What I would do in this case is simply create a
\IMail\Declude\cruzanltd.com\$default$.JunkMail file, and not change
anything else. That way, E-mail to [EMAIL PROTECTED] will use the
\IMail\Declude\cruzanltd.com\$default$.JunkMail file, and E-mail to anyone
else will use whatever settings the
It gets complicated with aliases and forwarding, but if cruzanltd.com only
appears as a forwarding address, Declude JunkMail won't try to use it.
Ok...now I'm confused. I do actually have a cruzanltd.com domain set up on
the imail server, with mx records in dns and everything. People will
actual
Just a single per-domain config file
(\IMail\Declude\cruzanltd.com\$default$.JunkMail) should be all that is
needed in this case.
This is what I was looking for. I was unsure Declude would check a folder
marked cruzanltd.com for a default file or it would automatically use the
$default$.junkmai
Title: $default$.junkmail file questions
I have 2 domains on my mailserver:
Todhunter.com (my primary domain)
Cruzanltd.com (my virtual domain)
I have a $default$.junkmail file for the todhunter.com domain, and separate user.junkmail files, for my outside salespeople, who are to receive
Title: Message
Yesterday's summary:
SORBS...5,061...47.70%SORBS-BADCONF..220.21%SORBS-DUHL..3,273...30.85%SORBS-HTTP..1,119...10.55%SORBS-MISC4764.49%SORBS-SMTP.790.74%SORBS-SOCKS.1,157
Title: Global configs
I'm looking over the Global.cfg file from my current version, 1.75 and comparing it to the Global.cfg of the 1.79 beta.
Are all those Sorbs tests still active?
Are they worth adding into my old cfg?
Thanks,
Sharyn
Title: Declude and SPF records
We receive a lot of spam that looks like it's coming from our own domain (which it really isn't).
If I set up an SPF record for my own domain ( todhunter.com) and upgrade to the latest Declude beta, enable the SPF test, etc, will Declude nab spam that is sent
Adding an SPF record for the domain works the same no matter how the domain
is handled by IMail. So if you have a virtual domain example.com, you
would set up the SPF record exactly the same as you would if you had a
"real" domain of example.com.
If I set up an spf record for my primary doma
Thanks!
We are patched.
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) http://www.cruzanrums.com";>www.cruzanrums.c
Im running the latest release version (I think).
What version supports this?
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at the annual
San Francisco Wine and Spirits Championships. For
more information, please clic
Another question on this..
Although I run my mail server here, we do "lease" our IP address block from
our ISP. We don't, however, have our outgoing smtp settings configured for
our ISP's mailserver.
Does this have to be reflected in the set up as well?
Thanks for everyone's help.
Sharyn
We a
Title: Maybe OT - Virtual domains and SPF
If I have a virtual domain that is configured on my mail server, and I am looking at setting up an SPF record, is there somewhere that the virutual domain has to be specified?
I am looking at the pobox.com SPF wizard and don't really see anything the
Title: OT- Anyone know about this latest "attack" reported by CNN?
Here is what CNN says:
http://www.cnn.com/2004/TECH/internet/06/24/internet.attack.ap/index.html
Sharyn
Title: Sort of OT - Desktop anti spam software
We are looking for a desktop solution to be used as an added defense against spam.
This would be used in addition to Declude Junkmail.
It would reside on the users' desktop, and would be managed by the user, as opposed to the mail admin (ME!)
Title: Message
Thanks
Folks.
Appreciate the input.
I
decided against taking the survey although if it was legit, I would've liked to
have REALLY told them how I feel!
Sharyn
Title: Message
Good
morning,
I
received this email this morning, supposedly from AT&T. It was sent to the
email address I use to test my spam settings.
Anyone
want to comment as to whom this is really from, or what the link really takes
you to?
This
was a little scary to me as we dea
Hmmm...looks like a reference to the 7th Crusade which lasted from
1248-1254. Like all of the other crusades, it was launched in the hopes of
finding the "Golden Windows" or, as some call it today, the "Holy Grail".
We see the clear reference to Windows, or Grail, but some Latin and/or
Spanish in
Title: Message
I can also recommend
snort. There is a full windows version put out by
Engagesecurity.com The product is called EagleX and is a single
install of all needed components for Snort to operate on a Windows
platform.
For those of you running Snort, please give me wha
http://www.snort.org/
Thanks!
Checking it out as we speak.
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) http:/
Title: **OT** Intrusion Detection Software
I have been asked to research Intrusion Detection Software.
I have done a Google search, but most of what I see is an actual appliance.
All I am looking for is software that will notify me when something suspicious attempts to hit our network.
Title: Message
http://www.declude.com/junkmail/support/ip4r.htm
Would be well
worth your time. I'm finding that these are very
effective:
XBL
DSBL
NJABL
SORBS
And more
generally:
FIVETENSRC
SPAMCOP
I'm using whatever was included by default in th
Title: Message
We’re getting the same thing endlessly, but none of the links match what you
have except the v*9.gif. I’m trying to see if blocking only on the graphic name
will work.
I'm trying that too (thanks to a
post from earlier!). Blocking on URLS is
useless.
Title: Message
Here are a few more to add to the
list:
BODY
30 CONTAINS pharmacourt.bizBODY 30 CONTAINS thatrxstore.bizBODY 30
CONTAINS pharmashoppe.bizBODY 30 CONTAINS pharmawarehouse.bizBODY 30
CONTAINS fastactingpills.comBODY 30 CONTAINS
gomedz.biz
Bill
Thank
Title: Message
BODY 45 CONTAINS .listrc.comBODY 45
CONTAINS .madedcd.com
Thanks. Same deal as before. Filtering on URLS doesn't work
as the URLs are constantly changing, even though that [EMAIL PROTECTED] pic of the pharmacist on cloud 9 remains
the same.
Sharyn
Title: Message
up to now i block this one with the following to
filterlines
ANYWHERE 30 CONTAINS .com/v9.gif ANYWHERE 30 CONTAINS .com/z7.gif
What is the latest version of Declude that supports
ANYWHERE?
Although this would probably work as BODY 30 CONTAINS
etc..
Thanks! I
>
Try:
BODY ## CONTAINS www.madedcd.com
Thanks. That line only works for this particular email. The URLs
contained in the body change, almost by the hour. I have dozens of URLs
in my filter for this same message.
Sharyn
We are the worldwide producer and marketer of the award winning
Title: Message
Sorry,
folks, to attach spam to an email but this is driving me
NUTS.
No
matter what I do, I can't seem to block this!
Is
anyone else successfully blocking this one?
Thanks,
~Sharyn~
Network Administrator
Todhunter Information
Systems "Helping You Meet Our Customers
Scott? Do you have an estimated timeframe for the newest "official"
release?
I'm seeing lots of betas go by with some cool features but I prefer to
wait until they are all packaged into one.
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged
Neither Declude JunkMail nor Declude Virus will alter any attachments,
nor
will IMail (as far as I know). Given that it is only a problem in Word
format and not .ZIP, I would suggest looking to see if you have a
firewall
that may be interfering.
What's even odder is that this doesn't affect a
Title: Odd Imail behavior?
One of our business partners attempted to send us a MS word doc. We are using IMAIL 7.15
When trying to open it, the error message, from MS Word was:
The document name or path is not valid. Try these suggestions.
*check the file permissions for the document or
Title: Redirect Spam to another folder
Good morning,
Sorry in advance if this has been covered.
Is there a way to either:
1. Move the Spam folder that receives the "hold" emails out of the Imail\spool directory
OR
2. Have emails with a "hold" action be placed in another folder tota
So now I would ask what the source of the E-mail shows?
This particular one, came in plain text, I just realized. That is
probably why I didn't use the source to begin with.
When I right click on it, view source is greyed out.
I would be happy to forward the email to the list but I did that ea
Those do look the same. Did you cut and paste it from what you were
viewing in the E-mail, or from the source?
I cut and pasted it from what I was viewing in the email, NOT from the
source, hence my original question. I did go back and run the -diag and
I am definitely running JM 1.75
Sharyn
Remember that failing a test and flagging (or any other action) are very
different. In this case, the original question made it seem as though
the
E-mail wasn't failing the test, whereas it may be that the E-mail did
fail
the test but an action other than the one you wanted was used.
The ema
Im using the latest release.
In this last example that everyone's filter probably caught, the
original email came through unflagged, but when I forwarded it to the
list, the filter caught it.
I have double checked the per user configs to ensure both my personal
email account (where the forwarded
Ok, that was weird.
My filter nabbed my email to the declude list, but didn't catch the
original email.
I have checked the per user configs and the attach action is set to both
my account and the original account that the email was sent to.
Sharyn
We are the worldwide producer and marketer of
This is a perfect example of my body filter not working..
In my BODY filter, I have the following line:
BODY 0 CONTAINS Bachelors and other higher education available in your
fields
I have the attach action set to this entire filter, yet the email below
came through, unattached.
For those of yo
Title: Filter question
Good morning,
For the spam that doesn’t contain a URL that I can block in my URL filter, I have taken to trying to find phrases that I can block in my BODY filter.
My question is…
Should I be blocking these phrases using the text in the email that I can see, or sho
Well, my answer was that Declude can, but the risks of accidentally
deleting good mail outweighed the convenience of not having to hit
delete. She went over my head and got the bosses on her side. Now I've
gotta have a meeting with them and come up with a solution. Any
suggestions?
I have fou
Is there any reason why you can't filter on common virus extensions.
This will cutdown on many viruses. It is common practice not to accept
exe, com, bat, pif, scr, and the list goes on...
I am nabbing the actual attachment that is the virus at the firewall
level, however the email itself is st
Title: Message
LOL
thanks...I am getting some help offlist
Duh
Didnt
even think that posting it here would be pretty much like sharing secrets with
the entire world!
Sharyn
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete McNeil
Title: Message
I have
just recently started using a URL filter list which I update every morning when
I see what has made it past uncaught.
This
is working great!
This
one, however, I'm stumped because I don't see any sort of URL to even add to the
list.
I am unsure what the best way
Title: ImageFX Kill List
Morning,
I know this was sorta mentioned briefly a few weeks ago but I don't think we ever heard from Tom.
Is this file not being updated anymore?
Thanks,
Sharyn
Title: A little irony here
Just thought I'd share with you all a little Wednesday morning irony.
This spam email, for spam software, got held, as spam.
Somewhere there is a statement to be made.
09/24/2003 08:01:35 Q87911a9e00da3ef2 SPAMCOP:7 BADHEADERS:8 SPAMHEADERS:3 URLfilter:3 .
Yes, a test will still count towards the weight even if there is no
action
defined for it.
-Scott
Great..thanks!
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at
Title: Action vs weight
If I have a test in my global.cfg, say the easynet-proxies, and the weight is 7, but in my default junkmail file, I don't put any action associated with the test (such as WARN), will the weight still be counted in for the test, or will it be totally ignored?
The reaso
Not to feed the spammers again by asking this, but is there a repository
of blacklists out there somewhere? Anyone willing to share?
I use the pre-made blacklist file (Kill List) from ImageFx as I don't
have a lot of spare time to do my own configurations. Good job, guys, by
the way! :)
http
Have you checked to see if the W2K DNS is passing both tests?
Yeah, it is now, I stopped and restarted the DNS service.
Love it when things just quit working for no reason..job security.
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "
The other possible reason is that your DNS server (24.73.160.163) is
returning the "server failure" error message. If so, you'll need to
check
it out to see what the problem is. It could be that it no longer has
Internet connectivity, for example.
I stopped and restarted the DNS service a
It appears that the DNS server is not responding.
Whos is it?
It's MINE!
But I have verified internet connectivity, mail is going out, mail is
coming in, I can resolve websites, I can send and receive mail from that
machine. Mailserver and DNS server are the same box. I have checked the
window
One is that the remote DNS server (the one at oasisfoodsco.com) is
returning an error message
I am seeing this error for almost every email that JM is processing so I
don't think it's on the remote server end.
The other possible reason is that your DNS server (24.73.160.163) is
returning the
Title: Message
I have
since REM'd out the tests I added but I am now getting this warning on almost
every email being processed by JM.
This
just started happening a few hours ago.
I did
a search in the archives and saw this topic addressed but I don't see a
solution.
Would
stopping a
Title: Error in JM log
I am all of a sudden seeing a ton of these errors in my JM log.
WARNING: DNS server 24.73.160.163 returned a SERVER FAILURE error for MX or A for oasisfoodsco.com.
Not just for the above domain, but for a lot.
The only thing I have done in the last hour is added t
Title: Message
Thanks.
The
basic ins and outs will do.
Please
email it to me offlist, don't wanna get hollered at!
Sharyn
([EMAIL PROTECTED])
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of IS - Systems Eng. (Karl Drugge)Sent: Tuesday,
Title: JM log analyzer
Good morning,
I know a lot of you use some of the JM log analyzer tools that are listed on the Declude site.
I am unsure which one is best suited to our needs.
I am looking for something which will parse the JM logs, tell me how many emails have been processed and
Sharyn, I am a little surprised. You usually keep up on things.
Guess you have not seen any of the posts regarding OSRelay in the last 2
weeks?
No, sorry everyone.
I have been SWAMPED here with projects other than mail administration
and most of the time I am lucky if I read mail that pertain
Title: Log message
I am seeing these in my logs…
Msg failed OSRELAY (Please stop using relays.osirusoft.com)
Should I comment out that test?
Sharyn
Title: Best practice for new config file
Good morning,
Up until now, when a new release of Declude comes out, I have just been upgrading the .exe file and not downloading the config file, due to lack of time to devote to the re-configuration.
Lately, my old settings aren't working as well
>>WARNING: DNS server 24.73.160.163 (this is my dns server) returned a
>>SERVER FAILURE error for MX or A for ancosmtp.
>
>If you check the archives from yesterday, you'll find out. :)
> -Scott
>
Sorry..didn't realize this was from yesterday :)
I did just look at
Scott,
I'm sorry if this has been addressed before but perhaps you can tell me
quickly what this means in the junkmail log?
WARNING: DNS server 24.73.160.163 (this is my dns server) returned a
SERVER FAILURE error for MX or A for ancosmtp.
Thanks,
Sharyn
We are the worldwide producer and mark
When the next official release comes out, and this whitelist.txt file
isn't beta anymore, does this mean the "old" way of doing it won't work
anymore?
In other words, am I going to have to take all my whitelisted addresses
and create a whitelist.txt file?
TIA,
Sharyn
We are the worldwide produ
I don't know about popularity, but I'd use the SPAM database lookup tool
at
http://www.dnsstuff.com/
That's perfect..that's exactly what I was looking for!
Thanks!
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at t
Hi,
I'm trying to see if a certain IP address is listed in any of the
Orbz-like spam databases.
What, in everyone's opinion, is the most common one used?
TIA
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at the annu
The next version will (finally!) display a warning if the diagnostics
are
run from the wrong directory.
-Scott
Whew!
Then I don't have to get a new server after all.
Thanks!
Sharyn :)
We are the worldwide producer and marketer of the award winning Cruzan
Single
That is why it is important to change to the directory where declude.exe
is, \imail, before running that to get a true accurate check.
OK,
I need a new mail server then.
My server forgot to tell me I was running the diags from the declude
directory, NOT the IMAIL directory.
Sheesh
Dumb serve
ch is 4237.
Why would running the -diag trigger that message? I just ran the -diag
again to confirm and sure enough, here is the message again.
The diag information itself, looks fine.
Thanks in advance!
Sharyn Schmidt
Network Administrator
Florida Distillers Company
(863) 956-1116 x221
Statistically it should not happen often,
but it can happen occasionally. The longer the string you search on,
the
less likely it will happen.
-Scott
Thanks, Scott. This is the very first time something like this has
happened so I'm not going to worry about it.
Good morning and tgif!
I have made a custom filter that I've named pornfilter. In my global
config, it looks like this:
PORNFILTER FILTER D:\IMAIL\Declude\filterlist.txt x 1 0
In the filterlist.txt file, I only have one entry:
BODY 0 CONTAINS F * C K (no spaces, no *, pardon the french)
The ac
Morning,
I'm contemplating upgrading my IMAIL installation from 6.05 to 7.13
Anything special need to be done with Declude before or after the
upgrade?(I'm running Junkmail and Virus)
TIA,
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged
Analytically correct
George
Thanks again everyone! You all are great!
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at the annual
San Francisco Wine and Spirits Championships. For
more information, please click
question on this filtering..
If I add the following line in myfilter.txt..
Body 0 Contains anal
This will cause any email with the word "analysis" in it to receive
whatever action I've given the test. Correct?
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Sin
<<>>
Yep, thanks, working on it now!
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) http://www.cruzanrums.com";>
Tom,
Your kill file is worth its weight in gold!
Thanks!
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) http://www
Good morning :)
One of my users is receiving some really disgusting porn email.
The logs show that the sender is actually using HER address as the
return address. Here is a snip from the IMAIL log:
09:23 23:13 SMTPD(29B2013E) [200.231.59.131] HELO aleph.inbrac.com.br
09:23 23:13 SMTPD(29B2013
Morning everyone,
Because all is going so well, I decided I'd screw with things a bit more
:)
I have just downloaded Tom's Image FX kill list and I'm looking through
it.
What I don't understand is, what is the difference between these 2
entries:
@example.com and .example.com
(obviously the d
>Can I put this same line [%WEIGHT%-%TESTSFAILED%-%QUEUENAME%]in the
>spamattach.eml on the tests failed line?
Yes, that would work fine.
-Scott
Without the brackets, I'm assuming, looking at the syntax of the
default.
Right?
Sharyn
We are the worldwide producer an
I am testing the attach function using the default spamattach.eml.
Can I customize this? For example, in the tests failed line, I would
like a bit more information than what is given.
When I was using the SUBJECT action, I had the following variables
included so I could see exactly what was hap
Morning,
In my global config file, I added a weight16 test.
In my $default$.junkmail file, for the entire domain, I set the weight16
test to have a HOLD action.
I have some test users that have their own user.junkmail file that I
have been experimenting with.
I never added the weight16 HOLD a
Any idea when the latest beta becomes official? :)
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at the annual
San Francisco Wine and Spirits Championships, and the
artisan tequilas of Porfidio 100% Agave Tequilas
One possibility might be to use the ROUTETO action in the latest beta
for
the WEIGHT20 test (all the spam would end up getting sent to a mailbox
file), while the WEIGHT16 test could use the HOLD action. That way, all
the held E-mail would be the E-mail failing the WEIGHT16 test.
through all the email with weight 20 and up, just the ones
with weight 16 to 19. I can't really think of a logical way to do this,
since, by default, anything failing weight16 is going to also fail
weight20, but perhaps you junkmail guru's out there have figured out a
way to do this.
T
>
I've been using JunkMail for about a week now. What I discovered was the
weight20 caught a ton of spam and no legit email.
So, the way I have mine set up, at least for now, is I send everything that
fails the weight20 test to the spam folder (HOLD action) and I asked several
of my us
someone's email has been quarantined.)
At the moment, I am manually checking every so often to make sure
nothing legit has been put in the spam folder, but it would be nice if I
received an email telling me that something had been sent there.
Thanks in advance,
Sharyn Schmidt
Network Speci
Scott! Another GREAT product! Can't wait to see what I can do
with this after I'm done testing and tweaking!
Sharyn Schmidt
Network Specialist
Florida Distillers Company
(863) 956-1116 x221
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Ru
the text for the custom subject
message go, and what is the syntax, as in, does it get quotes,
brackets,etc.
Thanks in advance!
Sharyn Schmidt
Network Specialist
Florida Distillers Company
(863) 956-1116 x221
We are the worldwide producer and marketer of the award winning Cruzan
Single
Declude to
perform, or are they all done by default?
Thanks!
Sharyn Schmidt
Network Specialist
Florida Distillers Company
(863) 956-1116 x139
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at the annual
San Fran
101 - 186 of 186 matches
Mail list logo
