[Declude.JunkMail] more spam lately?

I have seen more spam get through in the last few weeks then ever before. I am still catching a bunch, but it seems that I am not blocking something that I should. Could someone recommend what may be added/changed to this part of my config (see below) to do a better job of catching spam?

Re: [Declude.JunkMail] Declude crashing and taking up 99% CPU

should we use this even if we don't have the 99% cpu problem? - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, September 25, 2001 6:44 PM Subject: Re: [Declude.JunkMail] Declude crashing and taking up 99% CPU We now have a new interim

[no subject]

de.com Subject: [Declude.JunkMail] X-RBL-Warning: domain: whatever.com Date: Thu, 27 Sep 2001 07:27:26 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express

[no subject]

[EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] X-RBL-Warning: domain: whatever.com Date: Thu, 27 Sep 2001 08:31:47 -0500 MIME-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook

Re: [Declude.JunkMail] What test gives this message?

We see any email sent from Eudora getting tagged like this... Is this normal? Jim - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, November 21, 2001 8:47 AM Subject: Re: [Declude.JunkMail] What test gives this message? Which test

Re: [Declude.JunkMail] [IMail Forum] undeliverable mail?

What does this message mean? This is from the same domain which has been renewed but they are still getting undeliverables. 20011009 112717 127.0.0.1 SMTP (576) 221 jumpgate.speedlinetech.com SMTP Service closing transmission channel I don't think that they have been blacklisted or

[Declude.JunkMail] adult content test?

Is there a test that filters for adult content? I have a few customers that requested it. Regards, Jim --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to

Re: [Declude.JunkMail] adult content test?

ok, i added this to the $default$.junkmail file: ADULT WARN and this to the global.cfg file: ADULT adult x x 5 0 is that all i need to do? also, what's the x-rbl-warning say for emails caught by this? thanks, Jim - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To:

[Declude.JunkMail] adult comment in x-rbl-warning?

it seems that all the mail that gets caught by the adult test puts this in the header when the test is set to warn X-RBL-Warning: notice the lack of a reason for failure... this is what i have configured: $default$.junkmail: ADULT WARN global.cfg: ADULT adult x x 5 0 Any ideas?

Re: [Declude.JunkMail] adult comment in x-rbl-warning?

Do I just put in the $default$.junkmail file, ADULT WARN X-RBL-Warning: Failed Adult Test Thanks, Jim - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, January 24, 2002 6:20 PM Subject: Re: [Declude.JunkMail] adult comment in

Re: [Declude.JunkMail] Spam Review Software

can i use a unc to get to the spooled files or does it have to be mapped? thanks!! Jim - Original Message - From: Tom Schwarz [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, January 26, 2002 12:48 PM Subject: [Declude.JunkMail] Spam Review Software Exactly 15 hours after I

Re: [Declude.JunkMail] Spam Review Software

Subject: RE: [Declude.JunkMail] Spam Review Software Either will work. \\myserver\imail\spool or c:\imail\spool -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Jim Jones, Jr. Sent: Saturday, January 26, 2002 1:25 PM To: [EMAIL PROTECTED

Re: [Declude.JunkMail] Spam Review Software

sorry... two major cases of me not reading the manual!!! i figured it out! i was pointing to the spam dir, not the spool! thanks for your great work! jim - Original Message - From: Jim Jones, Jr. [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, January 26, 2002 1:36 PM Subject

Re: [Declude.JunkMail] User's Managing SPAM

we tried that, using imfilter to put any emails that have been warned into a SpamBox folder in each account. the problem is that customers would either have to use IMAP or the webmail to get to them... and since most use pop3 and only use webmail when they travel, these SpamBox folders could get

Re: [Declude.JunkMail] Declude console

I just tried to install it per the instructions below and i can't seem to get any info out of it... just a header and a bunch of 0's... Any ideas? Thanks, Jim - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, February 19, 2002 11:31 AM

Re: [Declude.JunkMail] Declude console

Yup, that was it... Thanks! Jim - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, February 19, 2002 1:51 PM Subject: Re: [Declude.JunkMail] Declude console : : Yep, all three of those things are done... : : Actually, it turns out that

[Declude.JunkMail] lots of declude processes and not many smtp... 8000+ files in the spool

Is it normal to have 20 or so declude process running, not many smtp32 processes and 8000+ spool files in the spool folder? there are also 8000+ files in the spool\overflow folder. all of these files ARE from today. we keep our spool directory very clean! --- [This E-mail was scanned for

Re: [Declude.JunkMail] lots of declude processes and not many smtp... 8000+ files in the spool

no need to answer... sorry for the double post. jim - Original Message - From: Jim Jones, Jr. [EMAIL PROTECTED] To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Friday, April 19, 2002 7:36 PM Subject: [Declude.JunkMail] lots of declude processes and not many smtp... 8000+ files

Re: [Declude.JunkMail] v1.47 (beta) released

What is the syntax for the WHITELIST IP feature? Is it WHITELIST IP 192.168.1.0/24 ? Thanks, Jim - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, April 22, 2002 8:46 AM Subject: [Declude.JunkMail] v1.47 (beta) released We have just

Re: [Declude.JunkMail] Blocking Dictionary Attacks and Mail Harvesting -- Does BlackIce help?

we put that on after having over 100,000 connections to our server in one day for harvesting purposes. We noticed that it was seeing these attacks, but couldn't tell if it was blocking them or not. I wonder if there is a way to configure blackice to automatically block someone that is doing

[Declude.JunkMail] attach and per domain/user config...

We are testing our junkmail system before we deploy it to all our customers. We have several domains that we are testing with, one of which is for our employees only, so it is configured to use the attach action if the weight test fails. In two of our other domains we have 2 to 5 users

[Declude.JunkMail] how do i disable junkmail?

I need to turn off all of declude-junkmail for a little while, but keep declude-virus running. what would be the best way to do this? thanks, Jim --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list.

Re: [Declude.JunkMail] Get a load of this . . .

I got one too... and replied with questions. I doubt if we'll get answers. Jim - Original Message - From: Tony Gray - Network Administrator To: [EMAIL PROTECTED] Sent: Wednesday, July 03, 2002 1:34 PM Subject: RE: [Declude.JunkMail] Get a load of this . .

Re: [Declude.JunkMail] declude queue / imail spool problems?

Here's what I did to fix it: 1) I turned off declude junkmail (by renaming the global.cfg file) 2) Moved all the files from the overflow directory to the spool directory They all cleared out and things are back to normal. Now (an hour after i turned junkmail off) I am going to turn junkmail

Re: [Declude.JunkMail] declude queue / imail spool problems?

I turned it back on and the number of files in the spool started growing at a very fast pace. I'm running declude v1.53 if that helps. We do get lots of dictionary attacks, but they don't actually get in as files do they? don't the emails to bogus users get rejected before they are written to

Re: [Declude.JunkMail] declude queue / imail spool problems?

OK, I confirmed that there are no nobody aliases. I will start pouring through the logs... is there a program that would make that any easier? Thanks, Jim - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, July 18, 2002 1:54 PM Subject: