RE: [Declude.JunkMail] No one at Declude?

2013-04-18 Thread Nick Hayer
Hi David, Would you mind explaining your hosts trick? Not how a host file works but why this will circumvent licensing Thank you -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and

RE: [Declude.JunkMail] No one at Declude?

2013-04-17 Thread Nick Hayer
Thanks David for the vote of confidence. Who do we contact at Declude for customer support? They seem to be radio silent for now - at least on this list. Thank you -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support

RE: [Declude.JunkMail] No one at Declude?

2013-04-17 Thread Nick Hayer
PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] No one at Declude? Ours went down as well this morning. Declude stopped processing with a licensing error. I have left several phone messages. Todd From: Nick Hayer n

Re: [Declude.JunkMail] No one at Declude? topic change - gbudb

2013-04-17 Thread Nick Hayer
Pete, Is the data in truncate.gbudb.net duplicated in Sniffer? Thank you -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket:

RE: [Declude.JunkMail] why have spam scores jumped?

2013-03-12 Thread Nick Hayer
Thank you Andrew. Every time you write something its an education. Much appreciated. -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket:

RE: [Declude.JunkMail] invisible attachments? - change topic

2012-03-13 Thread Nick Hayer
Hi Linda, What are the plans for newer versions of Declude? -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket:

RE: [Declude.JunkMail] invisible attachments? - change topic

2012-03-13 Thread Nick Hayer
From: Nick Hayer [mailto:n...@madriveraccess.com] Sent: Tuesday, March 13, 2012 8:46 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] invisible attachments? - change topic Hi Linda, What are the plans for newer versions of Declude? -Nick MadRiverAccess.com

Re: [Declude.JunkMail] Performance issues with SM 8.2 w Declude

2011-09-26 Thread Nick Hayer
I have it on a VM - vmware 4.1 - no issues at all. Why not just PTV it now - give it more ram and processors in the migration and see what happens? -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7:

Re: [Declude.JunkMail] regular expressions and IS

2011-08-09 Thread Nick Hayer
BODY. CONTAINS. Bla bla Is that what you are looking for? -Nick On Aug 9, 2011, at 3:26 PM, David Barker dbar...@declude.com wrote: The expression is the IS Can you post a few examples of what you trying to catch ? -Original Message- From: Rick Davidson

Re: [Declude.JunkMail] white list or positive weight for a specific To address?

2011-06-18 Thread Nick Hayer
An easy way to whitelist these in your global.cfg WHITELISTFROM@declude.com -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket:

RE: [Declude.JunkMail] white list or positive weight for a specific To address?

2011-06-18 Thread Nick Hayer
GlobalSync Remote-BackUp Solutions! Web Hosting - E-Mail - Spam/Virus Gateway Services Hi-Speed DSL and Wireless Internet - T-1/T-3's PC Support - Networking - Virus/MalWare Removal 25% discount on most services for Non-Profits! Call us today! From: Nick Hayer [mailto:n

re: [Declude.JunkMail] Time to upgrade and to what?

2011-06-02 Thread Nick Hayer
I have the latest versions of both; I bought SM to dump Imail but found that some customers are simply resistant to change. So rather than risk losing them I am keeping Imail up to date. Privately Imail maybe receptive to price matching SM [give them a call?] - so that is a 3rd option. -Nick

re: [Declude.JunkMail] FROMNOMATCH returning high scores

2011-05-18 Thread Nick Hayer
I haven't seen it on FROMNOMATCH but have seen it elsewhere; specifically when an external app throws an exception. Bottom line somewhere declude or some other app threw an exception - the wacko score is the result. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or

Re: [Declude.JunkMail] error 0xC0000142 smtp.exe

2011-05-05 Thread Nick Hayer
With declude.cfg you can allocate the # of threads - but what do your logs show? Are sending out a lot of email? Maybe there are other issues like the box needs more physical ram/processing power - does task mgr say all ik kool? Dunno the answer here - just giving you some ideas for things

re: [Declude.JunkMail] OT: Web analytics

2011-04-11 Thread Nick Hayer
This will do what you want, does not require any code on the pages, and its free: http://www.mrunix.net/webalizer/ You just set up a config file and run the app with Windows scheduler. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574

Re: [Declude.JunkMail] How do you read the Inv-Uribl log file?

2011-04-08 Thread Nick Hayer
It crashed - through an exception and either Declude was unsure of what to do with it or that was the score it returned.I have seen this happen when I was developing my own app. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574

re: [Declude.JunkMail] How do you use NOLEGITCONTENT and IPNOTINMX

2011-04-08 Thread Nick Hayer
the defs are in the junkmail manual https://www.declude.com/searchresults.asp?Cat=109 IPNOTINMX - The IPNOTINMX test is good for helping reduce false positives. By default, Declude JunkMail will subtract several points from the weighting system when an email does not fail this test (which is very

Re: [Declude.JunkMail] How do you use NOLEGITCONTENT and IPNOTINMX

2011-04-08 Thread Nick Hayer
. For example, I weight Sniffer at 8, so I get a lot of spam that score 8. They're true spam, but the other tests don't confirm it and my delete threshold is 12 (although I would be happy to get just to 10 on these spams). Any suggestions welcome. Thanks, Ben From: Nick Hayer Sent: Friday, April 08

Re: [Declude.JunkMail] How do you use NOLEGITCONTENT and IPNOTINMX

2011-04-08 Thread Nick Hayer
try jackie99 MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket: https://www.skywaves.com/content/secure/support_ticket.htm

re: [Declude.JunkMail] How do you read the Inv-Uribl log file?

2011-04-05 Thread Nick Hayer
maybe it scores bitmask results and 127.0.0.4 response is not tagged? -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket:

re: [Declude.JunkMail] How effective should Inv-Uribl be?

2011-03-18 Thread Nick Hayer
What uribl tests are you using and are you getting hits on them - check your logs.. I'm suggesting you may need different tests - the one you are using may have blacklisted you or are dead even... -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International

Re: [Declude.JunkMail] How effective should Inv-Uribl be?

2011-03-18 Thread Nick Hayer
in Total Weight = 0 don't list any tests at all - they just resolve the IP. Thanks. From: Nick Hayer Sent: Friday, March 18, 2011 11:21 AM To: Declude.JunkMail@declude.com Subject: re: [Declude.JunkMail] How effective should Inv-Uribl be? What uribl tests are you using and are you getting

re: [Declude.JunkMail] Sniffer settings

2011-03-18 Thread Nick Hayer
I suggest monitoring the sniffer hits and increase/decrease the scoring accordingly depending on the false positives you see. Ideally you should be combo'ing a sniffer hit w/other tests to maximize sniffers effectiveness. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482

re: [Declude.JunkMail] SSD vs HDD

2011-03-04 Thread Nick Hayer
Dunno what you are using for a controller but if you couple these drives as a controller cache with an adaptec 5805 for example the system will be wicked fast almost regardless of the hdd drives used - as long as they are enterprise class.. -Nick MadRiverAccess.com|Skywaves.com Tech Support

Re: [Declude.JunkMail] weird processing of lists

2010-12-29 Thread Nick Hayer
Ben, No idea how to fix it - all I can suggest though is to run your log in debug mode and duplicate the problem. Then the logs may give you a clue as to what is going on. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency

RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers

2010-12-09 Thread Nick Hayer
fyi - the 'X-Originating-IP as well as 'X-AOL-IP are the senders ip - they have no relation to yahoo or aol. What you can do with these ip's - which is what I do - is look up 'um up in blacklists.. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International

re: [Declude.JunkMail] Good filter?

2010-10-18 Thread Nick Hayer
Post a few of his/her base domains - just to be sure we will be taking about the same guy.. Thanks -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support

RE: [Declude.JunkMail] Good filter?

2010-10-18 Thread Nick Hayer
cja244.larickcoppas.com/6878d778dcffdc763118115082cc190a3c0343 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick Hayer Sent: Monday, October 18, 2010 8:53 AM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] Good

RE: [Declude.JunkMail] Good filter?

2010-10-18 Thread Nick Hayer
[mailto:supp...@declude.com] On Behalf Of Nick Hayer Sent: Monday, October 18, 2010 11:50 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Good filter? Hi David, I think it will FP though - Here is an example: http://eimages.ratepoint.com/7cb5f36dd6464c05d417963e3efc4386/2010-06

re: [Declude.JunkMail] Declude queue alert

2010-08-25 Thread Nick Hayer
Hi Harry, Below is a script I copied from the list long ago - edit as applicable for your setup, save it as a .vbs file and run it every 15 min or so -Nick fHold1 = \\192.168.254.23\goofy\imail\spool fHold2 = \\192.168.254.23\goofy\imail\spool\proc aMail = e:\imail\imail1.exe mFrom = -u

RE: [Declude.JunkMail] Fine tuning Declude

2010-05-12 Thread Nick Hayer
Hi Michael, I guess this is best said - let it go,,,Alligate is the the way to go in front of Declude - Contact them again - they probaby will be glad to set you up with at trial even of some sort, -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International

RE: [Declude.JunkMail] We have opened up truncate.gbudb.net

2010-04-30 Thread Nick Hayer
here ya go IP4R.GBUBD ip4r truncate.gbudb.net 127.0.0.1 9 0 Above scores a 9 on a hit.. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support

RE: [Declude.JunkMail] We have opened up truncate.gbudb.net

2010-04-30 Thread Nick Hayer
? - Michael Cummins From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick Hayer Sent: Friday, April 30, 2010 11:00 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] We have opened up truncate.gbudb.net here ya go IP4R.GBUBD ip4r truncate.gbudb.net

re: [Declude.JunkMail] We have opened up truncate.gbudb.net

2010-04-29 Thread Nick Hayer
Hi Pete, Question - is this blacklist info already contained withing any Sniffer test? I am wondering about double dipping so to speak - if the info is within Sniffer which rulebase? -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574

re: [Declude.JunkMail] Missing Messages

2009-08-26 Thread Nick Hayer
maybe hijack is grabbing them? Look in the /spam2 dir -Nick From: Scott Fosseen [Prairie Lakes AEA] sfoss...@aea8.k12.ia.us Sent: Wednesday, August 26, 2009 2:46 PM To: decludejunkmail declude.junkmail@declude.com Subject: [Declude.JunkMail] Missing

RE: [Declude.JunkMail] Imail 11

2009-08-11 Thread Nick Hayer
SmarterMail. Its the way to go. Ver 6 will support ActiveSync [ as an addon] and the web interface is excellent. I have one remaining Imail server - 9x version - to convert.. -Nick From: Chuck Schick cha...@warp8.com Sent: Tuesday, August 11, 2009 1:07

re: [Declude.JunkMail] Upgrade 4.6.35 AVG not scanning - FIX

2009-06-02 Thread Nick Hayer
Was it not working? yawn. Never noticed. On my end AVG is superfluous behind Alligate. We just do not see a virii leakage. We run ClamD for phishing and I do not see in its logs any virus captures. -Nick From: David Barker dbar...@declude.com Sent:

Re: [Declude.JunkMail] BackScatter

2009-05-18 Thread Nick Hayer
Todd - I will second David on this - Alligate is the best gateway - no question about it - and it does integrate perfectly with Declude. -Nick David Barker wrote: Hi Todd, Alligate has way better greylisting capabilities than SmarterMail. SmarterMails implementation is somewhat

Re: [Declude.JunkMail] Blacklist Based on TO Address?

2008-10-30 Thread Nick Hayer
Not sure if this is what you are asking - you could do something like this for a particular recip subject pairing: ALLRECIPS END NOTCONTAINS x SUBJECT END NOTCONTAINS xx REVDNS delete weight CONTAINS . -Nick David Barker wrote: No there is not. If you want to blacklist I would

Re: [Declude.JunkMail] country chain

2008-10-08 Thread Nick Hayer
Hi David, David Barker wrote: We may want to create a new test which would trigger if multiple countries are in the routing. Any thoughts would be welcome. I do not think it would add much value For example I have a Russian company that send all their email via Hong Kong. I suspect there

Re: [Declude.JunkMail] doprewhitelist

2008-10-07 Thread Nick Hayer
Hi David, Are there any new features, etc for Declude, soon to be released or planned? If so would you elaborate? -Nick David Barker wrote: Part of the interim release debug logging it will be removed for the actual release. David Barker VP Operations Declude Your Email security is

Re: [Declude.JunkMail] version 4.4.20

2008-09-29 Thread Nick Hayer
). As we have just put out the 4.4.20 I have not as of yet updated the .txt file, which I will do later today. David B -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Sunday, September 28, 2008 1:46 PM To: declude.junkmail@declude.com Subject

[Declude.JunkMail] version 4.4.20

2008-09-28 Thread Nick Hayer
Hi - Are there any release notes as to how this version differs from 4.4.18? Are these release notes posted on the Declude site? Thanks -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

[Declude.JunkMail] Re:Declude vs Perry

2008-09-09 Thread Nick Hayer
Hi David - Below was forwarded to me - as a long time Decluder I am very disappointed in seeing something like this - -Nick http://dozierinternetlawpc.cybertriallawyer.com/computer-lawyer DECLUDE, INC. AND DNSSTUFF, LLC. v. R. SCOTT PERRY DISTRICT OF MASSACHUSETTS (BOSTON)

Re: [Declude.JunkMail] Re:Declude vs Perry (ES)

2008-09-09 Thread Nick Hayer
no? Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com http://www.123marbella.net/ E : [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Nick Hayer *Sent:* 09 September 2008 16:16

Re: [Declude.JunkMail] OT: Alligate Problems (ES)

2008-08-29 Thread Nick Hayer
fyi - Alligate has started its own maillist - to join: [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] The mailing list address is [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] -Nick Dave Marchette wrote: Always copy and paste, and always don't allow a trailing space at the end of the domain

Re: [Declude.JunkMail] OT: Alligate Problems

2008-08-26 Thread Nick Hayer
Hi Scott, Scott Fosseen wrote: I guess I am looking for a word of encouragement from the alligate supporters out there that I should stay diligent or if there are any tips you can share. Alligate is unbelievable with what it does and with what little resource it uses. It is the way to go -

Re: [Declude.JunkMail] Mail Pre-Processor recommendations

2008-05-29 Thread Nick Hayer
Colbeck, Andrew wrote: I use Alligate from Solid Oak Software, and I like it a lot. as do I. The really slick part is how it reduces bandwidth - it *very* accurately distinguishes spam etal before the DATA command thereby preventing the unwanted emails from ever being received..

[Declude.JunkMail] Declude on Alligate

2008-04-15 Thread Nick Hayer
Fellow Declude users - . I have a small application that will allow Declude for Imail to run - without Imail - on an Alligate server. The result is Declude functionality on an Alligate gateway! The app is in production but before any formal release I am looking for a few folks to help me

Re: [Declude.JunkMail] 4.4.00 Released

2008-04-04 Thread Nick Hayer
Andre - Colbeck, Andrew wrote: David Barker said: DEC ADD Added date, Time, Email, Spool name, Weight and Tests failed to the BLKLST log I thinks its the recording to the blklst.txt file that lives in the \spool dir. I have forgotten the files purpose... -Nick

Re: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list

2008-02-05 Thread Nick Hayer
Hi Rick, Having a bad day? -Nick Rick Klinge wrote: Will you morons please remove me from your spam list? *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *Sent:* Monday, February 04, 2008 10:33 PM *To:* declude.junkmail@declude.com *Subject:* [Declude.JunkMail] re:

Re: [Declude.JunkMail] Warning re: DECLUDE - CRITICAL VIRUS SCANNING UPDATE

2007-04-18 Thread Nick Hayer
David, Do not take all these suggestions personal. You are our pinata - remember? :) -Nick David Barker wrote: - Pulled out the bad package Did this. - Rolled a new package (with an incremented version number) with the missing DLL, tested the package successfully and

Re: [Declude.JunkMail] Spam gateway/proxy...

2007-04-12 Thread Nick Hayer
Hi Chuck, I use Alligate. It does some very fancy stuff prior to the 'data' command [among other things afterward] that on my system block 95% of incoming traffic prior to receiving the email. And this is not done with ip blacklists.. -Nick Chuck Schick wrote: Anyone using a spam

Re: [Declude.JunkMail] Image spam

2007-02-21 Thread Nick Hayer
Hi Scott, Scott Fisher wrote: Are there any end users who are using the VAMSOFT IMAGE SPAM AGENT tht would like to comment on it's effectiveness / processor utilization? it seems to not use much cpu; its effectiveness is ok. In case you are unaware it does not ocr the email, it just works on

[Declude.JunkMail] dns attacks today

2007-02-07 Thread Nick Hayer
fyi - http://www.darkreading.com/document.asp?doc_id=116685WT.svl=news2_1 -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at

Re: [Declude.JunkMail] Interesting ORF stats

2006-12-15 Thread Nick Hayer
Hi John, John T (Lists) wrote: I have 3 gateway servers running IIS with ORF. These are my MX records for all my domains. ORF has identified and blocked 71% of incoming email on my primary gateway. ORF has identified and blocked 81% of incoming email on my secondary gateway. I see the

Re: [Declude.JunkMail] New Reporting Tool

2006-12-08 Thread Nick Hayer
Thanks for sharing Karl, nice work! -Nick IS - Systems Eng. (Karl Drugge) wrote: The newest PERL script. Slices, dices, etc ... Throw it in a directory, edit a few environment variables at the top of the script, dump in a few Declude logs, run it, enjoy. Requires PERL, of course.

Re: [Declude.JunkMail] Undocumented Directive 4.x

2006-12-04 Thread Nick Hayer
Any other undocumented's that you can share? :) -Nick David Barker wrote: Just an FYI you may find it useful, in the global.cfg: BLKLST ON Writes a text file to the \spool\blklst.txt containing the IP and weight of emails eg. 1.1.1.1 23 2.2.2.2 7 David Barker Director of

Re: [Declude.JunkMail] New pattern

2006-11-27 Thread Nick Hayer
Doherty Skywaves, Inc. 97 Webster Street Worcester, MA 01603 508-425-7176 [EMAIL PROTECTED] - Original Message - From: Nick Hayer [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, November 15, 2006 5:38 PM Subject: Re: [Declude.JunkMail] New pattern can you post

Re: [Declude.JunkMail] New pattern

2006-11-15 Thread Nick Hayer
can you post the headers from samples that were delivered on different days? Then we can help I betcha -Nick Dave Doherty wrote: Yes, it is similar. For some reason, sniffer doesn't seem to getting all of them. I wonder if something like FROM 10 CONTAINS %SUBJECT% might work -Dave

Re: [Declude.JunkMail] Spamhaus

2006-11-15 Thread Nick Hayer
nothing - Matt with his trickery is adding more weight to a last hop that fails the test... -Nick Darin Cox wrote: Then what was wrong with my example? Darin. - Original Message - *From:* Matt mailto:[EMAIL PROTECTED] *To:* declude.junkmail@declude.com

Re: [Declude.JunkMail] declude not modifying subject line

2006-11-09 Thread Nick Hayer
Hi David F, David Franco-Rocha [ Declude ] wrote: The broken line terminators are not necessarily of the same type in a given message. In addition, they are not necessarily adjacent to each other (with leading whitespace or unprintable characters on a line).What may appear obvious to the

Re: [Declude.JunkMail] Spam not being caught

2006-11-09 Thread Nick Hayer
Hi Karl, Post a sample with full headers so we can see what the scofflaw is sending you -Nick Karl Hentschel wrote: Thanks for the tip, but unfortunately I am not using the Pro version of Declude so I cannot create my own filters. Are others being slammed with stock spam recently?

Re: [Declude.JunkMail] Spam not being caught

2006-11-09 Thread Nick Hayer
IVETEN-SRC [4], DYNHELO [5] X-Country-Chain: CANADA-FRANCE-destination X-IMAIL-SPAM-PHRASE: (8965064d00d0eb56, our hottest pick) X-RCPT-TO: xxx@ourdomain.com Status: U X-IMail-Rule: H~x-imail-spam:xxx@ourdomain.comData- X-IMAIL-SPAM-PHRASE IT'S BUD X-UIDL: 463095290 From: [EMAI

Re: [Declude.JunkMail] Spam not being caught

2006-11-09 Thread Nick Hayer
effectively with any IP4r list. - Original Message - From: Nick Hayer To: declude.junkmail@declude.com Sent: Thursday, November 09, 2006 4:51 PM Subject: Re: [Declude.JunkMail] Spam not being caught So far - and I have been hammered as well

Re: [Declude.JunkMail] Spam not being caught

2006-11-09 Thread Nick Hayer
Scott Fisher wrote: I get over a 1000 spam a day from this spammer. If you don't have a pattern would you mind sending me off list a few of the ones you do receive from different days? I do not recognize this gut so I would like to see more of his product. -Nick

Re: [Declude.JunkMail] Clam AV Updates

2006-11-09 Thread Nick Hayer
Hi Mark, I just sent you off list my \share\clamav dir zipped up... -Nick Mark Reimer wrote: My daily.inc folder is missing from the clam directory. Could anyone please help me? Mark Reimer IT System Admin American CareSource 972-308-6887

Re: [Declude.JunkMail] whitelisting based on rev dns

2006-11-08 Thread Nick Hayer
Craig Edmonds wrote: How can I whitelist based on Reverse DNS? REMOTEIP WHITELIST CIDR 64.4.240.0/20 REVDNS WHITELIST ENDSWITH .paypal.com etc... -Nick Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com --- This E-mail came from the

Re: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Nick Hayer
Todd Richards wrote: Thanks Kevin. This is what I was wondering about, so I will look into how to implement. something like this: WEIGHTRANGE.SPAM.LOW weightrange x x 10 12 triggered on a weight of 10 to 12 inclusive WEIGHTRANGE.SPAM.MID weightrange x x 13 15

Re: [Declude.JunkMail] How long is each test taking?

2006-10-31 Thread Nick Hayer
Chris Anton wrote: Hello... We are using declude 2.somethign... we are pegged at 100% processor usage and are wondering what is the best way to determine how long each test takes. Do you have filter 'optimizers' in your filters eg - SKIPIFWEIGHT and STOPATFIRSTHIT in your filter files?

Re: [Declude.JunkMail] picture spam

2006-10-12 Thread Nick Hayer
Matt wrote: Let me jump in here for a moment. You guys should have made a deal with Pete instead of CommTouch. Sniffer blows it out of the water and he has no licensing restrictions. IMO of course. mine too! Sniffer does a very good job.. -Nick ---This E-mail came from the

Re: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7

2006-09-29 Thread Nick Hayer
Harry, Please post to the list the details - Thanks -Nick chris wrote: Harry Contact me off the list if you can, I would like to help Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833toll free

Re: [Declude.JunkMail] Newest version

2006-09-14 Thread Nick Hayer
This regex works \b(PHA)+([a-zA-Z]+(RMA))\b as well as this one for the other morph \b(PHA)+([a-zA-Z]+(RMACY))\b -Nick Ferrell Ard wrote: We are seeing a lot of email with the Subject line Subject: X-IMail-SPAM PHAujyRMA The KEY to the subject line is (1) 1st 3 letters are always PHA (2)

[Declude.JunkMail] IPBYPASS Broke?

2006-08-30 Thread Nick Hayer
To David at Declude - or anyone else... I have these lines in my global config Declude 4.3.7: IPBYPASS12.152.254.14 XINHEADER X-Note: Sent from: [Revdns: %REVDNS%] [RemoteHostDomain: %REMOTEHOST%] [RemoteIP: %REMOTEIP%] [SenderHost: %SENDERHOST%] I received this email below

Re: [Declude.JunkMail] IPBYPASS Broke?

2006-08-30 Thread Nick Hayer
Matt wrote: Nick, Do you buy any chance have have this IP also covered by a whitelist entry of any type in your Global.cfg? Nope. No where is it listed except on the IPBYPASS line - -Nick Matt Nick Hayer wrote: To David at Declude - or anyone else... I have these lines in my

Re: [Declude.JunkMail] IPBYPASS Broke?

2006-08-30 Thread Nick Hayer
To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] IPBYPASS Broke? Nick, Do you buy any chance have have this IP also covered by a whitelist entry of any type in your Global.cfg? Matt Nick Hayer wrote: To David at Declude - or anyone else... I have these lines in my global

[Declude.JunkMail] manual install of 4x

2006-08-23 Thread Nick Hayer
Is there a way to do this without the wizard? Thanks for any info -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.

Re: [Declude.JunkMail] Fw: New ClamAV scam database

2006-08-08 Thread Nick Hayer
Thanks much Bill, -Nick Bill Landry wrote: For anyone that is possibly running ClamAV for virus scanning, and is already taking advantage of the added phish detection provided by Steve Basford's phish.ndb, he has put together another database geared to tagging scam e-mails, including those

Re: [Declude.JunkMail] OT SNMP Monitor Program

2006-08-07 Thread Nick Hayer
we use http://www.jffnms.org/ -Nick dfn Systems wrote: Quiet times are good for off topic subjects Right? I need a Monitoring program that will show me bandwidth utilization of my dsl customers to help track down compromised/infected machines. Regular sniffer programs won't work because

[Declude.JunkMail] Commtouch, etc

2006-07-19 Thread Nick Hayer
David, You have asked for some constructive feedback here regarding this new offering - I will not ask for a show of hands here :) but I bet a lot of folks are rolling their eyes simply because of the core Declude product and its outstanding bugs., inability to release a stable product,

Re: [Declude.JunkMail] Commtouch, etc

2006-07-19 Thread Nick Hayer
Hi David, David Barker wrote: Nick, With regards to outstanding bugs I have a list which we are working on, and as you know I have committed to get these fixed as well That you have, and your participation on this list is greatly appreciated. I was only trying to suggest that the past couple

Re: [Declude.JunkMail] Speaking of Decludes AVG scanner

2006-07-18 Thread Nick Hayer
Chris Asaro wrote: Try opening the diags.txt file in your \mailserver\declude directory. Check to see if you are receiving an invalid key code error. When I went to 4.20 I had no such error code however the evidently there was a one hence Declude ceased to function without warning. -Nick

Re: [Declude.JunkMail] Declude 4.3

2006-07-18 Thread Nick Hayer
David - at Declude - Would you kindly comment on this? Also on what is Declude 4.3? -Nick John T (Lists) wrote: I guess we all missed the following paragraph in the license agreement: 3.2.6 sub-license, rent, sell, lease, distribute, or otherwise transfer the Licensed Program save as

Re: [Declude.JunkMail] Declude 4.3

2006-07-18 Thread Nick Hayer
Current Service Providers (ie. Before 1 June 06) are under no restrictions for using Declude; only the CommTouch add-in component. Excellent! Thanks for the reply - -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL

[Declude.JunkMail] [Fwd: [0A6-0C4E22B9-4D5B] ZEROHOUR]

2006-07-17 Thread Nick Hayer
not hesitate to contact me either by email or call Toll free 1-866-332-5833 Ext.7008 Linda Pagillo Technical Support Engineer Declude - Your Email security is our businessT 978.499.2933 office 978.477.8930 efax [EMAIL PROTECTED] www.declude.com From: Nick Hayer [EMAIL PROTECTED] Sent: Mon, 17

Re: [Declude.JunkMail] F-Prot Licensing

2006-07-17 Thread Nick Hayer
David Barker wrote: Declude has this process and functionality built in to the Declude product which enables customers to use a command line scanners like ClamWin snip Brian Burns port called ClamAV supports clamd which is wicked fast [and free]. This is a different product from ClamWin. I

Re: [Declude.JunkMail] F-Prot Licensing

2006-07-17 Thread Nick Hayer
Don Brown wrote: What is the URL to Brian Burns' port? http://www.sosdg.org/clamav-win32/ -Nick Monday, July 17, 2006, 2:05:34 PM, Nick Hayer [EMAIL PROTECTED] wrote: NH David Barker wrote: Declude has this process and functionality built in to the Declude

Re: [Declude.JunkMail] F-Prot Licensing

2006-07-17 Thread Nick Hayer
Sorry but I have not been keeping up w/this thread - we no longer can use the desktop fpcmd.exe as we have been w/Declude without paying alot more $$? Can we use the version we have and still get defs? -Nick Matt wrote: F-Prot doesn't care. They don't do volume as a plug-in to mail

Re: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

2006-07-12 Thread Nick Hayer
Andy Schmidt wrote: Hi Dave, Sorry everyone -- my mistake. no biggie. That is what David, our pinada, is for. :) -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The

Re: [Declude.JunkMail] Latest All_LIst.dat file

2006-07-11 Thread Nick Hayer
There is a much more recent avail you can download from 'my account' on the declude site. If you cannot find it let me know and I will send it to you. -Nick Darrell ([EMAIL PROTECTED]) wrote: What is the latest all_list.dat file. Mine is dated 9/28/2005. I am seeing an issue with

Re: [Declude.JunkMail] Country tests

2006-07-11 Thread Nick Hayer
Hi Mike, Here is my understanding of the 2 tests: If an email originates from a country it will fail the COUNTRY test If an email passes through a country it will fail the COUNTRIES test -Nick Mike N wrote: I looked in the 4.x Junkmail manual, and couldn't find an authoritative definition

Re: [Declude.JunkMail] upgrade to 4x

2006-07-10 Thread Nick Hayer
Hi Sandy, Sanford Whiteman wrote: I have been running 2.0.16 however it has a bug that external tests will double-dip; eg fail the same external test multiple times... I reported it to tech support with no resolution - so my only recourse is to run the latest ver. Is

[Declude.JunkMail] upgrade to 4x

2006-07-09 Thread Nick Hayer
I have been running 2.0.16 however it has a bug that external tests will double-dip; eg fail the same external test multiple times... I reported it to tech support with no resolution - so my only recourse is to run the latest ver. I am licensed for declude virus, hijack and JMPro - so I

Re: [Declude.JunkMail] compatibility question

2006-06-19 Thread Nick Hayer
Hi David [Barker], Is there a list, or would you kindly post one of the known issues with Declude? I'm still on 2x because of all the problems reported and what I perceive as them not being resolved. Thanks! -Nick John Doyle wrote: Robert I"m running 8.22 hf2 and Declude

Re: [Declude.JunkMail] compatibility question

2006-06-19 Thread Nick Hayer
not domain (fixed) David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, June 19, 2006 1:04 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] compatibility question Hi David [Barker

Re: [Declude.JunkMail] Experience with 4.x

2006-05-24 Thread Nick Hayer
Hi Matt, So you see any substantive performance improvement over 2x? -Nick Matt wrote: Jay, It's not about moving along, it's about limiting the CPU to only 100%, or at least not piling it on when it gets there. I could be wrong in assuming that 1 thread = 1 message (hopefully I will be

Re: [Declude.JunkMail] What happened to the logging since 2.x????, it's HUGE

2006-05-22 Thread Nick Hayer
Hi Matt, Matt wrote: I'm trying an upgrade from the 2.x release for the first time, Why on earth would you want to do that? Was 2x too bug free and you need some excitement? -Nick

[Declude.JunkMail] ClamAV Sanesecurity phish files

2006-05-15 Thread Nick Hayer
fyi - Sanesecurity phish downloads have changed as of 5/10. The download file is gzip'ed and called phish.ndb.gz -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives

Re: [Declude.JunkMail] image spam

2006-05-05 Thread Nick Hayer
Sanford Whiteman wrote: In keeping with the increased CPU demands of such tests, the new version of SPAMC32 will contain the ability to send the request to two (maybe more than two in future) tiered SPAMD daemons. The second daemon -- listening on a different port, or on a different

[Declude.JunkMail] image spam

2006-05-04 Thread Nick Hayer
fyi - I just found these 2 plugins for spamassassin http://wiki.apache.org/spamassassin/OcrPlugin http://antispam.imp.ch/patches/patch-ocrtext That will ocr the gifs, etc. These should help SA be even more effective within Declude.. -Nick --- This E-mail came from the Declude.JunkMail

  1   2   3   4   >