Hello,
Was wondering if there was a way to have a per-domain virus.cfg.
The reason I ask is that I have BANEXT lnk in the virus.cfg (which I
recently added). Today a client responded saying he distributes McAfee
Enterprise anti-virus updates via email using a shortcut (*.lnk) as the
] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Jeff Maze - Hostmaster
Sent: Thursday, April 29, 2004 7:02 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Per-Domain Virus.CFG?
Hello,
Was wondering if there was a way to have a per-domain virus.cfg.
The reason I ask is that I have
Hello,
Can IP addresses in conjunction with e-mail addresses (or domain
names) be added to a Whitelists.txt file within a per-domain configuration?
Thanks.. -Jeff
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the
Ok thanks..
And to just re-verify something, if the whitelist.txt file is in the domain
folder (per-domain config), the GLOBAL.CFG is skipped and the whitelist.txt
file is used instead for whitelisting e-mail addresses. Or are they used in
conjunction with each other?
-Original Message-
Ooops.. Sorry about that.. I meant to say $default$.junkmail file..
Just trying to get a domain configured correct in a per-domain config with
the whitelist.txt file (having problems and hearing about it from the
client).
So, if there is a whiltelistip entry in the $default$.junkmail file and
Hello,
Had a client forward me an e-mail that failed the SPAMDOMAIN test
(along with a couple others).
Below are the internet headers of the SPAMDOMAINs failure (I can
post the full inet headers if desired):
X-RBL-Warning: SPAMDOMAINS: Spamdomain 'att.net' found: Address of
[EMAIL
Hello,
Just a quick question about this option. In the domain that has a
separate configuration file, I would edit the $default$.junkmail file and
add the following line, correct?
WHITELISTFILE c:\imail\declude\domain.com\whitelist.txt
And then put in the e-mail addresses or
Thanks.. That works..
One quick question.. If that entry is in for the per-domain
$default$.junkmail file, I assume it will not use the main
$default$.junkmail file within the main declude sub-folder for whitelists,
correct? Or do they work in tandum.
-Original Message-
From: [EMAIL
Hello,
I got this message in one of my main accounts. It first came
through our sec mail server, but then nothing appears to have been flagged
by Declude. Weird thing is, I'm running SPAMDOMAINS. So shouldn't this
message have failed at least SPAMDOMAINS?
I have IPBYPASS
Ok.. Thanks.. I'll have to look into this more..
Sorry to be a pain, but most of the messages that got through (14 of them
between 12am and 5am) last night were caused by this problem. Thanks
again..
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R.
Hello,
Yeah, I too have notice A LOT of spam originating from ComCast
networks lately.
You could implement SPAMDOMAINS that would check the from and
where the message came from to add weight to the message. Seems to work
well when you don't get DNS timeouts (which I have been
Hello,
I was wondering what exactly the CMDSPACE test is. I wasn't able to
find anything about it in the Junkmail manual..
Thanks.. -Jeff
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing
Yeah, I got sick of modifying my setups for others mistakes.. I've just
ended up forwarding them the message with the internet headers telling them
what the problem is, how to fix it, and that messages from them will be
blocked/reviewed until the problems are fixed.. Haven't gotten any
Just a question.. The message below (internet headers listed only) got
through and only failed on the CMDSPACE test.. But one of the X-Notes
states the there was a timeout looking up the IP address (it's
24-51-32-177.kntnny.adelphia.net)..
Anyway, I was wondering if there was a test could be
.
I will send you a spamdomains file tomorrow.
Todd Hunter
Smart Mail
- Original Message -
From: Jeff Maze - Hostmaster [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 16, 2004 11:15 AM
Subject: RE: [Declude.JunkMail] Spamdomains.txt file
Anyone?
-Original Message
Hello,
I was wondering if it's possible with the standard version to create
a Global.cfg file or that type of file (whitelist and other configs) for
separate domains (like the $default$.junkmail file).. Thanks..
---
[This E-mail was scanned for viruses by Declude Virus
Spamdomains and
there
are
not
a lot of FPs.
I will send you a spamdomains file tomorrow.
Todd Hunter
Smart Mail
- Original Message -
From: Jeff Maze - Hostmaster [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 16, 2004 11:15 AM
Subject: RE
Here's the spamdomains.txt file I received off-list (for our setup, I left
out the outblaze domains).. Don't forget to add the needed entries to the
Global.cfg file and the $default$.junkmail files (see below)..
Global.cfg
_
SPAMDOMAINS
Hello,
I got a message that was from [EMAIL PROTECTED] but came from
RoadRunners networks. There isn't a netscape entry in my SPAMDOMAINS.TXT
file. I was just wondering what I would enter to make it so.
I did a NSLOOKUP on netscape.com and the MX record points to
domain for netscape.com separate from the customer business
as netscape.net ...
Andrew 8)
-Original Message-
From: Jeff Maze - Hostmaster [mailto:[EMAIL PROTECTED]
Sent: Monday, April 19, 2004 11:07 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] SPAMDOMAINS - Netscape.com
Hello
Hello,
I think I'm going to implement the spam domains tests. Anyone have
a file they would like to share that works well for them?
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
Anyone?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze -
Hostmaster
Sent: Friday, April 16, 2004 8:26 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Spamdomains.txt file
Hello,
I think I'm going to implement the spam domains
One other thing.. If there are changes made to the ipfile.txt file, does the
SMTP server need to be restarted for Declude to see and use these changes?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Thursday, April 15, 2004 1:22 PM
Hello,
Was just wondering what this file was? I missed a few days and didn't
see anything in the archives.. Thanks..
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send
Hello,
I'm also updating my Global.CFG file and noticed something new.
What is WHITELIST AUTH? I checked the online manual, but there's nothing
listed for it. There's an entry for WHITELIST HABEAS, but not AUTH.
Thanks..
---
[This E-mail was scanned for viruses by Declude Virus
Hello,
I accidentally overwrote my ipfile.txt test when I upgraded my
Declude config files (global.cfg $default$.junkmail). Just wanted to make
sure I get this right (would like to add this as well even though the
latest-greatest global.cfg file is catching A LOT of spam).
In the
of the server when sending an email (so you can
relay while off the local network) - since you're an authenticated
user, you can choose to whitelist any emails from that particular session.
Mike
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze
Haven't received messages from here nor Declude.Virus since Friday.. Just
doing a test..
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED],
And this only works in the Pro version, correct?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, March 24, 2004 2:26 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Subject Line FIlter
Scott... Am I correct that
One problem we've recently had is that a mail server we were trying to send
messages to would die intermittently.. Came to discover there were filters
on their router that when a certain incident happened, it blocked
everything from that computer IP for 4 hours.. Maybe this is something
you'd
Hello,
Anyone know what lately (the last week or so) we've been getting a
lot of message building up in queue with as the from address (according
to the queue) and a to address listed as domains and other listings
different that what we host.
Any clues or iMail configuration
Hello,
One of our clients has been forwarding e-mails that have made it
through the cracks and found something interesting.
I have our network whitelisted, and have the secdns entry so that it
checks the ip of the originating server when it comes through the sec mail
server. But
Yeah, really.. 2,000 IP's, dedicated network for one $2,000 a month.. Uh,
yeah right.. And the providers profit on that? hahahaha
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jonathan
Sent: Wednesday, November 12, 2003 6:36 PM
To: [EMAIL PROTECTED]
Hello,
I have a client that is concerned because every message he sends
out, Deculde states that it's failing the IPNOTINMX test. He's used
dnsreport on his domain and replied to me with this line:
Messages I send out are failing IPNOTINMX spam test. This is report from
DNSreport.com you
Hello,
I've recently discovered something interesting happening with my
laptop. Just a little FYI about it. I have all spam messages that fail the
Declude Tests forwarded to a [EMAIL PROTECTED] account, which I
download and review on my computer. I have NIS 2004 running on my laptop as
I have outlook setup so that any messages received from the separate e-mail
accounts (6 work e-mail accounts I look into), get automatically moved to
folders other than my Inbox. So the host master account gets forwarded to
the host master folder, spam to the spam folder, etc. Also, I have two
password in your outlook. Have it prompt you.
Much easier to stop these things when they cannot authenticate.
Stan Lyzak, BSEE, CISSP, MCSE², CCNA, Security+, A+
Network Security Engineer
ASysTech, Inc.
-Original Message-
From: Jeff Maze - Hostmaster [mailto:[EMAIL PROTECTED]
Sent: Tuesday
Where do you get Kill Web Mail? Does it come with iMail 8?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Frederick Samarelli
Sent: Thursday, October 16, 2003 3:01 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Imail/Web mail
I use Killer
http://news.com.com/2100-7344_3-5089977.html?tag=nefd_top
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
I know this is off-topic, but I've attempted numerous times to put our
server behind a firewall, but upon doing so, the queue grows to an enormous
proportion and the only way to clear it is to remove it from behind the
firewall.
Besides the normal ports 25, 110 and 80 (for web mail), do I also
Use the IPBYPASS %sec mx ip% feature within the GLOBAL.CFG file. It will
skip the ip address of your secondary mx record and run the check on the ip
address of the originating server.
IPBYPASSxxx.xxx.xxx.xxx
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
Yeah, I ran the test and we're also on the BLARSBL. Looked up the secondary
mail server and that too is on the list. Looks like he just blocked our
whole IP range.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, September
Title: Message
Anyone else getting messages such as this? I'm
getting them delivered into a number or different e-mail accounts. Could
this be the next thing thanks to SoBig?
-Original Message-From: Aron
[mailto:[EMAIL PROTECTED] Sent: Thursday, September 11, 2003
8:45 AMSubject:
Title: Message
The one thing I've been doing since the "invasion"
began was use our secondary mail server to block the IP's of infected
machines. Most of the infected messages seem to come through this machine
first. We're running Sendmail (with webmin interface; a lot easier to
admin a
Anyone else seeing e-mails such as these:I've received a number of these
and they're being caught by Declude as spam.. They also appear to be coming
from more than one place, including rr.com..
__
Subject: How you been?
Why hello ;)
Whats been happening
So what are y'all beginning to use instead of the OSRELAY tests?
I was using this and one of the other OS tests. Even though I still had 350
messages in my spam account this morning, I would like another test to
replace these.
---
[This E-mail was scanned for viruses by Declude Virus
Yeah, I've had a number of people calling saying they can receive messages
from our server, but get server time-outs when trying to send messages.
Trying to talk to these non-IT type people is a pain.
Trying to explain to them that it's not our server, but their internet
provider and to call them
Maybe start using the BLACKLIST option. I've been doing that for a little
while, and it seems to cut back on a lot of spam. I have them setup with a
20 weight and a ROUTETO my spam account so I can review and see if they're
legit or not..
---
[This E-mail was scanned for viruses by Declude
Anyone have one handy that might assist me? Hahaha
Thanks.. Jeff
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe
Add the following line to your global.cfg file:
BLACKLISTIP ipfile x:\IMail\Declude\ipfile.txt x 20
(edit the x:\IMail\Declude to the location of your IMail directory location)
And then put the attached file into your Declude directory..
I've built this list over the
Hello,
Was wondering if anyone knew what the Microsoft update it was that
caused the display of the IMail manager to be shifted and un-readable.
Dang new people installed it and now I can't edit any of the
entries, etc.
Thanks.. Jeff
---
[This E-mail was scanned for
PROTECTED] Behalf Of Jeff Maze -
Hostmaster
Sent: Thursday, July 17, 2003 10:05 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] OT: Imail v6 and Windows Update
Hello,
Was wondering if anyone knew what the Microsoft update it was that
caused the display of the IMail manager to be shifted
Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jeff Maze -
Hostmaster
Sent: Thursday, July 17, 2003 10:05 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] OT: Imail v6 and Windows Update
Hello,
Was wondering if anyone knew what the Microsoft update
?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jeff Maze -
Hostmaster
Sent: Thursday, July 17, 2003 10:05 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] OT: Imail v6 and Windows Update
Hello,
Was wondering if anyone knew what the Microsoft update
Title: Message
Thanks Denny.. Removal went well and everything is back to normal.. Good
to know that at least someone had gone through the same thing..
hahaha
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Denny JodeitSent: Thursday, July
http://www.driverheaven.net/index.php?action=views=6f6fd9a1c35681a95272ecec
6235161darticleid=3793
Copy and paste into web browser to read article..
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.
Hello,
I was wondering if there was a subject contains type of test.
E.g. A message subject line contains Viagra, kinky, xxx, sex, etc. it will
fail the tests.
Is there something like this already? Thanks..
---
[This E-mail was scanned for viruses by Declude Virus
Ahh, ok.. Thanks..
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Smart Business
Lists
Sent: Tuesday, July 01, 2003 8:29 AM
To: Jeff Maze - Hostmaster
Subject: Re: [Declude.JunkMail] Subject Contains test
Jeff,
Tuesday, July 1, 2003 you wrote:
JMH I
I hope it's because of F-Prot! I noticed these too, but we have maybe 10 or
so right now. If anyone knows what they're for or if they can be deleted,
I'd be interested..
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Saturday, June
I'm sure there are a couple friends that you could contact on IRC and just
see how HACKER-PROOF their system truly are. hahaha
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sean Fahey
Sent: Friday, June 06, 2003 9:25 AM
To: [EMAIL PROTECTED]
Subject:
Hello,
I put something on this mailing list earlier about spam messages
being forwarded automatically from our secondary mail server because the
local subnet is white listed. You said to add the IPBYPASS line with the IP
address of the secondary mail server, and Declude would then run the
Hello,
I created this file and put a new test line in the global.cfg, but
have a question. There was a whole class-c bank of porn ad spam mailers
that I wish to block. Instead of putting in every IP address, can I just
put this entry in the IPFILE.TXT file? xxx.xxx.xxx.xxx/24
Wow.. It maybe time to upgrade the server to dual Xeon 3Ghz 533's..
Moving iMail from one machine to another really isn't that hard.. I had to
upgrade our server.. The directions Ipswitch provides on their knowledge
base is very helpful..
-Original Message-
From: [EMAIL PROTECTED]
63 matches
Mail list logo
