RE: [Declude.JunkMail] WAY OT: FTP 'Default Directory
Dave, Others will likely have a better procedure but we set up a "virtual" directory in IIS Manager to direct the user to the root of their site. Open IIS Manager right-click on the FTP site and select New Virtual Directory. We give it the users login name. The path is website directory\website name. This will direct the user to the root of the site when they log in with IE or an FTP client. JR From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave DohertySent: Sunday, April 23, 2006 3:11 PMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] WAY OT: FTP 'Default" Directory Hi, y'all- I installed a new Windows 2000server yesterday, and today one of the customersemailed me that FTP lands him inside his directory structure and he can'tclimb up to the root. He uses IE as his FTP client. I checked the FTP setup for his site, and it is set up correctly to point to his root. So I tried it with WS_FTP, and sure enough, you get into a directory called "Default". With WS_FTP you can climb up one level to the root. With IE, you cannot. (The "up"buton on IEgives you the previous page visited.) Thinking that the directory name "Default" might be the culprit, I renamed it. Sure enough, IE and WS_FTP behaved normally. So it looks like the server is routing FTP requests on its own to this directory if it exists. I searched for documentation on this, and found nothing anywhere. Probably didn't look in the right place, but out of curiosity, have any of you seen this one before? -Dave Doherty Skywaves, Inc.
RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User
Marc, You have to add the DWORD key (MaxInvalidRCPTsPerSession) to HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SMTPD32\Parameters We use a value of 2. JR -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno Sent: Monday, March 27, 2006 10:36 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] [OT] Drop Connection On First Invalid User I don't have the key referred to in the KB article. I even did a search through my reg for MaxInvalid in case I was looking in the wrong place and got nothing. I am running 8.22 with Declude. Does the addition of Declude make a difference? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Greg Evanitsky Sent: Monday, March 27, 2006 9:00 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] [OT] Drop Connection On First Invalid User On Mar 26, 2006, at 2:22 PM, Goran Jovanovic wrote: How are you going to drop the SMTP connection on the first or second invalid recipient? In Imail. http://support.ipswitch.com/kb/IM-20050831-DM01.htm BTW, the support page says it works in 8.1+ but didn't for me. Upgraded to 8.22, works perfectly. Thanks, Greg Evanitsky ACS, Inc. (717) 248-2720 ext. 5113 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Insufficient system resources error
Yes! We have an existing case open with Ipswitch. They were supposed to call this past Tuesday with a resolution but we haven't heard anything as of today (6/3). Their developers were aware of the problem and have been trying to resolve it for us since May 30. JR Tatum -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Friday, June 03, 2005 2:13 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Insufficient system resources error Update: Since installing Imail 8.20 HF2 last Saturday, the problem so far has not reoccurred. Any one else still having this problem? John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] New ALL_LIST.DAT File?
Me three! JR Tatum mailto:[EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Friday, July 30, 2004 12:40 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] New ALL_LIST.DAT File? Joe, I can send you the instructions on how to set it up if you like. Thanks, Dan Geiser [EMAIL PROTECTED] - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, July 30, 2004 12:24 PM Subject: Re: [Declude.JunkMail] New ALL_LIST.DAT File? Maybe I'm way behind here, but what is the all_list.dat file? It is used by the experimental geolocation system in Declude JunkMail Pro (which identifies the country(ies) the E-mail passed through based on the IP(s)). This then lets you have a header showing the list of countries, and filter based on them. For further details, you can search the archives for all_list or all_list.dat. -Scott --- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Acting as a gateway for domains on other servers
Thanks Dan, How timely - we are installing Imail this week as a gateway for an Exchange server. I appreciate your detailed instructions! Thank You, JR Tatum -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Friday, February 20, 2004 4:09 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Acting as a gateway for domains on other servers Hey, John, et.al., I allocated some time to try again to set it up and test it, to take advantage of your kind offer, and 'lo and behold this time it worked! Doh. Anyway for those who are interested here's my synopsis for using IMail to do spam filtering on external domains, i.e. domains not hosted by IMail. Here is the key KB article at Ipswitch... IMail - How to use IMail as SMTP Gateway for another e-mail server http://support.ipswitch.com/kb/IM-19980116-DM01.htm I broke it down into the following steps: - 1) Add the IP Address of the IMail server on the Destination Server 2) Add the IP Address of the Destination Server on the IMail Server 3) Modify the HOSTS File 4) Change the MX Record - If you read the KB article they actually describe the procedure in almost exactly the reverse of how I ordered it but I think mine is much better for avoiding any down time. In further detail, this is what I had to do to get everything working. - 1) Add the IP Address of the IMail server on the Destination Server The Destination Server is the server that the MX record would normally be pointing to if you weren't going to intercept the e-mail and scan for spam. In my case I was using a Microsoft Exchange Server, so I got on the Destination Server locally and ran Exchange System Manager. I then navigated to Servers - Server Name - Protocols - SMTP and selected the item Default SMTP Virtual Server. Right-click, choose Properties, select the Access tab, click the Relay button. Make sure the Only The List Below radio button is selected and then click Add and then type in the IP address of your IMail server. - - 2) Add the IP Address of the Destination Server on the IMail Server We are running IMail 6.06. I ran IMail Administrator and navigated down one level and selected the localhost branch. I clicked on the SMTP Security tab and verified the Relay mail for underneath Mail Relay Options was selected. I clicked on the Addresses button and clicked the Add button. I then entered the IP address of the Destination Server and clicked OK. Note: Once you are done you have to stop and start the SMTP server for the change to put into play by the IMail Server. - - 3) Modify the HOSTS file with Destination Server IP address and Domain Name We are running IMail 6.06 on a Windows 2000 server. I went to this directory, C:\WINNT\system32\drivers\etc, and located the file called hosts (no file extension). I open the hosts file with notepad and added a line with the format... Destination Server IP Address tab Domain Name - - 4) Change the MX Record On the DNS hosting server the MX record which currently points to the IP Address of the Destination Server to the IP Address of the IMail Server. Once the DNS propogates Internet-wide you should be all set. - At this point I sent a test message from my Hotmail account to a user on the test domain. In very short order the message was received at the Destination Server. To verify that it actually routed through the IMail server I viewed the whole message source and looked for the appropriate hops and there they were. Since Declude sees e-mail routed through IMail this way as outgoing mail, to actually start filtering spam you have to use Declude's domain-specific configuration by creating a directory called domain.com underneath your declude directory and then creating a $default$.junkmail file in the domain.com directory. So that's how I got IMail to act as a gateway for domains on other servers. Take Care, Dan Geiser [EMAIL PROTECTED] - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, February 19, 2004 4:37 PM Subject: RE: [Declude.JunkMail] Acting as a gateway for domains on other servers If it is not urgent, contact me off list and I can help. May take me some time to get back to you on it. John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Thursday, February 19, 2004 12:42 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Acting as a gateway for domains on other servers Hello, All, I've never been able to get the Store and Forward capability of IMail to work so I could relay mail and scan external domains. Is there anyone who has this setup who would be willing to lend me a hand? TIA, Dan Geiser [EMAIL PROTECTED] I know this works for Declude virus but will this work for filter spam too? I would suspect that it does but I
RE: [Declude.JunkMail] GIBBERISH test adjustment
Title: Message Hello Matthew, Probably should have sent this off-list but I just want you to know how much we appreciate the work you share with the group. Your filters have helped reduce our spam significantly. I know how often we seem to complain when things don't go right but how infrequently we share praise when someone is willing to contribute their knowledge and expertise. Thanks from all of us!!! JR -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matthew BrambleSent: Wednesday, October 08, 2003 1:16 PMTo: [EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] GIBBERISH test adjustment Fred,If you don't mind a short delay, I just finished the design on my new site in which I am planning on placing this stuff. Given a little bit of additional time to populate the pages in question and clean up the files, I'll have this ready to download shortly. If you have the most recent version that I shared with the group back on August 17th, it contains exceptions for the majority of FP's, with the remaining things only being stragglers. Unfortunately this type of filter is always going to have FP's, so there is a reasonable limit to how much work goes into counterbalances.If anyone has any more counterbalances to suggest, now would be a wonderful time so that I can get them into the file.Thanks,MattFrederick Samarelli wrote: Matt can I take a look at an updated version of you files. Fred - Original Message - From: "Matthew Bramble" [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 08, 2003 11:48 AM Subject: Re: [Declude.JunkMail] GIBBERISH test adjustment I'll add these to the list that I maintain as well for both the ANTIGIBBERISHSUB and ANTIGIBBERISH filters. You shouldn't need to add these to the base filters though since the two letter string will trip it without any assistance. I took note of your "parts" suggestion as well, but haven't yet determined how I would like to integrate this. I've got about a month of hits archived though for easy searching, and I have seen some FP's on this, but only from one place if I recall correctly. I wonder how consistent the exception would be. I'm going to put up a new file that contains these changes as well as exceptions for "qos", "qmail" and a few updates for mail clients that might send out such a string that isn't marked as base64. Thanks, Matt John Tolmachoff (Lists) wrote: I have added the following line to both GIBBERISH and ANTIGIBBERISH tests: BODY 0 CONTAINS QS-9000 BODY 0 CONTAINS QS9000 BODY 0 CONTAINS QS 9000 This is in response to messages that mention certifications, specifically the Q_S_ (-)9000 automotive certification. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- === Matthew S. Bramble President and Technical Coordinator iGaia Incorporated, Operator of NYcars.com --- Office Phone: (518) 862-9042 Cellular: (518) 229-3375 Fax: (518) 862-9044 E-mail: [EMAIL PROTECTED] or [EMAIL PROTECTED] ===
RE: [Declude.JunkMail] Report System
Darrell, Please add us to the list. We would be most grateful for your reporting software. Thank You, JR Tatum, President Performance Dimensions, Inc. (336) 774-1849 mailto:[EMAIL PROTECTED] http://www.triadnetwork.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell LaRock Sent: Thursday, July 31, 2003 5:06 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Report System Terry, I used delog for awhile, but I needed several other features that did not come with delog. So I developed an application that had all of the features that I needed. Below is a sample report that I generated(tab format). The reports can be in tab, csv, or html format and you have the ability to email them as well. There are many other things that dlanalyzer can report on. You can get reports on domains, users, tests, and different reporting periods. The combinations are endless. Right now I am finishing up database support and a few other miscellaneous features I wanted to add in.. If you would like to try it out let me know and I will make it available.. Darrell Start Time: 6/1/2003 12:00:00 AM End Time: 6/2/2003 12:00:00 AM Total Messages: 25935 Messages That Failed: 18252 Spam Percentage: 70.38% TEST# FAILEDPercentage BADHEADERS 373514.40% BASE64 12034.64% BLACKLIST 13255.11% COMMENTS668 2.58% DECREASEIPWGHT 40 0.15% DECREASEWEIGHT 557 2.15% DECREASEWEIGHTLOW 313 1.21% DSBL380714.68% DSN 12154.68% EASYNET-DNSBL 741828.60% FXBLACKLIST 25749.92% HELOBOGUS 477618.42% HEUR10 289911.18% IPBLACKLIST 5 0.02% MAILFROM385 1.48% NJABL 408 1.57% NOABUSE 334112.88% NONENGLISH 214 0.83% NOPOSTMASTER402015.50% OLDEMPLOYEE 29 0.11% ORDB261 1.01% OSDUL 113 0.44% OSLIST 2 0.01% OSRELAY 343 1.32% OSSOFT 326512.59% OSSRC 330812.75% POSTMASTER 12 0.05% REVDNS 423116.31% ROUTING 14875.73% SNIFFER 328512.67% SNIFFERAV 12 0.05% SNIFFERCASINO 159 0.61% SNIFFERDEBT 815 3.14% SNIFFEREXP 269 1.04% SNIFFERGETRICH 630 2.43% SNIFFERGREY 421 1.62% SNIFFERINK 196 0.76% SNIFFERINSURAN 58 0.22% SNIFFEROBFUS350 1.35% SNIFFERPHARM17276.66% SNIFFERPORN 16306.28% SNIFFERSCAM 1 0.00% SNIFFERSPAMWAR 127 0.49% SNIFFERTHEFT138 0.53% SNIFFERTRAVEL 438 1.69% SPAMCOP 417216.09% SPAMHEADERS 416016.04% WEIGHT1010482 40.42% WEIGHT5 769 2.97% WORDFILTER 782630.18% -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Terry Parks Sent: Thursday, July 31, 2003 2:26 PM To: Declude. JunkMail Subject: [Declude.JunkMail] Report System While it's quiet I'd like to know which system is best at reporting status of the email system in terms of most messages sent from/delivered to address, etc. I need a good summary reporting system that will email me these results. I've tried delog but the email feature doesn't work. Terry --- [This E-mail scanned for viruses by Surfside Internet] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Best Practices question
Looks like a script we would like to use Karl, thanks for the offer to share. Thank You, JR Tatum, President Performance Dimensions, Inc. (336) 774-1849 mailto:[EMAIL PROTECTED] http://www.triadnetwork.com * This message and any included attachments are from PERFORMANCE DIMENSIONS, INC. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail. * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng. (Karl Drugge) Sent: Thursday, July 17, 2003 10:55 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Best Practices question Not to bash Scott, who is the freaking GOD of SMTP traffic.. but EEWWW.. yuck. FIND will work, but I'd have to wash my hands afterwards. My computer is supposed to do my work FOR me, on a daily basis, and mail me my checks at home ! ( I wish ! )... Just write up a quick PERL/WSH/Shell script to parse the info, then schedule it with AT to run whenever you want. I wrote mine up a few weeks ago. If people want I'll post it. It's in PERL, so you'll need active PERL installed, and you might need to tweak it for your local settings. It's not as clean as Scott or another professional programmer might make it, but it's quick, dirty, and gets the job done. Here's a sample of what mine does ( on a pretty slow day for SPAM ): Total number of messages 665 Total Passed, including whitelisted, 523,percentage : 78.6 Total HELD 21, percentage : 3.2 Total BOUNCED 121,percentage : 18.2 Total of Whitelisted 218 Total of SPAMCOP 25 Total of NOABUSE 66 Total of NOPOSTMASTER58 Total of BADHEADERS 38 Total of BASE64 1 Total of HELOBOGUS 99 Total of MAILFROM1 Total of PERCENT 0 Total of REVDNS2 34 Total of ROUTING 13 Total of SPAMHEADERS 40 Total of FILTERWORDS 248 Total of BLACKLIST 34 Total of REVDNSPROBLEM 77 Total of IPBlacklist 31 Karl Drugge, Systems Network Engineer -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Thursday, July 17, 2003 10:21 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Best Practices question How can I determine the amount of caught/received emails with JunkMail? It would take me an eternity to go through each log file. There are several ways that you can do this. For example, you can do a directory of the \IMail\spool\spam directory, where the held E-mails are. To find out how many are to you, you can use find with the /C switch. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] X-Declude-Sender Missing from Header
Scott, These are our configuration settings: #XINHEADER X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. XINHEADER X-Note: Total spam weight of this E-mail is %WEIGHT%. #XINHEADER X-Spam-Tests-Failed: %TESTSFAILED% [%WEIGHT%] #XINHEADER X-Country-Chain: %COUNTRYCHAIN% #XOUTHEADER X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. XSENDER ON XSPOOLNAME ON XINHEADER X-Note: This E-mail was sent from %REVDNS% ([%REMOTEIP%]). #XOUTHEADER Organization: Performance Dimensions, Inc. #IPBYPASS 127.0.0.1 Thank You, JR Tatum, President Performance Dimensions, Inc. (336) 774-1849 mailto:[EMAIL PROTECTED] http://www.triadnetwork.com * This message and any included attachments are from PERFORMANCE DIMENSIONS, INC. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail. * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, July 09, 2003 2:13 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] X-Declude-Sender Missing from Header We are seeing several spam emails delivered to our clients which are apparently able to bypass JMPro filters as there is no X-Declude-Sender line in the header. Can anyone explain why it is missing (see sample header below)? X-RBL-Warning: EASYNET-DNSBL: Blacklisted by easynet.nl DNSBL - http://blackholes.easynet.nl/errors.html X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [420e]. Declude JunkMail definitely scanned this E-mail. Are you using the XSENDER ON option, or are you using your own XINHEADER/XOUTHEADER option to produce the X-Declude-Sender: header? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] X-Declude-Sender Missing from Header
So far we are getting reports from only a single user. A quick review of the current spool shows no email without the X-Declude-Sender line. There are no gp1 or gp2 files on the server. Do you think it is some setting in the user's mail client (Outlook 2002) which is stripping out some of the info? Thank You, JR Tatum, President Performance Dimensions, Inc. (336) 774-1849 mailto:[EMAIL PROTECTED] http://www.triadnetwork.com * This message and any included attachments are from PERFORMANCE DIMENSIONS, INC. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail. * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, July 10, 2003 11:48 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] X-Declude-Sender Missing from Header These are our configuration settings: XSENDER ON That should cause the X-Declude-Sender: header to appear in the headers of all E-mails. Have you checked to see if there are any C:\Declude.gp1 or C:\Declude.gp2 files? Is there any pattern to the E-mails without that header (all happening to the same recipient, for example)? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] X-Declude-Sender Missing from Header
Scott, We use the default XSENDER ON option in the Global.cfg file. The weird thing is that 98% of our email headers do have the X-DECLUDE-SENDER line listed properly. Thank You, JR Tatum, President Performance Dimensions, Inc. (336) 774-1849 mailto:[EMAIL PROTECTED] http://www.triadnetwork.com * This message and any included attachments are from PERFORMANCE DIMENSIONS, INC. and are intended only for the addressee(s). The information contained herein may include trade secrets or privileged or otherwise confidential information. Unauthorized review, forwarding, printing, copying, distributing, or using such information is strictly prohibited and may be unlawful. If you received this message in error, or have reason to believe you are not authorized to receive it, please promptly delete this message and notify the sender by e-mail. * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Wednesday, July 09, 2003 2:13 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] X-Declude-Sender Missing from Header We are seeing several spam emails delivered to our clients which are apparently able to bypass JMPro filters as there is no X-Declude-Sender line in the header. Can anyone explain why it is missing (see sample header below)? X-RBL-Warning: EASYNET-DNSBL: Blacklisted by easynet.nl DNSBL - http://blackholes.easynet.nl/errors.html X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam [420e]. Declude JunkMail definitely scanned this E-mail. Are you using the XSENDER ON option, or are you using your own XINHEADER/XOUTHEADER option to produce the X-Declude-Sender: header? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
