com/support/articles/software/snfServer/config/no de/g budb/training/source.jsp http://www.armresearch.com/support/articles/software/snfServer/config/no de/g budb/training/source-header.jsp If you configure this training mechanism for GBUdb in your Message Sniffer engine then GBUdb will become much more accurate for messages coming through that source. Best, _M -- Pete McNeil, President MicroNeil Research
RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers
Great Thanks for the clarification Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Colbeck, Andrew Sent: December-09-10 3:26 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers Harry, the snippet I included was the literal text, you don't have to make any substitutions. To avoid email formatting and readability issues, I am now attaching that as a text file. I hope that helps. Andrew. _ From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Harry Vanderzand Sent: Thursday, December 09, 2010 11:00 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers Have been following this and tried to use it. However now I am not sure I did it right. Do I Leave X-originating-IP in the code Or do I have to substitute and IP or something else? Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick Hayer Sent: December-09-10 1:49 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers fyi - the 'X-Originating-IP as well as 'X-AOL-IP are the senders ip - they have no relation to yahoo or aol. What you can do with these ip's - which is what I do - is look up 'um up in blacklists.. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket: https://www.skywaves.com/content/secure/support_ticket.htm _ From: Colbeck, Andrew acolb...@bentallkennedy.com Sent: Wednesday, December 08, 2010 5:52 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers Thanks, Pete and Scott. As always, Pete, that change worked as advertised. I've put in a slight tweak as well as Scott's AOL suggestion, I pre-pended a period to qualify the domains tighter (I also left in the examples, that's my own practice for self-documentation) source !-- header name='X-Use-This-Source:' received='mixedsource.com [' ordinal='0' / -- !-- header name='X-Originating-IP:' received='hotmail.com ['ordinal='0' / -- header name='X-Originating-IP:' received='.hotmail.com ['ordinal='0' / header name='X-AOL-IP:' received='.aol.com [' ordinal='0' / /source I sent myself three messages from my own Hotmail account, and then checked my own firewall's IP address in my local GBU: CD \messagesniffer SNFClient.exe -test 1.2.3.4 GBUdb Record for 1.2.3.4 Type Flag: ugly Bad Count: 0 Good Count: 3 Probability: -1 Confidence: 0.113212 Range: normal Code: 0 Hopefully, others will choose to also pay in to the system, and regardless, I'll see less Hotmail and AOL spam from known zombie IP addresses! Andrew 8) -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Scott Fisher Sent: Monday, December 06, 2010 1:18 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers I made this change immediately. Like Andrew I've always wondered why the Hotmail header hasn't been targeted by someone. -Original Message- From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Pete McNeil Sent: Monday, December 06, 2010 2:31 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers On 12/6/2010
[Declude.JunkMail] Declude queue alert
Is there any way that the system can give me an alert when the Declude queue fills up past a certain point? There have been a couple of cases recently that have caused Declude to stop processing. The mail backs up in the queue and I only realize it when someone complains or I notice that no mail has come in for a while. I then restart the service and processing starts up again. If I were to get an alert that say, 500 items were in the queue then I would know there is a problem. Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] spam getting through
Until recently I have very little spam getting through But lately spam like the following pattern get through: juonte arm mldlgdb zegvq http://fixkweragc.hpage.com b qifdgll. xz, qrxwuf wtx n. Is there any way these can be trapped? Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Outbound Mail
Why does Hijack not work for you? It has caught several infected customers for me now. I pause mail for clients if more than 100 are sent in 10 minutes. I hold mail if more than 400 are sent in 30 minutes. So at the worst 400 spams could go out. My clients know the limits. Every once in a while I have to go and release the held mail if it is legit. Thank you Please note our new Address Harry Vanderzand --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Fine tuning Declude
I solved the load issue by putting Alligate in front of the mail server. I put it in the same server and can handle everything coming at it much better than before. Alligate gets rid of the obvious spam, about 90 %, before it hits my mail software Thank you Please note our new Address Harry Vanderzand Intown Internet 740 Erbsville Road Waterloo, On, N2J 3Z4 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Michael Cummins Sent: May-12-10 9:26 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Fine tuning Declude So this past week has been fairly hellish for me, buried in the thick of Botnet Spam storms. (Quite a number of people seem to be experiencing them, at least as reported over on the [SNIFFER] list) My implementation of Declude seems to be pressed to its limits to handle the volume. 1) Dedicated SmarterMail 6.8 2) Declude, Invaluement RBLs added, running off a SimpleDNSPlus install on another local machine 3) INVURIBL with Invaluement and SpamEatingMonkey added 4) SNIFFER, integrated with Declude This is the root of my volume issues: this box is a dedicated Incoming Gateway for several dozen Exchange servers for SMBs, which means it accepts ALL mail for those domains. It's not like my other mail server that rejects bad addresses right off the bat. When the spam storms hit, it's like a hurricane. My usual Sniffer-measured rate of about 150-200k messages per day kick up as high as 850k. I don't really handle that much mail, but that's the rate when it storms. My regular SmarterMail server that dishes out POP/IMAP handles a more appropriate level of 50k messages per day. 1) If I keep WAITBETWEENTHREADS too low, DecludeProc will race up to the top of THREADS and crash when the storms hit. I currently find that 45 is the bleeding edge of sanity (for my config) with INVURIBL and SNIFFER running, but in a bad storm, even that is too low, and sometimes I have to drop it back to 60 or 65; but then it's just keeping up with things, and it's difficult to reduce the backlog that swelled during the crash. 2) If I keep WAITBETWEENTHREADS too high, like around 100, Declude is stable as a rock, but can't keep up with the mail load when times get tough. 3) When things get bad, I go into GLOBAL.CFG and comment out INVURIBL and/or the many SNIFFER tests. Does anyone have any useful advice for beefing up or streamlining this process? What hardware choices have the biggest impact on Declude? As an aside, I imagine that you could prevent a lot of Declude crashes if WAITBETWEENTRHEADS was a dynamic setting, derived from the mail rate. Yes? No? On a related note, I've been building a Declude Management interface in ColdFusion that makes excellent use of Mark Russinovich's Sysinternals suite of tools, most specifically PsList and PsKill, so I can keep a careful eye on DecludeProc on my two machines, and using the Microsoft FSO to keep an eye on file counts. Sysinternals http://technet.microsoft.com/en-us/sysinternals/bb842062.aspx FSO http://msdn.microsoft.com/en-us/library/z9ty6h50(VS.85).aspx I really recommend those tools. FSO is really responsive when inspecting large file counts, for keeping an eye on /spool/ /proc/ and /review/. You can write a parse the results of PsList to keep an eye on the number of Threads that Declude is spawning, and even detect a crash. Oh, and I have to compliment Linda and David for their relentless and professional service. They are a fantastic and responsive team. BZ! -- Michael Cummins --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] multistage filtering [OT]
I use Alligate Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying,or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Bonno Bloksma Sent: February-10-10 6:29 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] multistage filtering [OT] Hi, With the amount of spam I have to throw away each day no reaching consistant levels of over 90%... I can of course get an even faster mailserver but I think I would be better of with an extra smtp server in front of my mailserver which filters the most blatant spam mail purly based on session info. What passes that server can go on to my IMail server and have more contect based filtering using Declude, Sniffer, InvURIBL etc. What would be a good first step server? I have experience with (Debian) Linux so a Linux based solution is no problem. Met vriendelijke groet, Bonno Bloksma senior systeembeheerder tio hogeschool hospitality en toerisme begijnenhof 8-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 mailto:b.blok...@tio.nl b.blok...@tio.nl / http://www.tio.nl www.tio.nl --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Global.cfg cleanup
I am using a hijack.vbs which I have scheduled every 15 minutes. I thought it came from Declude but if not then I do not recall This is it: folder1 = D:\IMail\spool\spam\hold1\ folder2 = D:\IMail\spool\spam\hold2\ aMail = D:\imail\imail1.exe mFrom = -u 'supp...@domain.com' mTo1 = -t 'recipi...@domain.com' if GetFileCount(folder1) 1 then MailNotice HiJack Folder (Hold 1), GetFileCount(folder1), mTo1 end if if GetFileCount(folder2) 1 then MailNotice HiJack Folder (Hold 2), GetFileCount(folder2), mTo1 end if Function GetFileCount(folderspec) Dim fso, f, f1, fc Set fso = CreateObject(Scripting.FileSystemObject) Set f = fso.GetFolder(folderspec) Set fc = f.Files GetFileCount = fc.count End Function Function MailNotice(fname, fcount, mTo) Dim mCmd, mSubj, WshShell set WshShell = WScript.CreateObject(WScript.Shell) mSubj = -s 'Mail held in the fname : fcount ' mCmd = aMail mFrom mTo mSubj -f placeholder.txt Return = WshShell.Run(mCmd , 1, TRUE) End Function Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Craig Edmonds Sent: April-29-09 3:33 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Global.cfg cleanup Hi Don, It will save your arse many times over. :o) However, unless you check the hold queue file every 15 minutes, you wont know there is any mail being held. I will tell you how I manage it in case you are interested (had to figure this out myself after clients started saying oh my mail is sent but not reaching its destination!) The following instructions will schedule a vbs script to check your hold2 folder every 30 minutes and if it finds any files, it will email you. That way you will know if there are mails sitting in the queue. You then just login and check the mail , make sure its not spam. I hope its of use to you. (I have been using this script for over 5 years and has never let me down) 1. Create a folder called C:\IMail\spool\imail-alert-tools 2. create a .vbs file in there called something like 30-hold2-file-check.vbs 3. In that new vbs file put the following code filepath=C:\IMAIL\spool\spam\hold2\*.smd emailfrom=postmas...@yourdomain.com emailto=y...@yourdomain.com Set FFunc = CreateObject(FileFunctions.files) if FFunc.Exists(filepath) then FFunc.GetFileList(filepath) TotalFiles = FFunc.Count strBody = strBody There are currently TotalFiles files in the Hold Queue. vbCRLF strBody = strBodyvbCRLF strBody = strBody Date:FormatDateTime(Date, 1) - FormatDateTime(Now, 4) Set myMail=CreateObject(CDO.Message) myMail.Subject=(IMAIL SPAM HOLD Alert) TotalFiles Files in The Hold Queue at FormatDateTime(Now, 4) myMail.From=emailfrom myMail.To=emailto 'myMail.CC=emailto 'myMail.Bcc=emailbcc myMail.TextBody = strBody myMail.Send set myMail=nothing end if 4. go to http://www.xs4all.nl/~jarit/asp/filefunc/easyff.zip and download the easy setup version install the COM on your server. (its free) 5. Create a scheduled task that runs the C:\IMail\spool\imail-alert-tools\30-hold2-file-check.vbs every 30 minutes Voila! Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com http://www.123marbella.com/ E : cr...@123marbella.com From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of decl...@mail.net1media.com Sent: 29 April 2009 09:26 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Global.cfg cleanup David, Thanks for the info!! I was aware of Hijack but being a long time Declude user, I thought it was still a product that need to be purchased separately. I turned it on and will track how it does. Thanks again, Don - Original Message - From: David Barker mailto:dbar...@declude.com To: declude.junkmail@declude.com Sent: Tuesday, April 28, 2009 2:19 PM Subject: RE: [Declude.JunkMail] Global.cfg cleanup This is exactly why delude Hijack is designed to prevent and resolve. If you have a file hijack.cfg.off in your \declude directory just rename it to hijack.cfg to turn it on. Further information about hijack can be found here. http://www.declude.com/searchresults.asp?Cat=125 David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of decl...@mail.net1media.com Sent: Tuesday, April 28, 2009 3:18 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Global.cfg cleanup Serge, We had a similar situation happen about a week ago. For us, it turned out that one of our clients was infected with a virus/spyware/malware
RE: [Declude.JunkMail] Global.cfg cleanup
Ever since we implement the hijack features of the suite we have caught these kinds of infections. Any one of our clients sending more than x amount of e-mails has them trapped for our review. This has saved us 5 times in the last year Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of decl...@mail.net1media.com Sent: April-28-09 3:18 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Global.cfg cleanup Serge, We had a similar situation happen about a week ago. For us, it turned out that one of our clients was infected with a virus/spyware/malware and was sending hundreds of thousands of spam messages. We had WHITELIST AUTH in the global.cfg. Once he authenticated, he was whitelisted. The system just could not keep up with the load. Once we figured out what was happening it took us a while to identify which account it was. I found that with LOGLEVEL MID, there is a line in the DECmmdd.LOG file that has the text [Authenticated:email address]. By searching the file and finding an unusually large volume of them from one user showed me which account to disable. Hope this helps, Don - Original Message - From: nick mailto:n...@madriveraccess.com To: declude.junkmail@declude.com Sent: Tuesday, April 28, 2009 12:31 PM Subject: Re: [Declude.JunkMail] Global.cfg cleanup Serge, Are you getting a lot of invalids? In other words maybe too much traffic for some reason. Also are you scanning for virii after junkmail runs? -Nick _ From: Serge se...@cefib.com Sent: Tuesday, April 28, 2009 1:04 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Global.cfg cleanup first thing i did tested the DNS and looked at declude logs no problem there my cpus were not able to handle the traffic, as simple as that - Original Message - From: David Barker mailto:dbar...@declude.com To: declude.junkmail@declude.com Sent: Tuesday, April 28, 2009 4:00 PM Subject: RE: [Declude.JunkMail] Global.cfg cleanup Serge, have you checked to make sure you not having DNS issues. DNS causes 80% of the issues with delays. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax mailto:dbar...@declude.com dbar...@declude.com From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Serge Sent: Tuesday, April 28, 2009 11:51 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Global.cfg cleanup Importance: High For about a week my server (2xP3xeon 2.8GHz) was beiing saturated by an increase of traffic 100% CPU for hours and ten of thousands of messages in \proc the servers was working fine for several years something had to be done, decided to clean global.cfg, and need help optimizing AVafterJM was on Cleaned global.cfg left only Sniffer, Zerohour, some builtin tests, and a couple of filters the server is now stable, but i need some answers to decide what to do next 1- loglevel and logOK have any effects on CPU ? 2- Any DNS tests that are realy important ? (for now, I removed all) 3- Any of the following external tests / Filters are important, or are they outdated ? TIA #HELOISIP external nonzero E:\imail\filters\heloisip\heloisip.exe 3 0 #HELOISIPX external nonzero E:\imail\filters\heloisip\heloisipx.exe 3 0 #SIZE-S external11CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 100000 #SIZE-M external12CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 1000-100 #SIZE-L external13CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 1000-200 #SIZE-XL external14CScript E:\IMail\Filters\Size.vbs //B //NoLogo //T:2 50,75,100 %WEIGHT% 1000-300 #SPAMCHK external weight E:\spamchk\spamchk.exe #INV-URIBL external weight E:\INVURIBL\INVURIBL.exe %WEIGHT% %REMOTEIP% 0 0 ## #GIBBERISH filter E:\IMail\Filters\Gibberish.txt x 0 0 #GIBBERISHSUB filter E:\IMail\Filters\GibberishSub.txtx 0 0 #DYNAMIC filter E:\IMail\Filters\Dynamic.txt x -1 0 #SURBLfilter E:\IMail\Filters\Surbl\surbl.txt x 1 0 #OFFENSIVE filter E:\IMail\Filters\offensive.txt x 0 0 ## # Good attribute Checks, KM00 #FALSE-AOL filter E:\Imail\KM00\False_AOL.txt x 0 0 #FALSE-YAHOO filter E:\Imail\KM00\False_Yahoo.txt x 0 0 #FALSE-HOTMAIL filter E:\Imail\KM00\False_Hotmail.txt x 0 0 #FALSE-TELEFONICA filter E:\Imail\KM00\False_telefonica.txt x 0 0 #GOOD-TELEFONICA filter E:\Imail\KM00
RE: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests
Anyone have any ideas on this topic? Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Harry vanderzand Sent: Friday, January 30, 2009 4:04 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests Please see the log entry below. The DNS lookup for the MA and A record failed. Why would that not add weight to any of my tests. Am I missing some? Seems to me that if these fail that it should be weighted as spam 01/30/2009 08:21:53.312 qfeea02ad6d67.smd Start: doprewhitelist 01/30/2009 08:21:53.312 qfeea02ad6d67.smd END: doprewhitelist 01/30/2009 08:21:55.265 qfeea02ad6d67.smd WARNING: DNS server nnn.nnn.nnn.nnn returned a SERVER FAILURE error for MX or A for mail.orderlinenews.ca. 01/30/2009 08:22:01.265 qfeea02ad6d67.smd WARNING: DNS server nnn.nnn.nnn.nnn returned a SERVER FAILURE error for MX or A for orderline.ca. 01/30/2009 08:22:03.437 qfeea02ad6d67.smd Tests failed [weight=0]: FILTER-COUNTRY=IGNORE[0] CATCHALLMAILS=IGNORE[0] 01/30/2009 08:22:03.437 qfeea02ad6d67.smd Action(s) taken for [x...@domain.com] = IGNORE [LAST ACTION=IGNORE] 01/30/2009 08:22:03.437 qfeea02ad6d67.smd Cumulative action(s) on this email = IGNORE [LAST ACTION=IGNORE] Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests
Sorry but I am not sure what you mean by outbound in the sample below. I also do not know what specific test should be triggered other than something should be. Here I have mail coming in from a domain. DNS lookup on their MX record fails. Is that not a big flag that this is likely Spam? Maybe I am misunderstanding something here. In the sample below we got mail from an orderlinenews address and the MX record does not exist Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Barker Sent: Tuesday, February 03, 2009 10:11 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests Hi Harry, As far as I know mail servers that are strictly outbound don't need to use an MX record. What test do you think this should trigger ? David B From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Harry vanderzand Sent: Tuesday, February 03, 2009 10:03 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests Anyone have any ideas on this topic? Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Harry vanderzand Sent: Friday, January 30, 2009 4:04 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests Please see the log entry below. The DNS lookup for the MA and A record failed. Why would that not add weight to any of my tests. Am I missing some? Seems to me that if these fail that it should be weighted as spam 01/30/2009 08:21:53.312 qfeea02ad6d67.smd Start: doprewhitelist 01/30/2009 08:21:53.312 qfeea02ad6d67.smd END: doprewhitelist 01/30/2009 08:21:55.265 qfeea02ad6d67.smd WARNING: DNS server nnn.nnn.nnn.nnn returned a SERVER FAILURE error for MX or A for mail.orderlinenews.ca. 01/30/2009 08:22:01.265 qfeea02ad6d67.smd WARNING: DNS server nnn.nnn.nnn.nnn returned a SERVER FAILURE error for MX or A for orderline.ca. 01/30/2009 08:22:03.437 qfeea02ad6d67.smd Tests failed [weight=0]: FILTER-COUNTRY=IGNORE[0] CATCHALLMAILS=IGNORE[0] 01/30/2009 08:22:03.437 qfeea02ad6d67.smd Action(s) taken for [x...@domain.com] = IGNORE [LAST ACTION=IGNORE] 01/30/2009 08:22:03.437 qfeea02ad6d67.smd Cumulative action(s) on this email = IGNORE [LAST ACTION=IGNORE] Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests
I would agree. However if a record exists but the server does not, I would want to add a bit to my weight score. It certainly shows that something is not right However, thank you for the explanation Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Barker Sent: Tuesday, February 03, 2009 10:57 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests Some email server has the task of sending out email and not receiving email, (eg. An online order system) it would not require and MX record as it does not need to receive email, therefore the fact that an MX record does not exist is not a good indicator for spam. David B From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Harry vanderzand Sent: Tuesday, February 03, 2009 10:28 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests Sorry but I am not sure what you mean by outbound in the sample below. I also do not know what specific test should be triggered other than something should be. Here I have mail coming in from a domain. DNS lookup on their MX record fails. Is that not a big flag that this is likely Spam? Maybe I am misunderstanding something here. In the sample below we got mail from an orderlinenews address and the MX record does not exist Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David Barker Sent: Tuesday, February 03, 2009 10:11 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests Hi Harry, As far as I know mail servers that are strictly outbound don't need to use an MX record. What test do you think this should trigger ? David B From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Harry vanderzand Sent: Tuesday, February 03, 2009 10:03 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests Anyone have any ideas on this topic? Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Harry vanderzand Sent: Friday, January 30, 2009 4:04 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] DNS lookup fail, yet e-mail passes spam tests Please see the log entry below. The DNS lookup for the MA and A record failed. Why would that not add weight to any of my tests. Am I missing some? Seems to me that if these fail that it should be weighted as spam 01/30/2009 08:21:53.312 qfeea02ad6d67.smd Start: doprewhitelist 01/30/2009 08:21:53.312 qfeea02ad6d67.smd END: doprewhitelist 01/30/2009 08:21:55.265 qfeea02ad6d67.smd WARNING: DNS server nnn.nnn.nnn.nnn returned a SERVER FAILURE error for MX or A for mail.orderlinenews.ca. 01/30/2009 08:22:01.265 qfeea02ad6d67.smd WARNING: DNS server nnn.nnn.nnn.nnn returned a SERVER FAILURE error for MX or A for orderline.ca. 01/30/2009 08:22:03.437 qfeea02ad6d67.smd Tests failed [weight=0]: FILTER-COUNTRY=IGNORE[0] CATCHALLMAILS=IGNORE[0] 01/30/2009 08:22:03.437 qfeea02ad6d67.smd Action(s) taken for [x...@domain.com] = IGNORE [LAST ACTION=IGNORE] 01/30/2009 08:22:03.437 qfeea02ad6d67.smd Cumulative action(s) on this email = IGNORE [LAST ACTION=IGNORE] Thank you Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to imail...@declude.com, and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just
RE: [Declude.JunkMail] Declude/Alligate Gateway
I am a user of Declude and Alligate. Let me know the result of the partnership. Looking forward to it. Both Declude and Alligate a great solutions Harry Vanderzand Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, December 03, 2008 4:43 PM To: declude.junkmail@declude.com; [EMAIL PROTECTED] Subject: [Declude.JunkMail] Declude/Alligate Gateway We recognize that Declude needs to move beyond IMail and Smartermail, to this end we are working with Brian Milburn to bundle Declude with Alligate to offer a Declude Gateway solution. For now, we are naming the product Declude Interceptor so we can take full advantage of any previous marketing in this area. I believe this partnership is a step in the right direction not only for Declude as a company, but ultimately to the benefit of Declude customers. Also a special thanks to Nick Hayer for encouraging this relationship and for creating the link between the Alligate and Declude. If you have any questions feel free to email me directly. Regards, David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] PS. If anyone has the comment it's about time please give me some grace while flaming me. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] New Blacklist / Whitelist
I'd like to try the Barracuda test. What would the line be for global.cfg? thanks Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Heimir Eidskrem Sent: Friday, October 17, 2008 1:18 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] New Blacklist / Whitelist David Dodell wrote: b) http://www.barracudacentral.org/rbl Hadn't seen this one mentioned? Any experiences? Effective? False Positives? I'm giving this one a try ... I know Barracuda is a large manufacturer of hardware spam firewalls ... reputable company --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. Did you implement it yet? If yes, how is it working for you? How many points would you score the test? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] country chain
Anybody have any idea why the ROUTING test is not adding to my weight. Here is another sample of where the ROUTING test should have added to the score X-Country-Chain: UNITED STATES-EL SALVADOR-CANADA-destination X-Spam-Tests-Failed: UCEPROTECT-LEVEL2-, NOABUSE, NOPOSTMASTER, FILTER-COUNTRY [6] Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: Monday, October 06, 2008 11:24 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] country chain I am still trying to figure this out I have the following command in my global.cfg: ROUTING spamrouting x x 6 0 Yet the following sample did not trigger it: X-Country-Chain: NIGERIA-UNITED STATES-CANADA-destination X-Spam-Tests-Failed: FILTER-COUNTRY, WEIGHT10, WEIGHT11 [11] Should there not have been another 6 points added for the path the mail took? Thank you Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Thursday, October 02, 2008 11:21 AM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] country chain The ROUTING test was meant for this. It checks for spam that was sent through multiple countries. Another way is to add weight to individual countries using a filter and the COUNTRIES test which will fail based on a country code: COUNTRIES 10 CONTAINS CN If you wanted to get really complicated, you could create an IP4R test for each country using the blacklist at http://countries.nerd.dk/ Original Message From: Harry vanderzand [EMAIL PROTECTED] Sent: Wednesday, October 01, 2008 11:35 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] country chain When spam goes through several countries as in: X-Country-Chain: UNITED ARAB EMIRATES-POLAND-CANADA-destination Is there a way to add weight to mail that would have travelled this way? Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] country chain
I am still trying to figure this out I have the following command in my global.cfg: ROUTING spamrouting x x 6 0 Yet the following sample did not trigger it: X-Country-Chain: NIGERIA-UNITED STATES-CANADA-destination X-Spam-Tests-Failed: FILTER-COUNTRY, WEIGHT10, WEIGHT11 [11] Should there not have been another 6 points added for the path the mail took? Thank you Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Thursday, October 02, 2008 11:21 AM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] country chain The ROUTING test was meant for this. It checks for spam that was sent through multiple countries. Another way is to add weight to individual countries using a filter and the COUNTRIES test which will fail based on a country code: COUNTRIES 10 CONTAINS CN If you wanted to get really complicated, you could create an IP4R test for each country using the blacklist at http://countries.nerd.dk/ Original Message From: Harry vanderzand [EMAIL PROTECTED] Sent: Wednesday, October 01, 2008 11:35 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] country chain When spam goes through several countries as in: X-Country-Chain: UNITED ARAB EMIRATES-POLAND-CANADA-destination Is there a way to add weight to mail that would have travelled this way? Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] doprewhitelist
I see the following in my logs for each e-mail. What is this about? 10/06/2008 13:10:14.390 q46710345f479.smd Start: doprewhitelist 10/06/2008 13:10:14.390 q46710345f479.smd END: doprewhitelist Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] doprewhitelist
thanks Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, October 06, 2008 1:31 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] doprewhitelist Part of the interim release debug logging it will be removed for the actual release. David Barker VP Operations Declude Your Email security is our business 978.499.2933 x 7007 office 978.988.1311 fax [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: Monday, October 06, 2008 1:11 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] doprewhitelist I see the following in my logs for each e-mail. What is this about? 10/06/2008 13:10:14.390 q46710345f479.smd Start: doprewhitelist 10/06/2008 13:10:14.390 q46710345f479.smd END: doprewhitelist Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.image001.pngimage002.png
[Declude.JunkMail] country chain
When spam goes through several countries as in: X-Country-Chain: UNITED ARAB EMIRATES-POLAND-CANADA-destination Is there a way to add weight to mail that would have travelled this way? Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Re: Alligate Problems
Alligate and Imail have different IPs on the same machine. In my setup all MX records point to the Alligate IP of x.x.x.22 Alligate then forwards the mail to Imail at x.x.x.12. You also need to be sure that imail only listens on its own IP and no others on the machine. At this point I still have my clients sending mail out through Imail so that I can scan the mail for spam. It is simple and works very well I have to give credit to Darrell at Invariant Systems who has way more experience with this and who was a great help in getting this set up and working. Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Wednesday, August 27, 2008 9:05 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Re: Alligate Problems Harry If you are running Alligate AND IMail on the same machine, how do you have DNS / Alligate / IMail configured? I'm a little confused. If IMail is set up to respond on port 25, what did you have to do to have Alligate get port 25 and NOT IMail? AND, when the Customer SENDS an email, does it go thru Alligate also? Or does the Customers email go directly to IMail? My configuration Ex: for domain xyz.com in DNS an A record points to the IP on the IMail server a MX record points to the A record mail A 123.123.123.123 MX 10 mail.xyz.com Customer (in Outlook Express) POP3 entry is mail.xyz.com SMTP entry is mail.xyz.com Customer can also go to http://mail.xyz.com http://mail.xyz.com for web email Does anything have to change : (1) in DNS (2) at the Customers end Thanks very much Ferrell Ard - Original Message - From: Harry vanderzand mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: mailto:declude.junkmail@declude.com declude.junkmail@declude.com Sent: Monday, August 25, 2008 9:32 PM Subject: RE: [Declude.JunkMail] OT: Alligate Problems I love Alligate. We have never had any problems with it and it takes care of over 80% of the spam at the front end. We run it on the same box as my imail software and when we implemented it the server went from an average of 90% utilization to around 50%. I find it well worth it Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Re: Alligate Problems (ES)
I was absolutely amazed that I could add another layer of software, get the job done better and reduce the demand on my hardware! And Darrell was absolutely great in assisting me in accomplishing all this. Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Wednesday, August 27, 2008 9:28 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Re: Alligate Problems (ES) Dang. Thats good Harry. Kind of wish I did not splash out 10k for a new server specially for Alligate!!! :o( Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: 27 August 2008 15:23 To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Re: Alligate Problems Alligate and Imail have different IPs on the same machine. In my setup all MX records point to the Alligate IP of x.x.x.22 Alligate then forwards the mail to Imail at x.x.x.12. You also need to be sure that imail only listens on its own IP and no others on the machine. At this point I still have my clients sending mail out through Imail so that I can scan the mail for spam. It is simple and works very well I have to give credit to Darrell at Invariant Systems who has way more experience with this and who was a great help in getting this set up and working. Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ferrell Ard Sent: Wednesday, August 27, 2008 9:05 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Re: Alligate Problems Harry If you are running Alligate AND IMail on the same machine, how do you have DNS / Alligate / IMail configured? I'm a little confused. If IMail is set up to respond on port 25, what did you have to do to have Alligate get port 25 and NOT IMail? AND, when the Customer SENDS an email, does it go thru Alligate also? Or does the Customers email go directly to IMail? My configuration Ex: for domain xyz.com in DNS an A record points to the IP on the IMail server a MX record points to the A record mail A 123.123.123.123 MX 10 mail.xyz.com Customer (in Outlook Express) POP3 entry is mail.xyz.com SMTP entry is mail.xyz.com Customer can also go to http://mail.xyz.com http://mail.xyz.com for web email Does anything have to change : (1) in DNS (2) at the Customers end Thanks very much Ferrell Ard - Original Message - From: Harry vanderzand mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: mailto:declude.junkmail@declude.com declude.junkmail@declude.com Sent: Monday, August 25, 2008 9:32 PM Subject: RE: [Declude.JunkMail] OT: Alligate Problems I love Alligate. We have never had any problems with it and it takes care of over 80% of the spam at the front end. We run it on the same box as my imail software and when we implemented it the server went from an average of 90% utilization to around 50%. I find it well worth it Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Alligate Problems
I love Alligate. We have never had any problems with it and it takes care of over 80% of the spam at the front end. We run it on the same box as my imail software and when we implemented it the server went from an average of 90% utilization to around 50%. I find it well worth it Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fosseen Sent: Monday, August 25, 2008 6:19 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Alligate Problems From the recommendations from this list I am currently evaling alligate. I have to say my installation has been plagued with problems. I installed on a fresh HP DL360 G3 with dual 2.8 Ghz Xeon processors, 4 gig of ram, and mirrored Ultra320 SCSI 72 Gig drives. I have settings that revert back to previous settings after I save, and I have not been able to tell how many messages are waiting to be delivered to my Smarter mail server running declude. I know I am only running an eval, but my first support request took a while. I am currently have 1 Smarter mail district complaining about long delivery times. The one email I looked up my Alligate server said it received the mail at 2pm, but my Smarter mail server shows delivery at 4pm. I was not able to find anywhere in the alligate logs where it tried to send the message to my Smarter mail server. My Smarter mail server is running on a Dual Quad core system and is hardly tasked. I guess I am looking for a word of encouragement from the alligate supporters out there that I should stay diligent or if there are any tips you can share. _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ You can go and find a mailbox right now, open the door to a tin box - tin door, no lock - with unencrypted information in English, sealed in a paper-thin envelope with spit, yet people are worried about online privacy. - Scott McNeely, CEO, Sun Microsystems _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] whitelist auth and spammer infested computer
I have not implemented this before. Is there a sample cfg file? What and where can I get the scripts? I would like to get this set up right away and avoid this in the future Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Monday, August 11, 2008 10:01 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] whitelist auth and spammer infested computer Hi Harry - HiJack will do what you need to here. I have two client's who send out mass emails (about 1000-1500) and HiJack stops it every time (it even stopped me once!). I have a script to check the hold directory for messages, and when I am alerted I simply go in and see whether or not they are legitimate. If they are, I can use the tool that Declude included to quickly move them back for processing. You can then add the person's IP to the available bulk senders. However, if their IP address changes (which has been the case for me) then that doesn't do much good either. Regardless, once I'm alerted I can usually login and approve the messages within a short amount of time. The client doesn't really know there was a hold up. Everything that has been stopped has been legitimate (knocking on wood) so I haven't had to test it on a real threat. But it's good to know that it does the job it should. Todd From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: Monday, August 11, 2008 8:26 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] whitelist auth and spammer infested computer I have a situation where a client's computer in their network got infected by a spammer and 100,000 email got send out over the weekend It sure caused a big mess. How can I prevent this when I am using whitelist auth or do I need to turn that off? I have all the latest software from Declude Should I be using Declude Hijack? I do have a few clients that do legitimate mass mailings from time to time. Any help would be very appreciated. Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] whitelist auth and spammer infested computer
Yes I have the full suite I will ask declude for guidance in getting it going I am interested in the notify tool and setup instructions Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Tuesday, August 12, 2008 10:55 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] whitelist auth and spammer infested computer Harry - When I upgraded a few years ago to the Declude suite, it came with it and was running after install. In fact, it held up a mass mailing by one client and it took me a little bit to figure out what happened (I didn't fully understand what it was that I upgraded too!) So the first thing I guess you should do is make sure you actually have HiJack? Todd From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: Tuesday, August 12, 2008 7:24 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] whitelist auth and spammer infested computer I have not implemented this before. Is there a sample cfg file? What and where can I get the scripts? I would like to get this set up right away and avoid this in the future Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Monday, August 11, 2008 10:01 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] whitelist auth and spammer infested computer Hi Harry - HiJack will do what you need to here. I have two client's who send out mass emails (about 1000-1500) and HiJack stops it every time (it even stopped me once!). I have a script to check the hold directory for messages, and when I am alerted I simply go in and see whether or not they are legitimate. If they are, I can use the tool that Declude included to quickly move them back for processing. You can then add the person's IP to the available bulk senders. However, if their IP address changes (which has been the case for me) then that doesn't do much good either. Regardless, once I'm alerted I can usually login and approve the messages within a short amount of time. The client doesn't really know there was a hold up. Everything that has been stopped has been legitimate (knocking on wood) so I haven't had to test it on a real threat. But it's good to know that it does the job it should. Todd From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: Monday, August 11, 2008 8:26 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] whitelist auth and spammer infested computer I have a situation where a client's computer in their network got infected by a spammer and 100,000 email got send out over the weekend It sure caused a big mess. How can I prevent this when I am using whitelist auth or do I need to turn that off? I have all the latest software from Declude Should I be using Declude Hijack? I do have a few clients that do legitimate mass mailings from time to time. Any help would be very appreciated. Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] whitelist auth and spammer infested computer
I have found the hijack files and have set it up. Can you maybe send me the script so I can get a notification if mail is held?? Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Tuesday, August 12, 2008 10:55 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] whitelist auth and spammer infested computer Harry - When I upgraded a few years ago to the Declude suite, it came with it and was running after install. In fact, it held up a mass mailing by one client and it took me a little bit to figure out what happened (I didn't fully understand what it was that I upgraded too!) So the first thing I guess you should do is make sure you actually have HiJack? Todd From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: Tuesday, August 12, 2008 7:24 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] whitelist auth and spammer infested computer I have not implemented this before. Is there a sample cfg file? What and where can I get the scripts? I would like to get this set up right away and avoid this in the future Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Monday, August 11, 2008 10:01 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] whitelist auth and spammer infested computer Hi Harry - HiJack will do what you need to here. I have two client's who send out mass emails (about 1000-1500) and HiJack stops it every time (it even stopped me once!). I have a script to check the hold directory for messages, and when I am alerted I simply go in and see whether or not they are legitimate. If they are, I can use the tool that Declude included to quickly move them back for processing. You can then add the person's IP to the available bulk senders. However, if their IP address changes (which has been the case for me) then that doesn't do much good either. Regardless, once I'm alerted I can usually login and approve the messages within a short amount of time. The client doesn't really know there was a hold up. Everything that has been stopped has been legitimate (knocking on wood) so I haven't had to test it on a real threat. But it's good to know that it does the job it should. Todd From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: Monday, August 11, 2008 8:26 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] whitelist auth and spammer infested computer I have a situation where a client's computer in their network got infected by a spammer and 100,000 email got send out over the weekend It sure caused a big mess. How can I prevent this when I am using whitelist auth or do I need to turn that off? I have all the latest software from Declude Should I be using Declude Hijack? I do have a few clients that do legitimate mass mailings from time to time. Any help would be very appreciated. Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] whitelist auth and spammer infested computer
I have a situation where a client's computer in their network got infected by a spammer and 100,000 email got send out over the weekend It sure caused a big mess. How can I prevent this when I am using whitelist auth or do I need to turn that off? I have all the latest software from Declude Should I be using Declude Hijack? I do have a few clients that do legitimate mass mailings from time to time. Any help would be very appreciated. Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Mail Pre-Processor recommendations
Same experience here Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Daniel Slentz Sent: Wednesday, May 28, 2008 5:48 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Mail Pre-Processor recommendations I concur with Andrew, Alligate saved our company a ton of money in upgrades to our mail server. Our mail server CPU's were peaked 24x7. When I inserted Alligate into the mix, CPU's peak at about 30-40% now. I highly recommend it. ~Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Wednesday, May 28, 2008 1:52 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Mail Pre-Processor recommendations I use Alligate from Solid Oak Software, and I like it a lot. On my primary gateway, I received just shy of 500,000 connections in the last 24 hours, and my Declude only had to see 4% of that traffic. Yes, 4%. I'm spending less time doing clever things in Declude, because Alligate is pre-filtering so well for me. Andrew. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fosseen Sent: Wednesday, May 28, 2008 1:29 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Mail Pre-Processor recommendations I believe I have seen some replies to this already, but I though I would put this out again. I am hosting about 30 domains worth of email and filtering for an additional 10 domains. My current configuration is all mail is pre-filtered through a Barracuda 400 box, then forwarded to a Smartermail 4.x server running Declude with Sniffer, Zero Hour, invURIBL. The Smartermail/Declude box is a Dual Quad Core HP server with 2 Gig of RAM. I am currently receiving about 600k email messages a day on the Barracuda box, and it is seeing performance issues. Before I purchase a 2nd Barracuda box I though I would check to see if anyone has a better solution. Declude still catches 40-60% SPAM after the Barracuda box. Thanks _ This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you are not the named addressee you should not disseminate, distribute or copy this e-mail. Your are asked to notify the sender immediately by e-mail if you have received this e-mail by mistake and delete this e-mail from your system. Please note that any views or opinions presented in this email are solely those of the author and do not necessarily represent those of Prairie Lakes Area Education Agency. Prairie Lakes Area Education Agency accepts no liability for any damage caused by any virus transmitted by this email. - _ Scott Fosseen - Systems Engineer - Prairie Lakes AEA - http://www.aea8.k12.ia.us/tech _ We live in a world today where lemonade is made from artificial flavors and furniture polish is made from real lemons. - Alfred E.Neumann MAD magazine _ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Question on mailbox action...
It would work the same. You know, just try it Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Wednesday, April 30, 2008 10:47 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Question on mailbox action... I am not trying to re route the messages. What I want to do is place the email in a spam folder for each user if the message exceeds a certain weight. The mailbox action in declude would seem to do this. I just want to know if the folder will be created automatically using the mailbox action if it does not already exist. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: Tuesday, April 29, 2008 4:32 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Question on mailbox action... It the mail box is [EMAIL PROTECTED] And you say ROUTETO [EMAIL PROTECTED] THEN THE FOLDER SPAM GETS CREATED AUTOMATICLY Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Tuesday, April 29, 2008 5:36 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Question on mailbox action... If I institute a mailbox action like WEIGHT10 MAILBOX spam Will Imail automatically create the folder spam for the user if it does not already exist? Thanks Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Question on mailbox action...
It the mail box is [EMAIL PROTECTED] And you say ROUTETO [EMAIL PROTECTED] THEN THE FOLDER SPAM GETS CREATED AUTOMATICLY Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Tuesday, April 29, 2008 5:36 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Question on mailbox action... If I institute a mailbox action like WEIGHT10 MAILBOX spam Will Imail automatically create the folder spam for the user if it does not already exist? Thanks Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: alligate
Your MX record should be changed to the new Alligate IP address. Alligate will send mail to imail server No change needed in Imail as far as I recall Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Tuesday, April 22, 2008 2:58 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: alligate Hi All, I have installed alligate on a new dedicated server and configured everything by the looks of it. Does anyone know what DNS settings I need to make on my domain and what I need to change on my IMAIL server? I sent a support ticket to alligate about 10 seconds ago but am itching to get it working and wondered if anyone here knew. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] decludeproc crashes
I have two items that are crashing decludeproc. I have tried to forward them to [EMAIL PROTECTED] I cannot get it through because it crashes decludeproc when it is an attachment also. So I tried to cut and paste it in an email, that crashes too. How can I get this to Declude? It definitely crashes the program so I think it is important for them to see it. Thanks Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] decludeproc crashes
Sorry I am not thinking very well today. Zipping them up worked Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: Friday, April 11, 2008 11:31 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] decludeproc crashes I have two items that are crashing decludeproc. I have tried to forward them to [EMAIL PROTECTED] I cannot get it through because it crashes decludeproc when it is an attachment also. So I tried to cut and paste it in an email, that crashes too. How can I get this to Declude? It definitely crashes the program so I think it is important for them to see it. Thanks Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Version 4.4.0 leaving some trash?
I do not see that Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Friday, April 04, 2008 7:20 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Version 4.4.0 leaving some trash? I just checked and I am seeing this as well. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Adolfo Justiniano wrote: Is someone else noticing that version 4.4.0 is leaving a lot of txt files in the proc/work directory? Version 4.3.46 didn't do this, I've noticed since we upgraded. Adolfo Justiniano Santa Cruz BBS e-mail: [EMAIL PROTECTED] http://www.scbbs.net --- [This E-mail was scanned for viruses by the Santa Cruz BBS anti-virus system] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] My server has been totally revived!!!
Download dlanalyzer from www.invariantsystems.com to verify your volume Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Craig Edmonds Sent: Wednesday, April 02, 2008 12:03 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] My server has been totally revived!!! Oka. I am off to get the trial right now! Kindest Regards Craig Edmonds 123 Marbella Internet www.123marbella.net LEGAL DISCLAIMER - This message may contain confidential, proprietary or legally privileged information and is intended only for the use of the addressee named above. If you are not the intended recipient of this message you are hereby informed that you must not use, disseminate, copy it in any form or take any action in reliance on it. If you have received this message in error please delete it and any copies of it and notify it to the sender. AVISO LEGAL - Este mensaje puede contener informacion confidencial, en propiedad o legalmente protegida y esta dirigida unicamente para el uso de la persona destinataria. Si usted no es la persona destinataria de este mensaje, por la presente se le comunica que no debe usar, difundir, copiar de ninguna forma, ni emprender ninguna accion en relacion con ella. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry vanderzand Sent: 01 April 2008 23:35 To: declude.junkmail@declude.com Cc: [EMAIL PROTECTED] Subject: [Declude.JunkMail] My server has been totally revived!!! I just want to share the effect of adding a gateway to my setup. I installed Alligate on the same server that is handling my imail/declude/sniffer/invuribl. My server was getting to be quite overloaded especially during peak time. I thought I was only processing about 40,000 mails a day. I was going by the imail daily report. Of course that was wrong. It does not include all the spam that never makes it to imail. I found that our when I installed DLAnalyzer from invariant Systems. To my amazement I was processing 500,000 mails a day. No wonder there was the odd crash of decludeproc or imail smtp After investigating solutions and a discussion with Darrell from Invariant, I decided to get Alligate. That was last week. I have it running smoothly with about 200 domains and my server has room to spare. Whereas the hardware was averaging around 90% utilization is it now at half that. Declude\imail is now reporting only 67,000 mails a day. Imail itself sees only 20,000. What a change. I sure hated to spend another 800 on spam but sure am glad I did. My hardware can last much longer. Times sure change 98% spam is huge when you get 500,000 mails a day Much thanks to Darrell for his assistance. I will gladly share more if anyone is curious Harry Vanderzand --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] My server has been totally revived!!!
I just want to share the effect of adding a gateway to my setup. I installed Alligate on the same server that is handling my imail/declude/sniffer/invuribl. My server was getting to be quite overloaded especially during peak time. I thought I was only processing about 40,000 mails a day. I was going by the imail daily report. Of course that was wrong. It does not include all the spam that never makes it to imail. I found that our when I installed DLAnalyzer from invariant Systems. To my amazement I was processing 500,000 mails a day. No wonder there was the odd crash of decludeproc or imail smtp After investigating solutions and a discussion with Darrell from Invariant, I decided to get Alligate. That was last week. I have it running smoothly with about 200 domains and my server has room to spare. Whereas the hardware was averaging around 90% utilization is it now at half that. Declude\imail is now reporting only 67,000 mails a day. Imail itself sees only 20,000. What a change. I sure hated to spend another 800 on spam but sure am glad I did. My hardware can last much longer. Times sure change 98% spam is huge when you get 500,000 mails a day Much thanks to Darrell for his assistance. I will gladly share more if anyone is curious Harry Vanderzand --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list
Cute. Insulting people gets things done and makes you look very important. Right! Harry Vanderzand From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Klinge Sent: Tuesday, February 05, 2008 2:08 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list Will you morons please remove me from your spam list? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, February 04, 2008 10:33 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list Thank you for submitting a ticket to support. Your ticket number is [384-0F3A4F35-96D8]. Please keep this ticket number for your records and include it in the subject (including brackets) of all future emails regarding this issue. The response time during business hours is usually within 24 hours, if you have had no response in this time please do not hesitate to call our support number 1-866-332-5833 Thank You. Declude Technical Support view http://support.declude.com/customer/viewticket.aspx?email=declude.junkmail% 40declude.comticketnum=384-0F3A4F35-96D8 this ticket online --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Where'd Dell go?
no Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of SJ.Stanaitis Sent: Friday, February 01, 2008 8:33 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Where'd Dell go? I can't seem to get to www.dell.com from my network here or 2 other non-related external networks either...anyone else having a problem getting there? Cheers, --SJ SJ.Stanaitis - Network Administrator Decorative Product Source, Inc --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Software for copying files with permissions
If you want to move an entire image to a new machine then I would use Acronis software to image the old server You do need to make sure that the drivers for your boot drive are the same for both machines. If you find that the new machine needs a different driver then you could take a SCSI controller and hard drive and image the old machine to the SCSI drive (after you activate the SCSI drive and driver on the machine) You then move the scsi card and drive to the new machine where it can boot since you installed the scsi driver on the old machine before you imaged it. Once booted with the scsi drive you can now load all the new drivewr5s needed including the driver for the new hard drive sub system. Once that is done you can move the image from the scsi drive to the hard drive in the new computer. Harry Vanderzand Intown Internet 11 Belmont Ave. W. Kitchener, ON, N2M 1L2 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Tuesday, June 26, 2007 8:49 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Software for copying files with permissions Morning, Does anyone have a recommendation for some software that is going to copy files on one of my fileservers to a new server, along with all the permissions and security that is currently in place? Thanks, Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] X-Note: REVDNS: (timeout)
I am seeing this in spam getting through. What would be causing this? Harry Vanderzand Intown Internet 11 Belmont Ave. W. Kitchener, ON, N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Warning re: DECLUDE - CRITICAL VIRUS SCANNING UPDATE
It works fine for us also Harry Vanderzand Intown Internet 11 Belmont Ave. W. Kitchener, ON, N2M 1L2 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Monday, April 16, 2007 7:34 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Warning re: DECLUDE - CRITICAL VIRUS SCANNING UPDATE Hi Dave - I actually just installed it (didn't see your message in time) and mine appears to be working. Todd _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Monday, April 16, 2007 6:12 PM To: declude.junkmail@declude.com; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Warning re: DECLUDE - CRITICAL VIRUS SCANNING UPDATE I attempted to install this update on my server. The package is apparently missing a DLL. The decludeproc service would not start, and the pop-up said to contact support. The update email was issued at 5:15 PM, and Declude was closed. I left a message. I got back up and running by reinstalling the previous update and rebooting. I strongly suggest that you DO NOT install this update until Declude can figure out what's wrong with it! -Dave Doherty Skywaves, Inc. 97 Webster Street Worcester, MA 01603 508-425-7176 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] issue with spam to alias account
I did further testing and found that I was not correct. Spam was being directed towards a sub mailbox that did not have a filter specified All is well Thanks Harry Vanderzand inTown Internet Computer Services 519-741-1222 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Saturday, January 13, 2007 9:32 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] issue with spam to alias account In sorting through my logs I just noticed that e-mail going to an alias was considered spam with last action = DELETE. Yet the spam got delivered to the three accounts that are listed in the alias. Is there a problem with spam handling when it is directed at an alias? Using imail 2006.1 and latest declude Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] issue with spam to alias account
In sorting through my logs I just noticed that e-mail going to an alias was considered spam with last action = DELETE. Yet the spam got delivered to the three accounts that are listed in the alias. Is there a problem with spam handling when it is directed at an alias? Using imail 2006.1 and latest declude Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] mailbox command
I have tried to route mail using the mailbox command instead of routeto I really like the feature as each user can check their own held spam. And by using mailbox spam it goes into a spam folder belonging to the user. Then I can keep these accounts trimmed by removing mail older than x days (thanks for the recent assistance in this command) There is one big problem however. If the account has forwarding set then the spam gets forwarded. I have clients that keep mail in their own account and also forward it to another account in their company. In this case the spam gets forwarded. Other clients have a copy of their mail forwarded to their blackberry also. Can anyone see an easy solution to this? I could setup a junkmail file for each user but that would be a huge undertaking Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] script to remove messages from mailbox
A while back someone published a script that would remove messages older than x days from a mail box file along with his set up of how he handles spam for his client in individual spam mailboxes. I cannot find it again and was wondering if someone could point me in the right direction. Thank you so much Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] roconner -can he be stopped???
Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Virus sneaking past Declude/AVG/F-PROT?
do you have avafterjm on? In that case if it is deemed as spam then virus scan will not run on it. Harry Vanderzand inTown Internet Computer Services 519-741-1222 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of S.J.Stanaitis Sent: Friday, December 22, 2006 3:55 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Virus sneaking past Declude/AVG/F-PROT? I've got a single mailbox on my Imail server configured to get all the SPAM. It's then processed in TheBat! (Exciting, I know. Take a moment and revel.) Anyhow, my Symantec Antivirus is snagging a slew of Trojan.Dowiex!inf which it identifies as a low risk Trojan horse. I've got Declude 4 running both AVG and F-Prot and it snuck past. Anyone else seeing this? http://www.symantec.com/security_response/writeup.jsp?docid=2006-121817-5005 -99 Thanks, Sam SJ.Stanaitis - Network Administrator Decorative Product Source E-commerce Network --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] problem after imail upgrade
I am getting the following error after having upgraded to imail 2006.1 421 #4.4.5 Too many connections from your host It is all from one domain, sympatico.ca, one of the largest providers in Canada It is for mail being delivered to my clients' mail box but then forwarded to a sypatico.ca address. What might cause this with 2006.1 when it did not occur in 8.22? All else seems to be working fine. Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Imail 2006.1 and declude
I just upgraded from imail V8.22 to 2006.1 After the upgrade the load on my system is much heavier The system was running smoothly before the upgrade but now it is hitting 100% utilization consistently I am concerned because it is before 6am. What will happen during the day when my users are active? I am running on dual xeon 3.4Ghz with 2GB ram, windows 2000 server. Everything is at latest version and update level I am running sniffer, invuribl and fprot also sniffer is in persistent mode Any help or ideas would be appreciated declude.cfg: CODE xx threads 150 waitformail 500 waitforthreads 25 waitbetweenthreads 100 winsockcleanup OFF avgupdatefreqhrs 4 BANCHARSET iso-2022-jp BANCHARSET koi8-r AUTOREVIEW ON BLKLST ON Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail 2006.1 and declude
My message volume is about 40K per day I have resolved the issue. I noticed the persistent sniffer not being very persistent and realized that my code was changed yesterday. I had updated the automatic update routines and the global.cfg file but had forgotten to update the code in the registry for the persistent sniffer service. What a relief I am looking to see if I can tune the box better since I am in the mode now. I increased my threads in imail from 30 to 40 without seeing much of a hit. Right now I am seeing and average of around 40% utilization I would guess. Are there tools to measure this more accurately other than looking at task manager? Of course there are tools, I guess I mean to ask what you might use to measure performance and tune the server. Harry Vanderzand inTown Internet Computer Services 519-741-1222 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, December 19, 2006 8:44 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Imail 2006.1 and declude threads 150 This is very high - even on a dual proc xeon (2.6) box - HT enabled - I am easily able to run with 40 threads processing 150K messages a day. What is your message volume? Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. - Original Message - From: Harry mailto:[EMAIL PROTECTED] Vanderzand To: declude.junkmail@declude.com Sent: Tuesday, December 19, 2006 5:54 AM Subject: [Declude.JunkMail] Imail 2006.1 and declude I just upgraded from imail V8.22 to 2006.1 After the upgrade the load on my system is much heavier The system was running smoothly before the upgrade but now it is hitting 100% utilization consistently I am concerned because it is before 6am. What will happen during the day when my users are active? I am running on dual xeon 3.4Ghz with 2GB ram, windows 2000 server. Everything is at latest version and update level I am running sniffer, invuribl and fprot also sniffer is in persistent mode Any help or ideas would be appreciated declude.cfg: CODE xx threads 150 waitformail 500 waitforthreads 25 waitbetweenthreads 100 winsockcleanup OFF avgupdatefreqhrs 4 BANCHARSET iso-2022-jp BANCHARSET koi8-r AUTOREVIEW ON BLKLST ON Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] \spool\charset directory
The spool\charset directory is filling up with thousands of e-mails per day. Can that be stopped? while still keeping the bancharset command? Harry Vanderzand inTown Internet Computer Services 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] \spool\charset directory
this is a test in declude.cfg and there is nowhere where I am setting up that directory. I guess it is by defaults. I just do not want to see 100s of thousands emails in a directory nor do I feel like personally managing it. I am not the greatest with scripts either. These kinds of controls I would like to see in Declude itself. In a gui interface by the way! Harry Vanderzand inTown Internet Computer Services 519-741-1222 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Tuesday, December 12, 2006 6:45 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] \spool\charset directory Harry, check your global.cfg and see if you have a test with a COPYTO action that copies the email to that spool\charset folder when the test is triggered. Then comment out that test and action. Andrew. _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Tuesday, December 12, 2006 2:39 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] \spool\charset directory The spool\charset directory is filling up with thousands of e-mails per day. Can that be stopped? while still keeping the bancharset command? Harry Vanderzand inTown Internet Computer Services 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: SmarterMail's website
me neither Harry Vanderzand inTown Internet Computer Services 519-741-1222 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Asaro Sent: Monday, December 04, 2006 12:54 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: SmarterMail's website I cannot navigate to that address either.. Chris _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Graveen Sent: Monday, December 04, 2006 12:40 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: SmarterMail's website Is anyone else having trouble getting to SmarterMail's web site (www.smartertools.com http://www.smartertools.com/ )? I have been unable to access it since Sunday morning. Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Max whitelists hit
When using the WHITELISTFILE option, does anyone have a way where a user can
maintain their own whitlist file possibly through the imail web interface?
Harry Vanderzand
inTown Internet Computer Services
519-741-1222
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of David Barker
Sent: Thursday, July 27, 2006 9:40 AM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Max whitelists hit
Sensitivity: Confidential
Yes, in the global.cfg there is a limit. If you need to have
unlimited whitelist entries, or if you need per-user or
per-domain whitelisting, you may find the WHITELISTFILE
option helpful.
To use this option, you need to add a line in the format
WHITELISTFILE D:\{MAILSERVER}\Declude\mywhitelist.txt to
the appropriate configuration file
(\{MAILSERVER}\Declude\$default$.JunkMail, or the
per-user/per-domain configuration file you wish to use the
whitelists with). The D:\{MAILSERVER}\Declude\mywhitelist.txt
file would then contain either one E-mail address
([EMAIL PROTECTED]) or domain (@example.com) or subdomain
(.example.com) per line. The whitelist files can have
unlimited entries in them.
Note that the file you use with the WHITELISTFILE option does
NOT use the same format as the WHITELIST entries in the
global.cfg file. Also, note that the WHITELISTFILE option
does not work in the global.cfg file.
David B
www.declude.com
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Craig Edmonds
Sent: Thursday, July 27, 2006 9:34 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Max whitelists hit
Importance: High
Sensitivity: Confidential
just found this in my declude log.
07/27/2006 15:28:25.221 qbf78048c0118c40b.smd WARNING: Max
whitelists hit.
Some whitelists will not be processed!
Is there a limit to the amount of domains you can put in the
whitelist?
Kindest Regards
Craig Edmonds
123 Marbella Internet
W: www.123marbella.com http://www.123marbella.com/ E :
[EMAIL PROTECTED]
http://i.msgtag.com/alaqebaugecbtfqn/xlkcihtsdEb/aom/yi.gif
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be
found at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.
[Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7
Last night at 8:11PM I upgraded from 4.3.7 to 4.3.14 From that point on we stopped catching all spam for these clients that have their own mail server. We just filter their mail for spam and pass it on. I just reverted back to 4.3.7 and now we are catching spam again for them We catch over 4000 spam messages per dayfor one of these clients alone so you can imagine their complaint this morning. Anyone know what would have caused this? Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7
I am going to do the upgrade again this time putting the following commands in the cfg file: OUTBOUNDSCANNINGSPAMONINBOUNDSCANNINGSPAMON Obviously this should not have happened and it was unfortunate. I believe Declude is getting a message ready for everyone. I will let you know the results shortly to confirm that that was it Thanks for your responses Harry Vanderzand inTown Internet Computer Services 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of chrisSent: Friday, September 29, 2006 10:08 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Nick, I will definitely post these results, but I have yet to hear from harry, I believe the response from the first user is the solution!!! Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free978.499.2933office978.477.8930 e-fax[EMAIL PROTECTED]www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick HayerSent: Friday, September 29, 2006 9:55 AMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Harry,Please post to the list the details - Thanks-Nickchris wrote: Harry Contact me off the list if you can, I would like to help Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free978.499.2933office978.477.8930 e-fax[EMAIL PROTECTED]www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Harry VanderzandSent: Friday, September 29, 2006 9:15 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7 Last night at 8:11PM I upgraded from 4.3.7 to 4.3.14 From that point on we stopped catching all spam for these clients that have their own mail server. We just filter their mail for spam and pass it on. I just reverted back to 4.3.7 and now we are catching spam again for them We catch over 4000 spam messages per dayfor one of these clients alone so you can imagine their complaint this morning. Anyone know what would have caused this? Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] ASSP
I am interested in this also. Maybe it can be on list? Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Tuesday, September 19, 2006 3:03 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] ASSP There were a couple of recent posts from folks who had recently implemented ASSP. We have to do the same due to the vulnerability in Imail 8.22. I'd appreciate any comments, suggestions, etc. OFF LIST, from those who have already fell in the holes, etc. Thanks, Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude 4.3
Title: Message This has been a great thread to follow and I just want to add my two cents worth. At the moment the whole issue of spam filtering is quite complex. Declude's configuration requires constant tweaking it seams. That translates into labour. If Declude can somehow manage to reduce the amount of labour and skill involved that would be of great value It would not necessarily earn us more money, but it can earn us more time. Personally I would like to have Declude running and then just forget about it. Well maybe I would continue reading this list because it can be entertaining and educational. Regarding revenue sharing. I do charge for anti-spam and anti-virus services. I don't compete with the mayor service providers that offer it for free. As with others on this list I offer personalized quality service to my clients. I attract clients that understand and desire that. I have never advertised. It does work. WhileI recognize that there is value to anything that frees up my time, I do have to keep an eye on net income also I spend money on tools and consume my time. Any revenue sharing program with a third party will be compared against what I do now. If it's clear and fits in comparison to what I do now,then it will be attractive to me. If it also saves time that will make some difference Harry Vanderzand inTown Internet Computer Services 519-741-1222 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude 4.3
Thanks David Is the global variable correction important enough to upgrade from 4.2.20? Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, July 19, 2006 9:24 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Declude 4.3 Gary, 4.3 Release notes: Added CT and a Global variable being initialized more than once has been corrected. You are correct in your statement, if you do not want to join our Service Provide Program you can choose not too participate. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 18, 2006 7:21 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Declude 4.3 Basically you are telling me to ignore the Add Commtouch part of your web page that shows up when I log in to my account. What I find particularly amusing is the line Restrictions apply to service providers. If there is anyone subscribed to this mailing list who is not a service provider, please raise your hand. Isn't it generally a good idea to have your product's pricing defined before you introduce the product? I'm sure that everyone here reading the list is extremely curious as to what the revenue share program really is, and when it does come out, unless you hear exclamations of What a Bargain coming off this list there won't be many of us joining that program. Other than the Commtouch add-on, are there any other features or reasons to upgrade to 4.3? Original Message From: David Barker [EMAIL PROTECTED] Sent: Tuesday, July 18, 2006 5:03 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Declude 4.3 Gary, 1. Server Providers who use CommTouch as an add-in to Declude will be in violation of CommTouch's Terms of service. 2. Some of the benefits of CommTouch are Zero Hour virus protection and additional spam identifying technology such as Recurrent Pattern Detection Technology (RPD) recognized by key industry analysts as a leading technology in email outbreak detection. 3. We are in the process of defining the revenue share program and will provide the details to this when it is ready. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 18, 2006 4:09 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Declude 4.3 So, that being said, under what conditions can a legacy customer use Commtouch? Since it would seem that Commtouch is being offered as an add-on, what are the benefits of having Commtouch? What does it do that Declude alone does not? And of course it would be nice if this revenue share program was spelled out somewhere. Original Message From: David Barker [EMAIL PROTECTED] Sent: Tuesday, July 18, 2006 3:57 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Declude 4.3 There are restrictions on CommTouch being used by Service Providers we had to ensure that NEW customers (ie. Service Providers After 1 June 06) understand the licensing restrictions. Current Service Providers (ie. Before 1 June 06) are under no restrictions for using Declude; only the CommTouch add-in component. However we have managed to come to an agreement with CommTouch to enable our legacy customers (ie. Service Providers Before 1 June 06) to take advantage of CommTouch under a revenue share program, this program is not being forced onto legacy customers but will be an opportunity for us to help you increase revenues in your business, by providing you with new product like the Declude Gateway which would be independent of Imail/SmarterMail and will include CommTouch. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Tuesday, July 18, 2006 3:02 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Declude 4.3 I guess we all missed the following paragraph in the license agreement: 3.2.6 sub-license, rent, sell, lease, distribute, or otherwise transfer the Licensed Program save as provided under this End-User License Agreement unless You obtain a separate License from Declude, Inc. for such purposes (for example, You may not embed the Licensed Program into another application and then distribute such to third parties unless You first acquire an OEM License from Declude, Inc.). As of June 1, 2006, ISP's and other service providers
[Declude.JunkMail] malformed message-id
I am having a problem where the message-id is malformed which trips upsome clients. see: Message-Id: 200606131300275.SM04448@X-Declude-Sender: [EMAIL PROTECTED] [216.16.233.16] Notice the the closing bracket is on a separate line. Thiscauses theheaders to become part of the body for some of my clients. Has anyone seen this before? Is it an imail issue or a declude issue? Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] malformed message-id
Thanks Matt This message comes straight from a form submission on one of my servers. I think aspmail is being used. My programmer says that it can't be caused by that and is blaming the SMTP server it is submitted to, which is my imail server Harry Vanderzand inTown Internet Computer Services 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, June 15, 2006 3:27 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] malformed message-id Looks like an IMail inserted Message-Id header, so in part it is their problem. I suspect that the trigger though is the sender having an invalid HELO, which IMail is then mishandling. It could have also been a hickup unless it is repeatable with the same source.The HELO, MAIL FROM and RCPT TO should all have only US-ASCII printable characters (excluding space). Anything beyond that is invalid on it's own, and IMO, the MTA should issue a 5xx error when received indicating as much.MattHarry Vanderzand wrote: I am having a problem where the message-id is malformed which trips upsome clients. see: Message-Id: 200606131300275.SM04448@X-Declude-Sender: [EMAIL PROTECTED] [216.16.233.16] Notice the the closing bracket is on a separate line. Thiscauses theheaders to become part of the body for some of my clients. Has anyone seen this before? Is it an imail issue or a declude issue? Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] malformed message-id
following is an excerpt of my imail log: This message is submitted directly to the imail server. None of my other servers run any SMTP server software. 06:13 13:00 SMTPD(ef2801f16207) [216.16.233.16] HELO06:13 13:00 SMTPD(ef2801f16207) [216.16.233.16] MAIL FROM:[EMAIL PROTECTED]06:13 13:00 SMTPD(ef2801f16207) [216.16.233.16] RCPT TO:[EMAIL PROTECTED]06:13 13:00 SMTPD(ef2801f16207) [216.16.233.16] RCPT TO:[EMAIL PROTECTED]06:13 13:00 SMTPD(ef2801f16207) [216.16.233.16] D:\IMail\spool\Def2801f16207.SMD 16252 Thanks for your assistance Harry Vanderzand inTown Internet Computer Services 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Thursday, June 15, 2006 4:37 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] malformed message-id Any connecting SMTP connection must submit a HELO or EHLO. I believe that IMail uses the HELO/EHLO name given as the part of the Message-ID after the @ symbol, but will only insert this if there is no Message-ID already present (which would also fail SPAMHEADERS in Declude unless LOOSENSPAMHEADERS ON is set). If there is an line break here, that data must be bad. If you look in your IMail log for the information about the session (and turn up the logging), you should be able to see the HELO/EHLO name given.FYI, this wouldn't be the first IIS plug-in that had RFC issues. Many have them. I can't say for sure 100% though that this is the case here due to circumstances, but I strongly suspect this is the trigger. If IMail acted properly, the message would have been rejected, and that's not a solution to your issues either, so the fix is likely best applied to your mailer.MattHarry Vanderzand wrote: Thanks Matt This message comes straight from a form submission on one of my servers. I think aspmail is being used. My programmer says that it can't be caused by that and is blaming the SMTP server it is submitted to, which is my imail server Harry Vanderzand inTown Internet Computer Services 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of MattSent: Thursday, June 15, 2006 3:27 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] malformed message-idLooks like an IMail inserted Message-Id header, so in part it is their problem. I suspect that the trigger though is the sender having an invalid HELO, which IMail is then mishandling. It could have also been a hickup unless it is repeatable with the same source.The HELO, MAIL FROM and RCPT TO should all have only US-ASCII printable characters (excluding space). Anything beyond that is invalid on it's own, and IMO, the MTA should issue a 5xx error when received indicating as much.MattHarry Vanderzand wrote: I am having a problem where the message-id is malformed which trips upsome clients. see: Message-Id: 200606131300275.SM04448@X-Declude-Sender: [EMAIL PROTECTED] [216.16.233.16] Notice the the closing bracket is on a separate line. Thiscauses theheaders to become part of the body for some of my clients. Has anyone seen this before? Is it an imail issue or a declude issue? Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server
good perspective Harry Vanderzand inTown Internet Computer Services 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert E. SpivackSent: Wednesday, May 31, 2006 7:01 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server Lets start at the high-level: What question are you trying to answer? e.g: Are the developers spending enough time doing the work they should be doing? Are the developers doing things they should not be doing? Are the developers competent and performing their job properly? Are the developers hours spent working matching their timesheets/project sheets? Etc. There are different solutions depending upon your objectives. Note: Personally, for outsourcing I pay based on a project or deliverable so tracking time/usage is of no interest to me. I pay for a certain result and dont care if it takes an hour or a week to do it. Also, I audit the quality of the finished product/code/service, I dont care about the tools/methods used to reach that goal. In your case: Since you have a virtual server environment, you can also audit at the host level. E.g. you can run SNMP tools and measure traffic (bps and total bytes in/out) on the virtual network ports of the virtual machine to see the activity level. You can see the protocol (http, http, netbios, smb, etc.) to see what type of activity is flowing through the machine. If you run the tool in a virtual machine on the same physical host, it can use packet capture to fully analyze the traffic and not just SNMP/WMI. You might consider re-writing your outsourcing contract. You really shouldnt have to police the project/micromanage it. Afterall, management of outsourcing is the hidden cost that can eat you alive and remove any cost benefits so why allow yourself to fall into that black hole? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran JovanovicSent: Wednesday, May 31, 2006 1:09 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server It is a dev/staging server running in a virtual server environment so I have to be a bit careful what I turn on or dont. I tried the auditing a file. Wow talk about generating Security Event Log records. I turned auditing on for two files bginfo.exe and its corresponding config.bgi file. Then I ran it to generate the background on file server. That simple little thing created 15 log entries. If we turn this on we are going to need something to parse the security log file as I can see that it is going to produce a HUGE amount traffic in there. Goran Jovanovic Omega Network Solutions From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Shaun MickeySent: Wednesday, May 31, 2006 3:34 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server You could also enable auditing in Windows to examine file level access, just r-click on any file/folder and select properties, click on the security tab then click advanced then click on the auditing tab. WARNING: auditing a lot of high-use files could strain the server That being said, your on a dev server so it should be alright, though I would keep the number of files youre auditing to a minimum or as small a group as possible Thanks, Shaun ---Shaun Mickey270net TechnologiesPhone: 301.663.6000 x28Fax: 301.663.4410www.270net.com "Internet/Technology Solutions for Business and Government"--- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Wednesday, May 31, 2006 3:16 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server Source code activity would be best analyzed with Visual SourceSafe or another code control system. For watching use of the sites for testing, etc. just enable logging for the virtual webs and run reports on the web traffic. Darin. - Original Message - From: Goran Jovanovic To: Declude.JunkMail@declude.com Sent: Wednesday, May 31, 2006 2:35 PM Subject: [Declude.JunkMail] OT: Monitoring/Auditing a Windows Server Hi All, This is definitely an off topic question. I have a client that wants to monitor what their outsourced developers are doing. The development is taking place in IIS, .Net Application Server and SQL 2000. They want
[Declude.JunkMail] Spam from spoofed addresses that are whitelisted
I currently have my client's source IP's and their domains whitlisted. I am realizing that spam is getting through. If I interpret the headers correctly the mail below is coming from 85.71.84.125, which is somewhere in the world. It was scanned by my server before being delivered to my clients mail server as I take care of the spam scanning. Since I have @myclientsdomain.com whitelisted it got through to them. The target domain was invalid, however their server processed the BCC's that were in that mail and delivered mail to those addresses one of those was [EMAIL PROTECTED]. I want to tighten that up but am afraid to upset the apple cart here and trap mail that I should not. I know in the past I was trapping mail from legitimate source at my client as some of their software formed mail that made it look like spam to my configuration Any guidance and help would be appreciated. I run imail 8.22 with declude 4.2.3, sniffer and invuribl Thank you Received: from ntserver.heartlandapp.com [72.1.199.42] by intown.net with ESMTP (SMTPD-8.22) id AE0003A0; Sun, 14 May 2006 14:59:12 -0400 Received: from intown.net ([216.16.233.12]) by ntserver.heartlandapp.com with Microsoft SMTPSVC(5.0.2195.6713); Sun, 14 May 2006 14:59:13 -0400 Received: from 792352B8 [85.71.84.125] by intown.net (SMTPD-8.22) id ADF103A0; Sun, 14 May 2006 14:58:57 -0400 Received: from 216.16.233.12 (localhost [127.0.0.1]) by 216.16.233.12 (iPlanet Messaging Server 5.2 HotFix 1.21 (built Sep 8 2003)) with ESMTP id [EMAIL PROTECTED] for [EMAIL PROTECTED]; Sun, 14 May 2006 12:02:33 -0800 Received: from [154.212.180.108] (Forwarded-For: [242.208.166.108]) by 216.16.233.12 (mshttpd); Sun, 14 May 2006 12:02:33 -0800 Date: Sun, 14 May 2006 12:02:33 -0800 From: "Ladonna Parr" [EMAIL PROTECTED] Subject: we offer degrees in less than 2 weeks Message-id: [EMAIL PROTECTED] MIME-version: 1.0 X-Mailer: iPlanet Messenger Express 5.2 HotFix 1.21 (built Sep 8 2003) Content-type: text/plain; charset=us-ascii Content-language: en Content-transfer-encoding: 7Bit Content-disposition: inline Priority: normal X-Declude-Sender: [EMAIL PROTECTED] [85.71.84.125] X-Declude-Spoolname: D7dec00379dd0.smd X-Spam-Tests-Failed: Whitelisted [0] Return-Path: [EMAIL PROTECTED] X-OriginalArrivalTime: 14 May 2006 18:59:13.0629 (UTC) FILETIME=[7DCA10D0:01C67788] X-Declude-Sender: [EMAIL PROTECTED] [72.1.199.42] X-Declude-Spoolname: D7e0001e29de4.smd X-Note: Total spam weight of this E-mail is 0. X-Note: Spam Tests Failed: Whitelisted X-Note: REMOTEIP: 72.1.199.42 X-Note: REVDNS: dsl-72-1-199.042.tel-ott.com X-Note: FROM: [EMAIL PROTECTED] X-Note: TO:otherclient.com X-Spam-Tests-Failed: Whitelisted [0] X-RCPT-TO: john@otherclient.com Status: U X-UIDL: 428962690 X-IMail-ThreadID: 7e0001e29de4 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222
RE: [Declude.JunkMail] Testing the Boards
PING Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, April 27, 2006 9:22 AM To: Declude.Virus@declude.com; Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Testing the Boards PING --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1
I have always done the updates by stopping the decludeproc service, putting the new decludeproc into place and then starting it. When I did this to move to 4.1 the end result was that decludeproc was started but nothing was being processed. When I reversed the steps and put 4.09.4 back everything was ok again. Has something changed here? Also is a full updated needed to get the new GUI? thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222
RE: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1
I am waiting for their response. How does one get the GUI? Maybe I am being obtuse here but I am not getting it. Your answer is the same that support gave me. I download decludeproc4.1 and install it.where does the dui come from if I do not need the full install? Harry Vanderzand inTown Internet Computer Services 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David BarkerSent: Thursday, April 06, 2006 11:53 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1 1. Harry please contact support at declude regarding your issue of upgrading. 2. The GUI is independent of the install you do not need the full update. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry VanderzandSent: Thursday, April 06, 2006 11:49 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1 I have always done the updates by stopping the decludeproc service, putting the new decludeproc into place and then starting it. When I did this to move to 4.1 the end result was that decludeproc was started but nothing was being processed. When I reversed the steps and put 4.09.4 back everything was ok again. Has something changed here? Also is a full updated needed to get the new GUI? thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222
RE: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1
Thank you Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, April 06, 2006 12:19 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1 All downloads are available from the Declude My Account home page www.declude.com/login.asp the GUI download is titled Declude Graphical User Interface. And yes the answer is the same as support gave you because I was the person who answered you I could not figure out why you were posting the same question to the lists. :) If decludeproc 4.1 is not working for you phone us so we can help you get it running. I am not sure what you are doing incorrectly. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Thursday, April 06, 2006 12:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1 I am waiting for their response. How does one get the GUI? Maybe I am being obtuse here but I am not getting it. Your answer is the same that support gave me. I download decludeproc4.1 and install it. where does the dui come from if I do not need the full install? Harry Vanderzand inTown Internet Computer Services 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Thursday, April 06, 2006 11:53 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1 1. Harry please contact support at declude regarding your issue of upgrading. 2. The GUI is independent of the install you do not need the full update. David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Thursday, April 06, 2006 11:49 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] changing decludeproc from 4.09.4 to 4.1 I have always done the updates by stopping the decludeproc service, putting the new decludeproc into place and then starting it. When I did this to move to 4.1 the end result was that decludeproc was started but nothing was being processed. When I reversed the steps and put 4.09.4 back everything was ok again. Has something changed here? Also is a full updated needed to get the new GUI? thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Damaged Image Files
Title: Message Judgement is quick to pass for some around here. These are getting caught by my system X-Note: Spam Tests Failed: SBL [28], SORBS-DUHL [4], HELOBOGUS [3], SNIFFER [13] Harry Vanderzand inTown Internet Computer Services 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of ErikSent: Tuesday, February 28, 2006 12:49 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Damaged Image Files The problem that we've seen this "spammer" is that the image is corrupted as you mentioned... and Declude is exiting; thus why it's being allowed to be delivered. "Smart" coding on the spammer... Not so smart on Declude. -Erik -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave BeckstromSent: Tuesday, February 28, 2006 6:41 PMTo: Declude.JunkMail@declude.comCc: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Damaged Image Files Were getting the same. Also using Declude with smartermail. Because Declude doesnt appear to be scanning the headers there is no way for us to stop them. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evans MartinSent: Tuesday, February 28, 2006 12:38 AMTo: Declude.JunkMail@declude.comCc: [EMAIL PROTECTED]Subject: [Declude.JunkMail] Damaged Image Files Im getting a lot of messages that have only a graphic in them. The graphic appears to have been damaged as only about ½ of it displays. Declude has not modified the headers at all so Im not sure if these are being scanned or not. I dont know how it could be bypassing Declude. I have attached the .msg file. Anyone have any ideas what might be causing this? Im running Declude 3.0.5.22 and SmarterMail 2.6. The header is as follows: Return-Path: [EMAIL PROTECTED] Tue Feb 28 00:24:32 2006 Received: from 225-65-10-72.planters.net [72.10.65.225] by matrix.martek.net with SMTP; Tue, 28 Feb 2006 00:24:32 -0600 Date: Tue, 28 Feb 2006 01:24:22 +0100 Return-path: [EMAIL PROTECTED] From: "Abrahams"[EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: C1alis 10 Pills 20 mg $89.95 Message-ID: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="ms020700070106060404020304" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.2180 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180 Thanks, Evans Martin EVANS MARTIN [EMAIL PROTECTED] HOSTING: http://www.martek.net PROGRAMMING: http://www.martekware.com iPlus Info Browser IPBs IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. http://www.martek.net/Default.aspx?tabid=96
[Declude.JunkMail] Imail 2006.02a
Is any one on this version of Imail yet? How has the upgrade process been for you? I understand that there were a lot of issues at the beginning? Have the latest patches resolved them for you? I appreciate your feedback as we are trying to plan when we will take the plunge Thank you Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Friday, February 17, 2006 10:35 AM To: Declude.Virus@declude.com Subject: [Declude.Virus] Multiple ban notice eml's Is it possible to have two different bannotify messages (as in bannotify.eml and bannotify2.eml)? As postmaster I need to get notices on all held banned messages. But I want the second EML to use ONLYSENDIFRECIP and sent the notice to select recipients. If yes, this leads to the second question. Can us specify multiple ONLYSENDIFRECIP entries in EML? As in: ONLYSENDIFRECIP [EMAIL PROTECTED] ONLYSENDIFRECIP [EMAIL PROTECTED] ONLYSENDIFRECIP [EMAIL PROTECTED] From: [EMAIL PROTECTED] To: %ALLRECIPS% Blah, blah ... Thanks, John --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude 3.0 / 4.0
Where do I find this information. I logged on the your site and don't see any on the my account page. I realize it must be obvious to you but it is not to me. Can you please let me know where this information is? Thank you Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Barry Simpson Sent: Sunday, February 12, 2006 10:22 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude 3.0 / 4.0 Each customer has a price on their host record which reflects their individual special price. This is confidential for each customer and I will not be posting details on a public forum. We are currently developing some documentation that should be published next week outlining changes and future strategy. As soon as this is available we will inform our customers. Barry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Sunday, February 12, 2006 10:03 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude 3.0 / 4.0 I misspoke... switch SA for upgrade. Also, please answer the implicit questions at the end of the email as well. Thanks, Darin. - Original Message - From: Barry Simpson [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Sunday, February 12, 2006 9:54 AM Subject: RE: [Declude.JunkMail] Declude 3.0 / 4.0 Darin, The Service Agreement prices have not changed: JunkMail - $132.00 per year EVA - $132.00 per year HiJack - $45.00 per year Barry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Sunday, February 12, 2006 9:36 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude 3.0 / 4.0 Hi David, What I was trying to get was an actual price matrix. For example, 1. What is the price of an SA when the existing customer has JM Pro and EVA Pro? 2. What is the price of an SA when the existing customer has JM Pro and EVA Standard? 3. What is the price of an SA when the existing customer has JM Pro and EVA Lite? 4. What is the price of an SA when the existing customer has JM Standard and EVA Pro? 5. What is the price of an SA when the existing customer has JM Standard and EVA Standard? 6. What is the price of an SA when the existing customer has JM Standard and EVA Lite? 7. What is the price of an SA when the existing customer has JM Lite and EVA Pro? 8. What is the price of an SA when the existing customer has JM Lite and EVA Standard? 9. What is the price of an SA when the existing customer has JM Lite and EVA Lite? 10. What is the price of an SA when the existing customer has JM Pro only? 11. What is the price of an SA when the existing customer has JM Standard only? 12. What is the price of an SA when the existing customer has JM Lite only? 13. What is the price of an SA when the existing customer has EVA Pro only? 14. What is the price of an SA when the existing customer has EVA Standard only? 15. What is the price of an SA when the existing customer has EVA Lite only? This could be easily displayed as a 4x4 price matrix. Posting it here, or perhaps posting a link to where it's posted on your website, will save you a lot of phone calls and time. I think a lot of the confusion stems from calling the upcoming release version 4. If the functionality will always remain the same between 3 and 4, then calling it a bundled service that is licensed differently than the separately purchased products would be much more clear than calling it a separate version. If the functionality is going to change between 3 and 4, then we need to know when and what, and how it affects previous customers. I know you've stated there is no major difference now, but everyone is concerned not just about now, but about the future functionality, costs, and direction of the product. Darin. - Original Message - From: David Barker [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Saturday, February 11, 2006 11:29 PM Subject: RE: [Declude.JunkMail] Declude 3.0 / 4.0 Darin, If you have JM Pro EVA PRO Hijack you can choose if you want to run version 3 or version 4 in either case the SA applies as in point 2. 2. Existing Customers prior to 8 Feb 06 CAN continue using the Service Agreement model. This mean you purchase a Annual Service agreement to ensure support and having access to new releases of Declude for that year. If your Service Agreement lapses you are still able to run Declude you will just not have access to support or new releases. If you do NOT have JM Pro EVA PRO Hijack and choose not to upgrade ... then you remain with version 3 as version 4 is licensed for JM Pro EVA PRO Hijack as I have explained
RE: [Declude.JunkMail] Declude 3.0 / 4.0
You guys go on and on. Have you actually talked to Declude? There are no changes for you if you do not want them. And Moving to V4 is easy. You must have a lot of time to waste, fret and worry. If you would only communicate with them. I realize there have been misunderstandings and some mail was not received by many. Give them a break. All your demand are not appropriate on this list. YI am amazed with the time you spend on conjecture and assumptions that just do not have any foundation. I have discussed and clarified things with Declude and am totally satisfied. The sky is not falling! Harry Vanderzand inTown Internet Computer Services 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Sunday, February 12, 2006 3:10 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Declude 3.0 / 4.0 Barry,Before you publish your future strategy, you should take a lot more time to consider the willingness of your customers to come along. I have never heard of a similar piece of software that expires in this way, and effectively forces a customer to renew their license. The only things that are remotely close are Microsoft products which are sold a different way for volume licensing, but they offer these subscriptions at a price that is just a fraction of the full product price, they are generally considered to be discounted by the companies purchasing them, and the choice is optional to choose the subscription or the standard purchase. That is clearly not the case here.Declude is not a service, it's a piece of software, and I expect to pay for software the way that software is paid for. I will never pay an annual license to use such a piece of software. Never. Especially when that piece of software requires me to pay for multiple other products in order to have acceptable protection, and work many long hours in developing plug-ins to enhance functionality that doesn't exist in the product itself. The strength of Declude is it's flexibility as a framework, but not as a solution in itself. There is a major disconnect between your perception of the market, and what I an others on this end see.While this model might seem appealing to you, it is grossly uncompetitive, and it comes at an incredibly inopportune time. We as a community have been mostly understanding of the disruption associated with the change of ownership, but up to this point there has been only small advancements in the product that benefit us. With the exception of one piece of added functionality, I could still be using the same release that I was using two years ago when you took over the company. Whether or not it is apparent to you, it is very apparent to the majority of your customers that I communicate with that the product is lagging, and not it is being priced uncompetitively on top of that. People who are one day faced with the prospect of renewing a service agreement and feeling angry over not having used a single release in the previous year are now being faced with a choice between a dead-end product (non-annually licensed software), and upgrading to an annual license at a greatly increased price.The issues with development and price on their own aren't my only concerns. Since I see this as grossly uncompetitive, I also worry about whether or not Declude can be a going concern under these conditions, and a large part of my own business has been built on top of the functionality that the product offers. I don't perceive the possibility of success in this model, and I likewise don't believe that I can rely on Declude going forward as long as this is the model that you choose. As a business person, I must protect my own interests and find a suitable solution for my needs.It's not yet too late to rethink your licensing and other plans going forward, but I fear that you won't get very far before the damage can't be undone.MattBarry Simpson wrote: Each customer has a price on their host record which reflects their individual special price. This is confidential for each customer and I will not be posting details on a public forum. We are currently developing some documentation that should be published next week outlining changes and future strategy. As soon as this is available we will inform our customers. Barry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Darin Cox Sent: Sunday, February 12, 2006 10:03 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude 3.0 / 4.0 I misspoke... switch SA for upgrade. Also, please answer the implicit questions at the end of the email as well. Thanks, Darin. - Original Message - From: "Barry Simpson" [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Sunday, February 12, 2006 9:54 AM S
RE: [Declude.JunkMail] OT - Server Watching.
Whatsup gold by ipswitch Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jerod M. Bennett Sent: Monday, January 23, 2006 2:25 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] OT - Server Watching. Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watch your servers for up/down status? -Jerry --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Sniffer in Persistent Mode using Windows Resource Kit Tools
I am confused with step 6 6. Next Add a Value and type this information Value Name:Application Data Type: REG_SZ (String) String: [full path of your sniffer installation]\snfrv2r3.exe xnk05x5vmipeaof7 persistent What is the Value name??? Thank you Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Panda Consulting S.A. Luis Alberto Arango Sent: Wednesday, January 18, 2006 7:15 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Sniffer in Persistent Mode using Windows Resource Kit Tools Here is another method to install sniffer in persistent mode. I just want to share it with you and others out there. I hope it is useful. I am not sure if there is information about how to install persistent mode using the windows resource kit tools in this list. So I decided to post it just in case. I have tested for a week and it works fine for me under Windows 2003 I switched to it, since RunSvcExe started to show some errors in my event viewer ==Sniffer in Persistent Mode Using Windows Resource Kit Tools== 1. Create a directory in C: called for example reskit c:\reskit 2. Place the following windows NT/2000/2003 windows resource kit files (they are free). Download the kit from microsoft.com instsrv.exe srvany.exe 3. Run the following command line c:\reskit\instsrv.exe Declude Sniffer c:\reskit\Srvany.exe that will set a service under the name Declude Sniffer 4. Open your registry and look for the key HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Declude Sniffer 5. Then add a key and name it Parameters 6. Next Add a Value and type this information Value Name:Application Data Type: REG_SZ (String) String: [full path of your sniffer installation]\snfrv2r3.exe xnk05x5vmipeaof7 persistent Note for licensed users: replace snfrv2re.exe with your licenced sniffer application name and xnk05x5vmipeaof7 with the licenced code. 7. In your Services Manager locate the service named Declude Sniffer and start it. 8. Set the Startup Type to Automatic. You are set to go. TO REMOVE THE SERVICE--- if you want to remove the service just type the following command line c:\reskit\instsrv.exe Declude Sniffer REMOVE -Luis Arango __ [Email scanned for viruses] [Email escaneado contra virus] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spam leak?
Yes, I did Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Friday, January 13, 2006 8:48 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Spam leak? Ummm... Did anybody else get a piece of spam this morning with subject SPAMSPCE: that seems to have been relayed through Declude.com? -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed
I have a similar machine, generally running well My declude.cfg is: threads 75 waitformail 0 waitforthreads 25 waitbetweenthreads 100 winsockcleanup off Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Friday, January 13, 2006 10:11 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Declude v3 CPU usage and processing speed I have worked with customers with similar Dual-Xeon CPU setup and have seen processing of 1000+ emails per minute. We have two of this machines here. It has exactly the same config from the screw who hold the server in the rack up to each dot in the junkmail config file (except the license codes ;-) The first server seems processing messages faster then the second. On the second server the more I play with values the lower CPU-usage and processing goes. After each reboot of decludeproc it's going down a little bit. Neither a reboot solved the problem. When I block incomming SMTP-traffic on the second server it will process around 50 messages per minute by showing up an average CPU usage way below of 50% (currently 20%) 1. What is your THREADS in the Declude.cfg ? Everything from 5 up to 500 2. Are you running many large filters ? I've tried enabling und disabling many filters without any noticeable change. But large filters should create a large cpu-usage. 3. How many virus scanners are you running ? Usualy two but I've also disabled the second for testing without any result 4. Is hyperthreading turned ON or OFF ? Yes task manager is showing up 4 cpu's 5. Are you using any other Directives in your declude.cfg ? Beside THREADS I've currently in use WAITFORMAIL 5000 WINSOCKCLEANUP ON I've tried changing WAITFORMAIL up to 15000 ms as suggested by another v3 Admin and I've also tried adding WAITFORTHREADS1500 WAITBETWEENTHREADS 1 With values from 150 .. 1500 and 1 .. 1000 without any noticeable change in the task manager cpu usage. The number of queue files in the proc folder is going up and down (something between 1000 and 12000 files) The server is working and delivery messages but only with 50% of his power and speed. Netstat is showing around 100 ETSABLISHED connections and around 50 in TIME_WAIT The process list in the task manager is showing up around 50 entries Markus --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SMTP failure
I get the following error about once a week since upgrading to V8.22 from 8.05. This error occurs twice in a row and then the SMTP service remains in a stopped state. I can manually restart it. The recovery settings for the service are set to restart. I have worked with Ipswitch on this issue and they have no answer for me. Apparently a more senior person is looking at it although I am not sure if that is true. Does anyone have any ideas as to the cause of this. The mail is down off course when this happens so It is rather irritating. Especially over the holiday time. System Log error: The description for Event ID ( 0 ) in Source ( SMTPd32 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: SMTPd32 error: 231, ERR 004 - Failed to create server Pipe.. Harry Vanderzand inTown Internet Computer Services 519-741-1222 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] What can be done with undelivery receipts?
With the increase of undelivery receipts caused by spam using spoofed addresses of my clients, is there any way to more effectively catch those receipts? We are using imail 8.22 and the latest versions of declude pro, sniffer and invuribl Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Samuel J Stanaitis Sent: Wednesday, December 28, 2005 9:23 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] DSPAM with Declude? Good Morning, Folks I've had a recent onslaught of emails completely blowing past Declude. They're the typical winky improvement pill ads, coming from random sources, random names, random email addresses. First line of the email is a random URL, followed by cryptic spellings of the various winky pills. I've fed dozens to SpamAssassin with no luck. I've heard good reviews of DSPAM (dspam.nuclearelephant.com) and would like to incorporate it into Declude. Has anyone done this yet? I searched the archives and have had no luck. Any tips? Thanks, Sam Samuel J Stanaitis, Network Administrator Decorative Product Source, Inc. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Decludeproc terminating unexpectedly
I have a situation where the decludeproc service terminates unexpectedly. It restarts, but I am concerned in that the system is not stable. Several messages are left in the review directory when this happens. Shortly after one of the decludeproc restarts this morning the SMTP service stopped and did NOT restart. The event log had the following error: The description for Event ID ( 0 ) in Source ( SMTPd32 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: SMTPd32 error: 231, ERR 004 - Failed to create server Pipe.. This has happened a few times since going to imail V8.22 from 8.05. Should I install imail 2006? I have it but am holding off as I fear more problems if I am an early adopter. Any ideas? Imail V8.22, declude pro, sniffer, invuirbl Dual xeon 3.4Ghz, 2GB ram Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Decludeproc terminating unexpectedly
Sorry 3.05.22 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Tuesday, December 13, 2005 12:37 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Decludeproc terminating unexpectedly What version of Declude? John T eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Tuesday, December 13, 2005 9:31 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Decludeproc terminating unexpectedly I have a situation where the decludeproc service terminates unexpectedly. It restarts, but I am concerned in that the system is not stable. Several messages are left in the review directory when this happens. Shortly after one of the decludeproc restarts this morning the SMTP service stopped and did NOT restart. The event log had the following error: The description for Event ID ( 0 ) in Source ( SMTPd32 ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. The following information is part of the event: SMTPd32 error: 231, ERR 004 - Failed to create server Pipe.. This has happened a few times since going to imail V8.22 from 8.05. Should I install imail 2006? I have it but am holding off as I fear more problems if I am an early adopter. Any ideas? Imail V8.22, declude pro, sniffer, invuirbl Dual xeon 3.4Ghz, 2GB ram Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CBL:Fw: news
We have it blocked with the following tests X-Note: Total spam weight of this E-mail is 25.X-Note: Spam Tests Failed: SORBS-DUHL [4], NJABL-DYNABLOCK [9], FIVETEN-SPAM [5], CMDSPACE [7], WEIGHT10 [10], WEIGHT11 [11], WEIGHT12 [12], WEIGHT15 [15], WEIGHT19 [19] Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard FarrisSent: Tuesday, December 06, 2005 2:25 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] CBL:Fw: news Does anyone have an answer to filter these type emails? Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet" - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 06, 2005 3:20 AM Subject: news
RE: [Declude.JunkMail] outgoing mail declude junkmail
Travis what you have there is the rule defined Now you need to have an action IE Weight10hold Weight20delete By the way you make it confusing by saying weight10 is a hold at 16. Why not call it weight16? That is still the difficulty with Declude. A whole language needs to be learned. It will be nice if this ever joins the GUI world Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Sullivan Sent: Friday, November 18, 2005 1:05 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] outgoing mail declude junkmail WEIGHT10 weight x x 16 0 WEIGHT20 weight x x 20 0 That is what I have at the bottom of mine... 16 is my hold weight, 20 is delete. What do I use for outgoing mail actions? Travis - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, November 18, 2005 12:01 PM Subject: Re: [Declude.JunkMail] Imail 2006 standalone Yes, and those actions are defined in your global.cfg at the bottom. Darrell -- -- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. Travis Sullivan writes: Okay, it was simple I didn't have any XOUTHEADER specified in the global.cfg so declude is scanning outgoing mail. but, i noticed the score was 17, one point above my hold weight... is there different actions for outgoing mail as in hold/delete? Travis - Original Message - From: Darin Cox [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, November 18, 2005 11:19 AM Subject: Re: [Declude.JunkMail] Imail 2006 standalone It's pretty simple. take all of the actions you have defined in your $default$.config and copy them to your global.cfg. Actions placed in the Global.cfg apply to outgoing scanning. Actions in the $default$.config apply to incoming scanning. Darin. - Original Message - From: Travis Sullivan [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Friday, November 18, 2005 12:03 PM Subject: Re: [Declude.JunkMail] Imail 2006 standalone I searched, not a lot to be honest, the archive, and manual, but couldn't find info on setting up outgoing mail scanning with declude pro 1.82. Does anyone have a primer or at least some notes to share with me? TIA Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Cryptic URL in source
Yes that would work. However I want a method that traps all mail that uses this deceptive practice. Is there no way to detect this trick? Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Wednesday, November 09, 2005 5:28 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Cryptic URL in source No problem. BODY 500contains google.com/url?q= -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Glenn \ WCNet Sent: Wednesday, November 09, 2005 4:20 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Cryptic URL in source I've been getting reports of that from customers all day. G.Z. - Original Message - From: Harry Vanderzand [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, November 09, 2005 4:05 PM Subject: RE: [Declude.JunkMail] Cryptic URL in source Certainly Here is what you see in the e-mail http://intown.net/HwSbgXkc9vYP4qssBQS0AK6bumsUuatFHAdxX6IZ8vk0 Here is what is in the source: href=http://www.google.com/url?q=http://www.google.com/url?q=http://% 73%5 4% 41%09Nd%09%7aA.n%09e%74/%63%67i- b%09%69n%09/%70%6fch/%72e%09di%72.%63g%69?s= intown.nethttp://intown.net/HwSbgXkc9vYP4qssBQS0AK6bumsUuatFHAdxX6IZ 8vk0 / a Not that different from some of the phishing e-mails This has got to be detectable and should be cause for immediate deletion. Who has legitimate cause to hide their identity? Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, November 09, 2005 4:40 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Cryptic URL in source Do you have an example? - Original Message - From: Harry Vanderzand [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, November 09, 2005 10:18 AM Subject: RE: [Declude.JunkMail] Cryptic URL in source Any ideas on this? When the URL is hidden with cryptic characters in the source code of an e-mail it seems to me that it is obviously not a legitimate e-mail in that deception is being used. Is there not an easy way to stop e-mail where these practises are being used? I am running imail 8.21 and declude 3.05.18, the latest sniffer and Invuribl Assistance is appreciated Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Cryptic URL in source
When the URL is hidden with cryptic characters in the source code of an e-mail it seems to me that it is obviously not a legitimate e-mail in that deception is being used. Is there not an easy way to stop e-mail where these practises are being used? I am running imail 8.21 and declude 3.05.18, the latest sniffer and Invuribl Assistance is appreciated Thank you Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] V3.05.14 issue
The problems I reported below in 3.05.14 are now corrected in 3.05.18 I installed it Saturday AM and it has run fine since then Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Tuesday, November 01, 2005 12:23 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] V3.05.14 issue I was just checking my declude directories and found mail sitting in the review directory. 95 pieces with varying times since my update to 30514 yesterday. When I put them back into the proc directory the system slowed down and they ended up back in the review directory eventually. I then reverted to 30509, put the mail back into the proc directory and everything got processed fine. I then reverted back to 30514 and watched the flow of mail and again mail started collecting in the review directory. I have gone back to 30509 till there is a resolution for this Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] V3.05.14 issue
I was just checking my declude directories and found mail sitting in the review directory. 95 pieces with varying times since my update to 30514 yesterday. When I put them back into the proc directory the system slowed down and they ended up back in the review directory eventually. I then reverted to 30509, put the mail back into the proc directory and everything got processed fine. I then reverted back to 30514 and watched the flow of mail and again mail started collecting in the review directory. I have gone back to 30509 till there is a resolution for this Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 30511 problem
It seems to me that something changed in the code If all I do is change from V9 to V11 and I see a noticeable difference, then it has to be caused by a change in the code from V9 to V11. No other hardware or software was changed!!! I have gotten direction to change settings, however that in no way addresses the point I am making. I have not seen that addressed. Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, October 25, 2005 2:33 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Okay, I'm watching these discussions - as I'm still truly scared of upgrading Declude. I just can't figure out the logic behind all the CPU consumption and why certain process parameters are suspected to have detrimental effects. Please verify my thinking: A machine that needs to process a given amount of mail will require a certain number of instructions, which are reflected in the total CPU usage. If several messages come in almost simultaneously, then I can either process them right away using parallel processes, causing a short spike in CPU use - or I can process them one by one, using up the same CPU time over time and causing a few seconds delay in mail delivery. Either way, the overall CPU consumption should be the same - just distributed differently. So - if the above is true, how do I explain the apparent inconsistency where users report that the CPU consumption is considerable higher than in the prior version? How can the various process settings make any difference - at worst it should spike quickly and then be idle? If the old Declude handled the amount of mail with moderate CPU use and without causing noticeable delays in mail delivery to the users - then I can't see how the same outcome suddenly should require x times the CPU resources, no matter how inefficient the process settings are? What is spending all this other CPU time on? Looping, looking for directory content? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Tuesday, October 25, 2005 10:13 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem I changed the THREADS to 75 and CPU wnet down to about avg 50%. I'll try WAITFORMAIL in just a bit. I also noticed in my spool folder I have a new folder called s that appeared with the time stamp of the new proc install. There is nothing in it; just a blank folder. I deleted it. Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 25, 2005 9:39 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Randy try changing WAITFORMAIL 1500 To WAITFORMAIL 500 See if that changes the delay. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, October 24, 2005 7:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem We upgraded to 3.0.5.11 tonight - big difference in CPU in that it's way down from the 3.0.5.5 - but proc folder will accumulate approx 35-50 messages before it'll dump them to the work folder. Do not see any problems so far except for the second or two delay in this... We have in our declude.cfg: THREADS 50 WAITFORMAIL 1500 WAITFORTHREADS 1000 WAITBETWEENTHREADS1 Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent
RE: [Declude.JunkMail] 30511 problem
I have repeatedly switch back and forth between the two version (V9 and V11) I assure that I have changed nothing else and that cpu usage is higher on the V11 I watch V9 cpu usage I go from V9 to V11 and cpu usage increases Back to V9: it goes down Back to V11 it goes up. How else does one state this problem? It would make a lot of sense if Declude were to say that they have made a change in the code that would cause this, but that is not the case. Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 25, 2005 4:14 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Andy, don't be scared I can hold you hand :) How do I explain the apparent inconsistency where users report that the CPU consumption is considerable higher than in the prior version? First we need to confirm that it is decludeproc that has increased in CPU usage. So far I have not seen any real statistics for this other than what has been posted on the boards. But I am certainly trying to validate this information. How can the various process settings make any difference - at worst it should spike quickly and then be idle? Why do you think it should spike and then become idle ? What is spending all this other CPU time on? Looping, looking for directory content? Perhaps an incorrect assumption, Declude actually uses less CPU, between 3% and 20% on average. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt Sent: Tuesday, October 25, 2005 2:33 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Okay, I'm watching these discussions - as I'm still truly scared of upgrading Declude. I just can't figure out the logic behind all the CPU consumption and why certain process parameters are suspected to have detrimental effects. Please verify my thinking: A machine that needs to process a given amount of mail will require a certain number of instructions, which are reflected in the total CPU usage. If several messages come in almost simultaneously, then I can either process them right away using parallel processes, causing a short spike in CPU use - or I can process them one by one, using up the same CPU time over time and causing a few seconds delay in mail delivery. Either way, the overall CPU consumption should be the same - just distributed differently. So - if the above is true, how do I explain the apparent inconsistency where users report that the CPU consumption is considerable higher than in the prior version? How can the various process settings make any difference - at worst it should spike quickly and then be idle? If the old Declude handled the amount of mail with moderate CPU use and without causing noticeable delays in mail delivery to the users - then I can't see how the same outcome suddenly should require x times the CPU resources, no matter how inefficient the process settings are? What is spending all this other CPU time on? Looping, looking for directory content? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Tuesday, October 25, 2005 10:13 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem I changed the THREADS to 75 and CPU wnet down to about avg 50%. I'll try WAITFORMAIL in just a bit. I also noticed in my spool folder I have a new folder called s that appeared with the time stamp of the new proc install. There is nothing in it; just a blank folder. I deleted it. Sincerely, Randy Armbrecht Global Web Solutions, Inc. 804-346-5300 x112 877-800-GLOBAL (4562) x112 http://globalweb.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, October 25, 2005 9:39 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Randy try changing WAITFORMAIL 1500 To WAITFORMAIL 500 See if that changes the delay. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster Sent: Monday, October 24, 2005 7:16 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem We upgraded to 3.0.5.11 tonight - big difference in CPU in that it's way down from the 3.0.5.5 - but proc folder will accumulate approx 35-50 messages before it'll dump them to the work folder. Do not see any problems so far except for the second or two delay
RE: [Declude.JunkMail] 30511 problem
Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 1:30 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Interesting ... .11 is working for me better than any previous version -- proc and work are quickly cleared. What process is jumping the CPU up so high? Decludeproc or the anti-virus scanner(s) or something else? How about some more info (CPU, RAM, declude.cfg contents, do you run AVAFTERJM?, that kind of thing.) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 12:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 30511 problem When I switch from 3.05.9 to 3.05.11 CPU usage goes up considerably and mail gets processed much slower and starts to backlog. I have had to switch back to 3.05.9 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 30511 problem
It works better but also changes the behaviour somewhat. The way I had it, it continuously kept the proc directory empty because once threads were available it brought mail into the work directory Now it does start more threads as they are available. I like the behaviour the way it was Can this be achieved again? Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, October 24, 2005 1:55 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Harry, try commenting out #waitforthreads 1500 #waitbetweenthreads 100 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 1:30 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Interesting ... .11 is working for me better than any previous version -- proc and work are quickly cleared. What process is jumping the CPU up so high? Decludeproc or the anti-virus scanner(s) or something else? How about some more info (CPU, RAM, declude.cfg contents, do you run AVAFTERJM?, that kind of thing.) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 12:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 30511 problem When I switch from 3.05.9 to 3.05.11 CPU usage goes up considerably and mail gets processed much slower and starts to backlog. I have had to switch back to 3.05.9 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 30511 problem
You would think but remember that all I did was change from V9 to V11 and behaviour changed. Threads @ 150 just does not work. It took a long time of experimenting with settings to reach 25 which worked well Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 4:36 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Someone correct me, but with 3.4GHz couldn't you try THREADS 150 and back down from there if needed? Wouldn't that help some? From http://www.declude.com/Articles.asp?ID=167 Performance can vary due to server configuration, CPU load, available memory, email traffic, the suggested THREADS is 25 per 1 GHZ CPU. To find peak performance increase your threads so that your CPU usage bounces to the 100% mark and down again. If your CPU is pegged at 100% try reduce the threads by increments of 5 each time till you see the desired result. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 3:00 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem It works better but also changes the behaviour somewhat. The way I had it, it continuously kept the proc directory empty because once threads were available it brought mail into the work directory Now it does start more threads as they are available. I like the behaviour the way it was Can this be achieved again? Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, October 24, 2005 1:55 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Harry, try commenting out #waitforthreads 1500 #waitbetweenthreads 100 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 1:30 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Interesting ... .11 is working for me better than any previous version -- proc and work are quickly cleared. What process is jumping the CPU up so high? Decludeproc or the anti-virus scanner(s) or something else? How about some more info (CPU, RAM, declude.cfg contents, do you run AVAFTERJM?, that kind of thing.) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 12:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 30511 problem When I switch from 3.05.9 to 3.05.11 CPU usage goes up considerably and mail gets processed much slower and starts to backlog. I have had to switch back to 3.05.9 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
RE: [Declude.JunkMail] 30511 problem
I guess I can start retuning all over again but I am concerned about why this is occurring Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, October 24, 2005 4:40 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Yes, again the ideal is that the CPU usage bounces, So you could start at 150 then if it pegged at 100% CPU try 125 etc. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 4:36 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Someone correct me, but with 3.4GHz couldn't you try THREADS 150 and back down from there if needed? Wouldn't that help some? From http://www.declude.com/Articles.asp?ID=167 Performance can vary due to server configuration, CPU load, available memory, email traffic, the suggested THREADS is 25 per 1 GHZ CPU. To find peak performance increase your threads so that your CPU usage bounces to the 100% mark and down again. If your CPU is pegged at 100% try reduce the threads by increments of 5 each time till you see the desired result. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 3:00 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem It works better but also changes the behaviour somewhat. The way I had it, it continuously kept the proc directory empty because once threads were available it brought mail into the work directory Now it does start more threads as they are available. I like the behaviour the way it was Can this be achieved again? Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, October 24, 2005 1:55 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Harry, try commenting out #waitforthreads 1500 #waitbetweenthreads 100 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 1:52 PM To: Declude.JunkMail@declude.com Cc: 'Technical Support' Subject: RE: [Declude.JunkMail] 30511 problem Dual Xeon 3.4Ghz 2GB ram imail 8.05 declude, sniffer invurbl The issue is that without changing anything other than going to 3.05.11 this occurs It appears that processing has changed If I could get some idea from Declude about this. Maybe I have to change my declude.cfg? It currently is threads 20 waitformail 500 waitforthreads 1500 waitbetweenthreads 100 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Monday, October 24, 2005 1:30 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] 30511 problem Interesting ... .11 is working for me better than any previous version -- proc and work are quickly cleared. What process is jumping the CPU up so high? Decludeproc or the anti-virus scanner(s) or something else? How about some more info (CPU, RAM, declude.cfg contents, do you run AVAFTERJM?, that kind of thing.) John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand Sent: Monday, October 24, 2005 12:10 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 30511 problem When I switch from 3.05.9 to 3.05.11 CPU usage goes up considerably and mail gets processed much slower and starts to backlog. I have had to switch back to 3.05.9 Harry Vanderzand inTown Internet Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2 519-741-1222 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail
