[Declude.JunkMail] WhiteListing Isses
We too are seeing a big jump in the number of spoofed senders hitting everyone who whitelists themselves in SmarterMail. Just about every messages is weighted heavy but the whitelist counteracts the effort. The answer is to tell the customers to remove themselves from their Trusted Senders list and or Address book. We also turned off PREWHITELIST to allow the weighting and adding a filter action that pulled those emails (HOLD) from the normal message flow thorugh the system. Maybe more important we are seeing a growing number of messages spoofing other users from the recipients domain. It is almost like they are mining associations from social networking or other online sources and using those connections to use the whitelist system to allow spam in. Anyone seeing the same thing? Anyone have a new stratgey for this type of attack? Mike J --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Header Munged in Body
Boy this list is so quiet compared to the old days. I have not seen this lately but we have a new customer who uses a script to send a status message to our SmarterMail/Declude setup which is forwarded to a Postfix server mailbox for final delivery. Only when it is forwarded do they see the XIN Added headers at the top of the body. As usual the case we need to prove we(Declude/SM) are not the source of the problem by finding the real source. Our past experience moves us to point the source of the problem is the script e-mail structure itself. Does anyone know of a test site to point their script e-mail to validate the structure of that e-mail? Thanks, Mike J --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] frustration
Our Declude setup has been a lifesaver. Without Declude we would be frustrated or out of business. You did not state your setup, iMail versus SmarterMail. Declude version?? Tests used? Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Yahoo Email Problems
We are seeing a few of the same messages in our logs. Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Help: Domain not found
Is the example the same as the original?? Malivision is misspelled, missing an i. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Monday, February 26, 2007 7:32 PM To: declude.junkmail@declude.com; Imail_Forum@list.ipswitch.com Subject: [Declude.JunkMail] Help: Domain not found I have a client having problems sending emails to some servers No thank you rejected: Domain not found DNSSTUFF shows no major problem with malivision.com Would appreciate any help to resolve this issue 20070226 183127 127.0.0.1 SMTP (276b023cf3f9) Trying mail.com (0) 20070226 183128 127.0.0.1 SMTP (276b023cf3f9) Connect mail.com [208.36.123.68:25] (1) 20070226 183130 127.0.0.1 SMTP (276b023cf3f9) 220 spf8.us4.outblaze.com ESMTP Postfix 20070226 183130 127.0.0.1 SMTP (276b023cf3f9) EHLO mail.cefib.com 20070226 183131 127.0.0.1 SMTP (276b023cf3f9) 250-spf8.us4.outblaze.com 20070226 183131 127.0.0.1 SMTP (276b023cf3f9) 250-PIPELINING 20070226 183131 127.0.0.1 SMTP (276b023cf3f9) 250-SIZE 1024 20070226 183131 127.0.0.1 SMTP (276b023cf3f9) 250-ETRN 20070226 183131 127.0.0.1 SMTP (276b023cf3f9) 250 8BITMIME 20070226 183131 127.0.0.1 SMTP (276b023cf3f9) MAIL FROM:philippe mailto:philippe@ %20malivsion.com @ malivsion.com 20070226 183131 127.0.0.1 SMTP (276b023cf3f9) 250 Ok 20070226 183131 127.0.0.1 SMTP (276b023cf3f9) RCPT To:mathioye mailto:mathioye@ %20mail.com @ mail.com 20070226 183132 127.0.0.1 SMTP (276b023cf3f9) 550 philippe mailto:[EMAIL PROTECTED] @ malivsion.com: No thank you rejected: Domain not found 20070226 183132 127.0.0.1 SMTP (276b023cf3f9) QUIT --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. image001.gif Description: GIF image
[Declude.JunkMail] SmarterMail Admins - Relay Hole
We have been using Declude, Sniffer and invURIBL for years now with great success. But yesterday we got bit by a phish attack through SmarterMail. They used SMPT authentication to bypass all the time and money we spent on defenses against the bad guys. The root of the problem: SmarterMail is lacking simple password rules. For more of the story see: http://forums.smartertools.com/forums/27627/ShowThread.aspx#27627 Michael --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole
Good point Chris. Not up to this point. We have been pretty lucky up to this date. We are in the process of turning it on as a stop gap against the lack of software password rules. SmarterMail and now it looks like iMail too, need to be part of the solution not the problem. Mike From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Asaro Sent: Wednesday, February 07, 2007 9:25 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole Are you using the Declude Hijack functionality? That would have quarantined any unauthorized bulk mail from leaving the system. Chris _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Wednesday, February 07, 2007 11:41 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole Well, might be news to you but Imail has the same problem. There was discussion about this on the Imail list awhile back and IIRC Kevin said it is now on the list of features to be added. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Jaworski Sent: Wednesday, February 07, 2007 6:30 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] SmarterMail Admins - Relay Hole We have been using Declude, Sniffer and invURIBL for years now with great success. But yesterday we got bit by a phish attack through SmarterMail. They used SMPT authentication to bypass all the time and money we spent on defenses against the bad guys. The root of the problem: SmarterMail is lacking simple password rules. For more of the story see: http://forums.smartertools.com/forums/27627/ShowThread.aspx#27627 Michael --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Smarter Mail Changes Update
Posted By: ST-TUzzanti in SmarterMail Subject: Re: Heads up to all e-mail server and domain admins __ There is a task for a future minor version allowing the system admin to force certain password requirements. This will go beyond length and will allow dictating of strenght by choosing how many alpha, numeric etc... --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CMDSPACE/SmarterMail
Ditto Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] ORDB.Org Shutting Down
Ordb.org is shutting down today. Time to review/edit config files. http://ordb.org/news/?id=38 Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CMDSPACE/SmarterMail
Anyone using SmarterMail with Declude using the cmdspace test and not seeing cmdspace test entries in their log files??? I suspect David is looking for others who maybe seeing what I am seeing. Thanks, Mike -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, November 13, 2006 7:19 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail I am looking for more information regarding this issue. Is this unique to the SM Enterprise Edition? Also, does it seem to be related to a specific version of Declude? Any help with this would be appreciated. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic Sent: Friday, November 10, 2006 5:44 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail My understanding from quite a while ago is that SmarterMail did not pass the CMDSPACE info on to Declude (somehow). So the test is irrelevant in SmarterMail. Maybe this has been corrected in some newer version of SmarterMail?? Goran Jovanovic Omega Network Solutions -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Friday, November 10, 2006 3:40 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail Thanks, David. It's little things like this short acknowledging message that can go miles towards making your customers feel better about Declude's support. Gary Original Message From: David Barker [EMAIL PROTECTED] Sent: Friday, November 10, 2006 3:10 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail I see that too, I will look into this. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Friday, November 10, 2006 2:27 PM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] CMDSPACE/SmarterMail I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and have had CMDSPACE configured for quite a while, but hadn't thought anything about it. When I saw your message I ran DLanalyzer on my logs for the past two weeks and saw that there were no hits for CMDSPACE at all. So it seems I am experiencing the same problem. Gary Original Message From: Michael Jaworski [EMAIL PROTECTED] Sent: Friday, November 10, 2006 10:45 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] CMDSPACE/SmarterMail We just started using CMDSPACE and noticed the test does not appears to be working on SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14. I am not seeing any errors in the debug level logs files. A check of the release logs it appears support for CMDSPACE test in Smartermail was provided in 4.0.9. (Feb 2006) Anyone seeing the same thing? Here are my relevant entries without quotes: Global.cfg - CMDSPACE cmdspaceX X 8 0 $default$.junkmail - CMDSPACE WARN Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CMDSPACE/SmarterMail
David, The .hdr file contains cmdspc. Writing [EMAIL PROTECTED] [EMAIL PROTECTED] cmdspc: true helo: cpe-071-065-237-163.nc.res.rr.com M -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Franco-Rocha Sent: Sunday, November 12, 2006 4:18 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] CMDSPACE/SmarterMail Michael, If you have anything being held as spam, that folder will contain the *.hdr ad *.eml files. Look at one of the *.hdr files to see whether it contains a mention of CMDSPACE. That is how SmarterMail has been passing that information to Declude. If it is there, send us a copy of the *.hdr file; if it is not there, SmarterMail is not providing us with that information. David Franco-Rocha - Original Message - From: Michael Jaworski [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Friday, November 10, 2006 10:25 AM Subject: [Declude.JunkMail] CMDSPACE/SmarterMail We just started using CMDSPACE and noticed the test does not appears to be working on SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14. I am not seeing any errors in the debug level logs files. A check of the release logs it appears support for CMDSPACE test in Smartermail was provided in 4.0.9. (Feb 2006) Anyone seeing the same thing? Here are my relevant entries without quotes: Global.cfg - CMDSPACE cmdspace X X 8 0 $default$.junkmail - CMDSPACE WARN Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] CMDSPACE/SmarterMail
We just started using CMDSPACE and noticed the test does not appears to be working on SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14. I am not seeing any errors in the debug level logs files. A check of the release logs it appears support for CMDSPACE test in Smartermail was provided in 4.0.9. (Feb 2006) Anyone seeing the same thing? Here are my relevant entries without quotes: Global.cfg - CMDSPACE cmdspaceX X 8 0 $default$.junkmail - CMDSPACE WARN Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] CMDSPACE/SmarterMail
Thanks Gary! It is a Declude holiday. We might hear something from them Monday. M -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Friday, November 10, 2006 11:27 AM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] CMDSPACE/SmarterMail I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and have had CMDSPACE configured for quite a while, but hadn't thought anything about it. When I saw your message I ran DLanalyzer on my logs for the past two weeks and saw that there were no hits for CMDSPACE at all. So it seems I am experiencing the same problem. Gary Original Message From: Michael Jaworski [EMAIL PROTECTED] Sent: Friday, November 10, 2006 10:45 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] CMDSPACE/SmarterMail We just started using CMDSPACE and noticed the test does not appears to be working on SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14. I am not seeing any errors in the debug level logs files. A check of the release logs it appears support for CMDSPACE test in Smartermail was provided in 4.0.9. (Feb 2006) Anyone seeing the same thing? Here are my relevant entries without quotes: Global.cfg - CMDSPACEcmdspaceX X 8 0 $default$.junkmail - CMDSPACEWARN Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] iMail Sys Log Files are growing out of control
Title: Message 1. Check your logging level. Make sure it is not at a debug level. M -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Wolf TombeSent: Wednesday, September 20, 2006 4:35 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] iMail Sys Log Files are growing out of control I apologize if this is OT; but this is the best support group I know of for emergency situations, and I have one. Starting one week ago today (slept 13th), my iMail Sysxxx.txt log files began to grow out of control. Files, that for several years have averaged around 4Mb in size, suddenly jumped to about 1.5 Gig per day and have remained there. I found out about this when my server reported running out of Volume space on the log file partition (which has 15Gig assigned to it) this morning! These files are so large that I cant even open them! Nothing has changed on the server that I am aware of. Has anyone seen this behavior before or have any suggestion? Thanks in advance for any help anyone might be able to provide. Wolf---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Goober of the year
Title: Message They maybe just human. It may have been a big step for them to get there. They need to be applauded for the step, not the stone. After little Internet experienceand peer talk they may find AOL is not the best solution for them and remember your kindness and start paying you money for a service they now appreciate. Mike -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck SchickSent: Wednesday, August 02, 2006 7:21 AMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Goober of the year The first clue would be anyone who would set up an AOL account in this day and age and then brag about it. Chuck SchickWarp 8, Inc.(303)-421-5140www.warp8.com ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] F-Prot Licensing
Title: Message Thanks for the heads up. Saved me from a heart attack when I went to renew in August. I would swear something is following me around related to major price shifts. Webtrends, Lyris, iMail and now my favorite AV product F-Prot. Guess I will be checking the docs and especially the archives forClamAV and AVG which I have ignored. Pay back lol Mike ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
I am getting a lot of these too, some of which show a 421 timeout in the SmarterMail SMTP logs. Example: data transfer failed. 421 Command timeout. closing transmission channel. Mike -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Monday, July 10, 2006 11:52 AM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Now that I've installed 4.2.20, I'm getting a lot of messages in the error folder (I'm running SmarterMail 3.3.2369). Most of them seem to be spam, but there are some good messages in there. Am I now going to have to scan this folder for false positives just like the held spam folder? Here is an example of the .hdr file for a message that was good: Failed [EMAIL PROTECTED] [EMAIL PROTECTED] cmdspc: false helo: ivmail1.fcc.es What does Failed mean? Is there something I can look for in the headers of the message (in the .eml file) that would indicate this? Is there any way to requeue this message? Original Message From: David Barker [EMAIL PROTECTED] Sent: Friday, July 07, 2006 11:01 AM To: Declude.Virus@declude.com, Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 EVA ADD New NONSTANDARDHDR vulnerability test. Messages found to have broken headers are moved to the \virus folder EVA FIX ALLOWVULNERABILITIESFROM (for user) EVA FIX BANEXT buffer overflow SMADD When an error is found in the envelope (.hdr) file the message is moved to the \error folder SMADD Decludeproc will not start without a valid domainlist.xml SMFIX QUEUEFILE_SAVEFILE the log is showing the correct directory path SMFIX Allows admin to set VIRDIR to any directory path in the virus.cfg David Barker Product Manager Your Email security is our businessT 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Bunch more blank subject blank body
Title: Message Since my original post we've caught about 1200 of them. Looks like some of the IPs are showing up in Spamcop now. Mike -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)Sent: Saturday, June 17, 2006 9:22 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Bunch more blank subject blank body Must be either more broken spam or testing for a new spam storm. John T eServices For You "Seek, and ye shall find!" ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] Blank body Subject
Title: Message Anyone else getting slammed to just about every hosted domain with messages generally with a blank subject and body? Some messages with a return address. The body is of abasic empty html template. The headers lack to and from entries, though the Declude sender shows the sender's e-mail address. They seem to coming from just about every where. None of the spam filters are catching them. Looking back it appears they started June 9th and seem to be increasing. Looking for best advise on a Declude centered filter. Mike JaworskiPuget Sound Network, Inc.(206) 217-0400(800) 599-9485 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Blank body Subject
Title: Message Looks like the followingfilter is working well. Using the HOLD action to verify filter success/failure. Caught 32 in the last 5 minutes. Global.cfg FILTERMSCfilterD:\SmarterMail\declude\msc.txtx00 msc.txt HEADERS30 NOTCONTAINS from:HEADERS30 NOTCONTAINS subject: $default$.junkmail FILTERMSCHOLD D:\smartermail\spool\msc Mike ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Declue's Natural Law - was OT: Microsoft Open License
Time to get back on track here. Be considerate by taking a second or more and review your posting to leave out the personal attacks, counter attacks and counter counter attacks. If you need to get personal do it off forum. Let's get back to working together to fight the real bad guys. Michael Jaworski Puget Sound Network, Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] declude 4 changes ... worried...
Has anyone checked the service agreement page?? https://www.declude.com/SearchResults.asp?Cat=22 Following the initial 12 month service and support period included in your initial purchase of your Declude product, a Service Agreement extends the support for a further year. Michael Jaworski Puget Sound Network, Inc. (206) 217-0400 (800) 599-9485 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Ping 2-3-06
Sh don't be so loud! The baby is sleeping. ~M --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Stock Spam
Title: Message Thanks guys! Mike
RE: [Declude.JunkMail] Interesting spam footer
Title: Message It looks like a great opportunity to actually meet a real live spammer in person in front of a judge. Sign me up. Mike -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Sunday, September 18, 2005 4:38 PMTo: IMail_Forum@list.ipswitch.com; Declude.JunkMail@declude.comSubject: [Declude.JunkMail] Interesting spam footer Thought this was interesting... a spammer trying to usefear of prosecutionto stop people from reporting their email as spam. Thespam was sent to a postmasteraddress never used for outgoing mail... Darin. =IMPORTANT INFORMATION CONCERNING THIS COMMERCIAL MESSAGEIN COMPLIANCE WITH THE CAN-SPAM ACT OF 2003This is one of a number of commercial email messages that you,or someone using your computer, agreed to receive this messageWARNING!!!ANY PERSON REPORTING ALLEGED SPAM TO ANY PERSON, PERSONS, ISPs OR ENTITIES WITHOUT PHYSICAL PROOF OF SAID CLAIM IS GUILTY OF BOTH FRAUD AND A CIVIL CRIME AND WILL BE PURSUED AND PROSECUTED TO THE FULLEST EXTENT OF THE LAW. FURTHER, SHOULD SAID ALLEGATION RESULT IN ANY INTERRUPTION OF NORMAL BUSINESS ACTIVITY OF THE COMPANY AND/OR RESULT IN LOSS OF INCOME AND/OR RESULT IN UNNECESSARY EXPENSES, A CIVIL SUIT WILL BE BROUGHT
RE: [Declude.JunkMail] Declude bugs and problems with smartermail - Folder Names
On the subject of folder names. Second the vote on no spacxes in file or folder names. Might it be better to use a simple format of 20050905 or 050905?? Also consider the issue of moving into a new year and the visual order of the folders when sorting by file name. This coming from using a GUI perspective when managing and troubleshooting date related issues. Mike -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Sunday, September 04, 2005 9:30 AM To: Declude.JunkMail@declude.com Cc: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude bugs and problems with smartermail Darin, Here are a couple of things I found. A few minutes ago, I set log level to DEBUG so that I could show you the problems, and I changed my WIEGHT30 from a value of WEIGHT30 SUBJECT [SPAM] to WEIGHT30 HOLD %DATE% to enable holding of spam. Here is a log snippet with HOLD in effect: 09/04/2005 10:53:14.565 68454536903 [5476] Moving file to spam hold directory [D:\APPS\SMARTERMAIL\SPOOL\proc\68454536903.EML][D:\APPS\SMARTERMAIL\SPOOL\s pam\04 Sep 2005 \68454536903.EML] 09/04/2005 10:53:14 68454536903 ERROR: Could not move spam to hold! Code: [3] Error String: [The system cannot find the path specified.] Note the space after 04 Sep 2005 and before the slash. That is one bug in Declude. On a different topic, while we're talking about this, I'd like to suggest that Declude name the date folders something like 04_Sep_2005 with no spaces anywhere in the path. The reason is because people may wish to run DOS batch scripts against the folder. I'm pretty sure that DOS won't accept spaces in a directory path unless it's coded with double quotes in the path. EG (D:\APPS\SMARTERMAIL\SPOOL\spam\04 Sep 2005\68454536903.EML) Thus if Declude avoids spaces in the path to begin with someone who later wants to write a bat file to delete old spam folders will have a much easier time of it. Okay, back to the topic of bugs. Here is the next problem If I change the WEIGHT30 to WEIGHT30 HOLD (no date parameter) with the idea the spam would go directly into the SPOOL/SPAM directory, then another bug crops up. The path in the log would look something like this: [D:\APPS\SMARTERMAIL\SPOOL\proc\68454536903.EML][D:\APPS\SMARTERMAIL\SPOOL\s pam\\68454536903.EML] Note the double slashes before the spool file name. Declude didn't account for the fact that if you're not using their new date folders then one of those slashes in the path must be removed. Also, with HOLD in effect, over time messages will start to back up in the SPOOL/PROC directory and never be moved back into the SPOOL directory for re-processing. I have to manually copy them. Also, ironically, if I have HOLD in effect than the directories that appear in the SPOOL/PROC folder with a name such as 68454536903.VIR will never be cleaned up. They will exist until I delete them. If I do not have HOLD in effect, then Declude will remove those .VIR folders from the PROC directory when it's done processing them. So this is yet another bug I found. The third problem I'm fighting is a situation where Declude analyzes an email and may recognize it as spam but it still passes through Declude and arrives in my in-box with no Declude headers attached to the message. I can tell Declude processed it because the logs show it being analyzed, failing and weights being set. Yet the subject isn't modified and when I view the mail headers there is no sign of Declude ever having looked at the message. I think this may have some problem to do with copied or forwarded messages or perhaps some problem with email moving back and forth between the PROC and SPOOL folder and not being processed properly. I'll keep looking at this issue to see if I can find a pattern with the overlooked messages. Thanks, Dave -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Sunday, September 04, 2005 8:32 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude bugs and problems with smartermail Too funny! I thought I had heard more success than that with 2.0.6. I forgot that the 3.0 version for SmarterMail wasn't quite out yet. Can any other Declude/SmarterMail users comment on their success, and what they did to achieve it? It might be worth posting your config here in case someone who has been using SmarterMail can point out a configuration change that would help. I believe there's a THREADS parameter in the Declude.cfg in 2.0.6 that can be increased from the default to better handle the SPOOL/PROC directory under even moderate load. One of the main reasons we haven't tried the Declude/SmarterMail combo yet is SmarterMail's inability to give Declude SMTP AUTH info. Whitelisting authenticated users is pretty important with our setup, since we have the CMDSPACE and some dynamic IP tests weighted
RE: [Declude.JunkMail] OT - Removal from SPEWS
We just moved to a new network provider. Never thought to check the new IPs. Never again! Within a few days we started getting calls from customers complaining about delivery failures not to mention being called a spamming ISP. Research found our three class c's were in a large netblock which Spews and spambag listed since the network provider did not respond appropriately. Although we find it incredible anyone would use Spews reality has shown there are some ISPs who don't understand the impact of using Spews. Even an ISP like yahoo.com.au. We will not be coerced or blackmailed into being a David against Goliath situation. These types of idealist seem to have more time and money than we do. As long as we run a clean shop and torture all spammers in public we sleep at night. We finally had to get some clean IPs for our outgoing SMTP servers. It sucks but the bottom line is ... it's all about our customers not about Spews idealism. Michael Jaworski Puget Sound Network, Inc. (206) 217-0400 (800) 599-9485 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude and IMail 8.2
Heimir, You may want to consider using this list as your first line of defense. This is the best place to learn of new issues which are brought to everyone's attention by folks who are in the trenches. Keep in mind not everyone here has the latest version and not everyone is using iMail. I would not expect Declude to keep track of what is going on with my particular e-mail servers. I prefer them to spend all resources keeping up with the spammers. A few have made mention of the delay getting out this fix. It hurts when you are the one who is being impacted by an issue. I have been there but in the end I know they will find a fix and get it implemented as soon as possible. I don't see the folks at Declude sitting around drinking beer and working issues when they feel like it. From my experience in the software developing cycle 3 months for a major change is fast. Keep in mind they need to test and retest all those features we have requested over the years. Add the issue of iMail changing their software and then balance it out with what we pay for maintenance ... I am happy they are still in business constantly working and listening to us to update their product(s). Best to not play victim but actively monitor this anti-spam community created by Scott and driven by a lot of knowledgable, talented and hard working customers. And maintain your maintenance agreement. Small price to pay for what the product does for my customers. Michael Jaworski Puget Sound Network, Inc. (206) 217-0400 (800) 599-9485 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Heimir Eidskrem Sent: Tuesday, August 23, 2005 5:43 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Declude and IMail 8.2 Thank you for the update. It concern me that I can't find the email notifying your customer about this bug. Could you tell me when it was sent so I can find it and make sure I am not holding this type of emails. They are critical to us so I will put some effort in making sure I get them. Its been over 2.5 months. The fix will not be available for some time according your email. This is a very long time and frankly I think it makes Declude look very bad. I think there have been plenty of complaints about Declude lately. It seems that your reputation is getting a little tarnished. [EMAIL PROTECTED] wrote: Thank you for you posts. We understand your frustration; here are the facts so there is no confusion. 1. This is NOT a bug in Declude. Ipswitch made changes to their IMail architecture, making it incompatible with Declude and this requires a fundamental re-write of Declude not a 10 minute fix. 2. As soon as we were aware of these changes we began development to modify Declude to work with IMail 8.2. 3. It has been our priority and focus since we first identified the problem. 4. In order to deliver a quality product, sufficient testing needs to be done to ensure customer satisfaction. Since identification of the issue additional patches have been released by Ipswitch meaning additional testing and development has been required. 5. This is not an issue of interim releases as Declude product architecture has had to change making it very different from earlier versions of Declude. 6. This is not an issue of having Scott back as the situation would be no different from today. We are in regular consultation with Scott and we all agree as to the product direction and problem resolution. If there was an easier, faster, simpler way in which we could achieve a resolution we would do it. Barry --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Woes
Title: Message I can second the need for a gateway defense when under attack. We run a Windows shopand were being crushedunder multiple dictionary attacks for two domains on a daily basis. I took the daunting task to buildour first Linux box running Postfix. The first box was a tough start though I had a employee who had Linux experience. We are running Postfix on OpenBSD 3.6 with MySql for dynamic update ability. (I am still working on grabbing additions, updates and deletions from SmarterMail admins so we can throw all our domains in Postfix and update in realtime) After a few weeks we added a second box in the event the first box went down. The second box was a breeze since it was basically a duplication. Both mx records now point at the two boxes. The hardware was old 500Mhz and 1ghz cpu with 512mbs of ram each. The 1ghz is primary and takes 75% of the load without much effort with plenty of freememory. The whole setup allows the main server running SmarterMail/Declude Pro/Sniffer/F-Prot to respond quickly to POP, web mail and smtp traffic requests. The Linus approach only should cost you some time and old equipment as the software is free. Our experience over the last two years showed it was worth climbing the short Linux learning cliff. And it is true ... they run forever One important note not related to using a gateway: We never bounce spam e-mail backto the "sender". The backscatter traffic can kill you and skew your reports. Michael JaworskiPuget Sound Network, Inc.(206) 217-0400(800) 599-9485 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WillSent: Friday, July 29, 2005 9:38 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Declude Woes Well, Im back at it today. Yesterday I disabled Declude early in the day and started working mail back into the spool directory from the overflow directory. This was a long process, but by the end of the day I had gone from a backlog of 150,000 files in the spool and 134,000 in the overflow directory to about 1500 (that includes logs). During this time I needed to stop and restart the queue manger a number of time. I did this to allow me to delete all the .gse files, which I figured would save me time discarding them. However, by the time I got down to 1500 files and started to watch the spool it started to increase in size again; climbing to 4000 within a matter of minutes. I stopped and restarted the queuemanager and these files were then processed. I verified they were actually getting processed by sending test messages to myself. At this point I was pretty upset and confused. I looked through the sys logs and found nothing out of the ordinary, queuemanger would simply stop. I set all the queuemanager setting back to default and tried again without luck. I had to stop and restart it every few minutes to get it to process a few thousand messages. Finally, I purchased an Imail service agreement and upgraded to 8.21. Magically, it worked. The queumanger started to deliver messages as soon as they arrived. My thought immediately went into conspiracy mode. It seems like this has happened before where we had a perfectly workable solution and something completely confusing happened and an upgrade magically fixes it! Anyway I re-enabled declude and let it run overnight. Now I have a backlog again. There are mostly D*.SMD files in the spool right now with all their delivery Q* files in the overflow directory (*shakes fist at overflow directory*). Time to start the process again today. Im disabling declude to get those messages out and one thing to note, after I have stopped the smtp server and added smtpd.exe backing into the delivery application, I still have about 20+ declude.exe processes. I have stopped and started it again as well as the queuemanager and they are still there. In fact they are creating more declude.exe processes as I watch. Im trying to kill them, but they just keep coming back having to restart so I can start processing mail. We are an ISP and here are some random examples of some of our Imail daily reports to give you an idea of what kind of traffic we see:
RE: [Declude.JunkMail] Declude Woes
Title: Message Will, My comment about not bouncing messages relates to the action taken in the Declude $default$.junkmail file. BOUNCEONLYIFYOUMUST (latest version) In earlier versions it was simply BOUNCE. Mike -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of WillSent: Friday, July 29, 2005 10:34 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Declude Woes Well thank you to everyone who responded to my need for perspective and assistance. I believe I will be in need of a mail gateway if I am to continue to use Declude. Also, does anyone know how to configure an Imail/Declude setup to not bounce spam messages? Will
RE: [Declude.JunkMail] Imail 8.2 / smartermail
The price for SM from Declude was great. Even better yet is SmarterMail, the product. It works. Their able to get things tuned up or added a lot quicker like Declude. I am seeing a pattern. I like it when a software company is lean and mean. I would rather feed a lean cat than a fat cat. First it was WebTrends, then Lyris and now Ipswitch. Still trying to figure out how MS fits in this picture. Fat cat with a big stick?? One vote for SmarterMail. Mike PS Don't miss the fact their backup servers come with the deal at no charge. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler Sent: Thursday, April 28, 2005 3:23 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Imail 8.2 / smartermail Ok -- time for the question again. Thumbs up or down on the declude / smartermail integration? Comments appreciated. Rob --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] New directives
Title: Message Comment on STOPPROCESSINGONFIRSTDELETE ON It does what it says. We installed the upgrade last night and found this little gem has reduced our cpu load dramatically since weusethe delete action extensively. Nice work Barry and the Declude team! Michael JaworskiPuget Sound Network, Inc.
RE: [Declude.JunkMail] Whitelisting our Domain
My reading was Declude uses the SmartMail Address book as it is used in iMail but does not yet look at the white list feature in SmarterMail. Michael Jaworski Puget Sound Network, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Tuesday, April 05, 2005 3:00 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Whitelisting our Domain See previous post SmarterMail does support SMTP Auth but it does not at this time spaa that info off to declude. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Darin Cox Sent: Tuesday, April 05, 2005 2:34 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Whitelisting our Domain Being in Florida, we use gators. We tried the usual pigeons initially, but they got eaten by the gators. Some of the messages actually still made it to the intended destination as the gators sought out the recipients' pools, but we opted to just use them directly instead of messing with the pigeons at all. Works pretty well for those near the rivers and lakes, but we have gotten few complaints about slow delivery from those who aren't. Usually the complaints stop once the messages actually arrive, though. On a more serious note, I believe SmarterMail will pass the SMTP Auth info on to Declude. Hopefully someone at CPHZ will chime in on this to verify that WHITELIST AUTH does work with SmarterMail. Darin. - Original Message - From: Imail Admin [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, April 05, 2005 5:10 PM Subject: Re: [Declude.JunkMail] Whitelisting our Domain Alright guys, it was only a typo, no need to get in a huff. If you had looked at Darin's message that I quoted, you would see he was talking about SMTP Auth, and that was my question, not just SMTP. My fingers just can't keep up with my thoughts. We use IMail 7.15, which does not support SMTP Auth, and that's just about the only feature I regret missing from 8.x. We plan to look at Smarter Mail at some point, and I was curious if they had a similar feature so that we can whitelist our domains (which was the topic here, remember?) with Declude JM. Feel better? Ben P.S. Actually, we don't use SMTP either. We take each mesasge that is to go out, hand write them on small slips of paper, tie those to the backs of squirrels, and send those out the door. We tried sending the scraps of paper by US Mail, but that was less reliable. - Original Message - From: Dan Horne [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, April 05, 2005 8:07 AM Subject: RE: [Declude.JunkMail] Whitelisting our Domain No, it uses MTP, the precursor to SMTP. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Tuesday, April 05, 2005 10:35 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Whitelisting our Domain I think it uses STP...The Racer's Edge. - Original Message - From: Imail Admin [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, April 04, 2005 6:18 PM Subject: Re: [Declude.JunkMail] Whitelisting our Domain Just curious: does SmarterMail use SMTP or something similar? Ben - Original Message - From: Darin Cox [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, April 04, 2005 7:39 AM Subject: Re: [Declude.JunkMail] Whitelisting our Domain Yes. If all users send through your server, then use SMTP AUTH on all clients and configure Junkmail to whitelist AUTHing users. If not, but all mail comes in from static IPs, you could use an IP whitelist to bypass for those IPs. Darin. - Original Message - From: Kevin Stanford [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Monday, April 04, 2005 10:25 AM Subject: [Declude.JunkMail] Whitelisting our Domain If we whitelist our domain will Spam that spoofs our email addresses and domain also be whitelisted? If so, how can I circumvent it? Thanks, Kevin --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com
RE: [Declude.JunkMail] Declude 2.0 - crash
Good reminder for me - Nothing will ever be like it was. Software development is an insane business. One of the reasons I got out of it. I've value the support I get from Declude and Sniffer folks. I would rather pay these guys money to help me fight the bad guys by listening and trying to provide some code that works in the end versus paying a bazillion bucks for Microsoft products that they think will save me. After the last couple years I've learned to be able to back out an upgrade within a few minutes. I always expect something to happen. Not all the time mind you but right now I know the company needs some more time to settle down. Keep the heat on since I have no desire to rob a bank to replace the support and functionality these products give me. And gotta add the list participants are equally excellent assets to the battle. Gotta run ... Imail web service just went down. lol Michael Jaworski Puget Sound Network, Inc. (206) 217-0400 (800) 599-9485 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude SmarterMail - Postfix
Anyone have an automated system to interface between SmartMail and Postfix using Postfix only as a gateway to SmarterMail/Declude/Sniffer??? Thanks, Michael Jaworski Puget Sound Network, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude SmarterMail - Postfix
Thanks Len. Looking at IMGate I suddenly realized it sits on top of Postix and is not stand alone. Duh! Windows shop here with one Postfix machine to handle the dictionary and harvest attacks for our backup mail server. Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Vacationing Spammers
Title: Message Anyone notice a drop in the amount of spam??? Sort of speaks most of the spammers are in the US or at least taking part in a US holdiay perhaps. Michael JaworskiPuget Sound Network, Inc.
RE: [Declude.JunkMail] They should try declude :)
Sounds more like brute force technology. Michael Jaworski Puget Sound Network, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Troy Hilton Sent: Monday, November 22, 2004 10:08 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] They should try declude :) So, the benefit of being a higher-up, muckity-muck at Microsoft is not having the best software, but rather the duckets to hire an entire dept. of folks to clean up your email for you. I wish I could afford Microsoft's Anti-spam Technology Gee, must be nice. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Interesting Spamming Technique
Absolutely! Once we installed a Postix gateway and updated the mx records for a particular domain under constant dictionary attacks we dramatically cut down the network flood of unknown users. However that domain is still getting a smaller flood of unknown user spam at the old location. We suspect they are doing a port scan and or just trying mail.domanname.tld which was the original. Our next step is to get all our customers for that domain to move to a different domain name SMTP and POP addresses. Would love to bypass the process of elimination and go to the heart of the spammer bypass. Michael Jaworski [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Geiser Sent: Thursday, November 18, 2004 7:32 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Interesting Spamming Technique Hello, All, In addition to doing spam filtering for some of our IMail hosting customers we also do Store and Forward filtering for a few domains. In the past day or so I've had complaints from Store and Forward customers about an increase in spam. When I check the headers of the e-mail they are sending to me I don't see any indication that they e-mail was routed through us and NOT picked up as spam. Instead it looks like the mail was delivered directly to their e-mail servers and did the end around our Store and Forward. The thing is I have no idea how the spammer even knew the direct IP addresses of our customers because those don't show up anywhere in their DNS records. Although I guess they could just be running port scans and checking for responses on port 25 and attempting delivery of spam that way without using DNS lookups. But part of the IMail Store and Forward documentation involves locking down the SMTP server to only accept e-mail of the relaying IP address. I'm 99% sure that we had the customers lock down their incoming e-mail to only accept connections from us but I need to confirm that. In the meantime has anyone noticed an increase in this direct delivery method which basically ignores the current DNS system? Thanks In Advance, Dan Geiser [EMAIL PROTECTED] --- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spammers working OT
We are running Declude and Sniffer on Imail 8.05. One of our nationally accessed domains, xyz.com, has been under constant dictionary attacks with 320,000 messages per day average for 265 e-mail addresses/aliases. After I installed our first Linux box as a gateway with Postfix the number dropped to less than a 10th of the original traffic. I made sure the now single dns mx record for the domain points at the Postfix box. (mail04.mainISP.net) I left the original mail.xyz.com A record in place to allow those domain customers to use the same POP/SMTP server settings. I will be adding a second Postfix box to act as a gateway to our backup mail server. Within the last few days it appears the spammers figured it out and are not using the mx record and going direct to the mail server. Anyone seen this? I am trying to avoid changing the smtp/pop server settings for my customers since the spammers may just look at our support pages and bypass our Postfix machine again. Any suggestions??? Pissed but determined in Seattle, Michael Jaworski Puget Sound Network, Inc. (206) 217-0400 (800) 599-9485 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPF 2.0 ?
Could help notice Microsoft states The Sender ID Framework is an industry standard. http://www.microsoft.com/mscorp/twc/privacy/spam_senderid.mspx Michael Jaworski Puget Sound Network, Inc. (206) 217-0400 (800) 599-9485 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] **OT** Intrusion Detection Software
Title: Message Anyone rig Win version of Snort to work with Declude for dictionary attacks??? To flag an IP with a dictionary attack profile and let Declude or iMail refuse the traffic for a period of time. We have one domain with just 350 e-mail acccounts being pounded daily with dictionary attacks by different sources resulting in about 10k spam messages. Even though they are often listed in Spamcop or ORDB each message still needs to processed. Michael JaworskiPuget Sound Network, Inc.(206)217-0400(800)599-9485
RE: [Declude.JunkMail] DNS Report
Seattle can get to it. M -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, October 13, 2003 7:30 AM To: Declude JunkMail (E-mail) Subject: [Declude.JunkMail] DNS Report Is anyone able to get to the site? www.dnsreport.com Just want to make sure that it's just not me that is having problems. Thanks, Greg attachment: winmail.dat
[Declude.JunkMail] Declude customer postmaster templates
Scott, We have received two postmaster messages this morning from Declude users who are not using the SKIPIFVIRUSNAMEHAS Sobig. Any chance to send a broadcast message to Declude users to remind them they can be part of the solution by tweaking their outgoing message templates??? Michael Jaworski Puget Sound Network, Inc. (206)217-0400 (800)599-9485 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
