[Declude.JunkMail] Global.cfg lines for SPF

2005-11-21 Thread Brad Morgan
9 0 SPFPASS spfpass x x 0 0 What would the answer be for 3.0.5.20? Regards, Brad Morgan IT Manager Horizon Interactive Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type

RE: [Declude.JunkMail] ANOTHER message Declude didn't delete.

2005-06-02 Thread Brad Morgan
Check your log files to see what config file is being used. I had a similar problem because I updated $default$.junkmail but failed to update all of the per domain / per user .junkmail files, my own in particular! Regards, Brad Morgan IT Manager Horizon Interactive Inc. --- This E-mail came

[Declude.JunkMail] SPFFAIL not failing since upgrade to 2.0.6

2005-05-11 Thread Brad Morgan
flagged by Declude. Is it something simple like I haven't got Declude configured properly? Regards, Brad Morgan IT Manager Horizon Interactive Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

RE: [Declude.JunkMail] SPFFAIL not failing since upgrade to 2.0.6

2005-05-11 Thread Brad Morgan
Here's what I have in the config files: global.cfg:SPFFAILspffail x x 9 0 global.cfg:SPFPASSspfpass x x 0 0 These lines should be: SPFFAIL spf failx 9 0

RE: [Declude.JunkMail] SPF record

2004-12-10 Thread Brad Morgan
users. I just added an internal SPF text record to that DNS server. If all of your internal users use AUTH or you whitelist your internal IP addresses, then the SPF failure is just an annoyance. Regards, Brad Morgan IT Manager Horizon Interactive Inc. --- [This E-mail was scanned

RE: [Declude.JunkMail] Somewhat OT question...

2004-10-22 Thread Brad Morgan
Does anyone know if there's a plug-in for Outlook that lets you easily see the SMTP header? We're doing massive re-tuning to our Declude Gateway system which sits in front of a 15,000 user Exchange system which moves about 420,000 messages through our 4 Declude inbound MX gateways a day.

RE: [Declude.JunkMail] OT - Copying 200,000 plus files

2004-10-20 Thread Brad Morgan
I can't remember but do TIFF files compress well? Might be worth it to ZIP them and copy that over. In this case that won't work. To zip them will require copying them over the USB 2.0 connection anyway and that appears to be the bottleneck. Using xcopy should be the most efficient, but

RE: [Declude.JunkMail] HijackReprocess v1.0.0

2004-10-14 Thread Brad Morgan
. Regards, Brad Morgan IT Manager Horizon Interactive Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

[Declude.JunkMail] OT: Changing the HELO string on an Exchange Server

2004-08-19 Thread Brad Morgan
solution to change the HELO string? If that's the right solution, how do you do it? We've been googling and searching microsoft.com without success. Thanks for your help, Brad Morgan IT Manager Horizon Interactive Inc. --- [This E-mail was scanned for viruses by Declude Virus (http

RE: [Declude.JunkMail] [OT] Microsoft to enforce Sender ID checks

2004-07-23 Thread Brad Morgan
? Regards, Brad Morgan IT Manager Horizon Interactive Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail

RE: [Declude.JunkMail] How can I rescan a message ?

2004-07-22 Thread Brad Morgan
JunkMail? Regards, Brad Morgan IT Manager Horizon Interactive Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe

RE: [Declude.JunkMail] How can I rescan a message ?

2004-07-22 Thread Brad Morgan
to perform. I need to hold some spam for testing). So I think the original question is still unanswered... How do you get a message rescanned by Declude Virus and/or Declude JunkMail? Regards, Brad Morgan IT Manager Horizon Interactive Inc. To answer my own question... I held some spam so I

RE: [Declude.JunkMail] How can I rescan a message ?

2004-07-22 Thread Brad Morgan
is still unanswered... How do you get a message rescanned by Declude Virus and/or Declude JunkMail? Regards, Brad Morgan IT Manager Horizon Interactive Inc. To answer my own question... I held some spam so I could perform experiment 2 with a spam message instead of a virus

RE: [Declude.JunkMail] Message header review

2004-07-22 Thread Brad Morgan
Earthlink has for some reason been forwarding spam through this server for some time. I'm not sure what the setup is, but it's a legitimate Earthlink server and the E-mail originates from a spam zombie. I have thought about IPBYPASS'ing this server in order to capture the real source,

[Declude.JunkMail] Spam now (should) fail tests, didn't when received.

2004-07-20 Thread Brad Morgan
the system and see if they get a different weight today? Regards, Brad Morgan IT Manager Horizon Interactive Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail

RE: [Declude.JunkMail] Spam now (should) fail tests, didn't when received.

2004-07-20 Thread Brad Morgan
Brad, several of the ip4r tests list whole subnets, and I've seen hits from IPs in that and similar subnets across the last week. More likely is that your DNS didn't respond in time when Declude inspected this particular message. Andrew. Andrew, I was able to grovel around on SPAMCOP's

[Declude.JunkMail] Getting rid of old Declude JunkMail headers

2004-07-19 Thread Brad Morgan
that no longer applies. Does anyone have a suggestion on how to avoid this problem? I'd like to see Declude have an option to strip the old headers before it adds new ones if that's possible. Regards, Brad Morgan IT Manager Horizon Interactive Inc. --- [This E-mail was scanned for viruses by Declude Virus

RE: [Declude.JunkMail] MTLDB observations

2004-07-16 Thread Brad Morgan
Here's what I've seen to date using a Perl script I've written to monitor the results. I'll leave the test active for a while longer but I've reduced the weight of the MTLDB test to 0. Unless the database gets cleaned up, I don't see this as a useable test. At the moment, hp.com, sun.com,

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

2004-07-12 Thread Brad Morgan
=-7]: MTLDB=WARN CATCHALLMAILS=IGNORE 07/12/2004 13:42 Last action = IGNORE. $ nslookup 63.246.13.90 Server: hi-cs-dc2.horizonint.corp Address: 192.168.1.4 Name:mail.declude.com Address: 63.246.13.90 Regards, Brad Morgan --- [This E-mail was scanned for viruses by Declude Virus (http

RE: [Declude.JunkMail] ASTA Proposal

2004-06-22 Thread Brad Morgan
(Linux, iptables based) to forward external port 587 traffic to internal port 25 (in addition to external port 25 to internal port 25)? Regards, Brad Morgan IT Manager Horizon Interactive Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came

[Declude.JunkMail] OT: A reasonable substitute for Declude Junkmail at home

2004-06-10 Thread Brad Morgan
are acceptable. Thanks, Brad Morgan IT Manager Horizon Interactive Inc. [EMAIL PROTECTED] 719-593-7377 x47 (Fax: 719-593-2996) --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E

RE: [Declude.JunkMail] Piecing together a Partial Vulnerability

2004-06-08 Thread Brad Morgan
Copy the D*.SMD and Q*.SMD files back to you IMail spool directory. It will be delivered on the next queue run. As I suspected, this is only half the battle. Now the user has a two part message and Outlook apparently doesn't know what to do with it. That is strange.

RE: [Declude.JunkMail] Upgrade Declude

2004-06-08 Thread Brad Morgan
Anyone know how I can find out what version of Declude we're running? Any suggestions as to what we should be running? -Please include information to contact Declude as well Run declude -diag in a command window. Declude.exe should be in the Declude sub-directory off of your main Imail

[Declude.JunkMail] Piecing together a Partial Vulnerability

2004-06-07 Thread Brad Morgan
One of my users was sent an email (a JPEG baby picture) which got split into two pieces before it got to my server. Declude Virus has quarantined it and I've examined it. How I pass it on? Also, how will my user put it back together? Thanks, Brad Morgan IT Manager Horizon Interactive Inc

RE: [Declude.JunkMail] Piecing together a Partial Vulnerability

2004-06-07 Thread Brad Morgan
Copy the D*.SMD and Q*.SMD files back to you IMail spool directory. It will be delivered on the next queue run. As I suspected, this is only half the battle. Now the user has a two part message and Outlook apparently doesn't know what to do with it. You might try SpamReview for an easy

RE: [Declude.JunkMail] Piecing together a Partial Vulnerability

2004-06-07 Thread Brad Morgan
Do you mean two mime segments, or two completely separate messages? Two mime segments should be handled by the mail client. I've never seen a case where a file got split into two messages, but others here may have. It arrived as two separate messages (which triggered the Declude Virus

RE: [Declude.JunkMail] Surbl.org

2004-04-13 Thread Brad Morgan
, especially since it is a realtime blocklist, but until then this filter will do just fine. Roger, Count me in! Regards, Brad Morgan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe

RE: [Declude.JunkMail] Google Gmail.com

2004-04-01 Thread Brad Morgan
I'll one-up you here...I've got every E-mail sent and received (minus a few large attachments) since 05/30/1996 on my PC thanks to Netscape :) Only one-up if you include the size G! Brad --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail

[Declude.JunkMail] HOP, HOPHIGH, or IPBYPASS?

2004-03-10 Thread Brad Morgan
two IPBYPASS lines be enough or do I have to change HOP and/or HOPHIGH as well? Thanks for your help. Regards, Brad Morgan From [EMAIL PROTECTED] Wed Mar 10 05:05:18 2004 Received: from epub-cs-fw.horizonint.com [192.86.5.1] by horizonint.com (SMTPD32-8.05) id A47D471E00BE; Wed, 10 Mar 2004 05