[Declude.JunkMail] No one at Declude?

2013-04-03 Thread declude
Last Wednesday (3/27/2013), I renewed my Declude and Messaage Sniffer service 
agreements.  A full week later, they both still come up as expired.  All phone 
calls and emails have gone unanswered.  I left voice mails for Tech support, 
Sales and the phone number previously listed on this list for John.  I emailed 
both support at declude and jprovost at declude.com.

I don't know where to go from here.

A very sad time for Declude.

Don





Sent via the WebMail system at net1media.com






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Solid State Drives

2011-09-23 Thread declude
Hi All,

Has anyone attempted to place the \IMail\Spool directory on a solid state
hard drive?  What are your experiences?  Are there any reason not to do
this?

Thanks for the input,
Don



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] AVG Files

2011-09-12 Thread declude
What files should be in my Declude\scanners\avg\db directory?  What are the
current dates?  Here is the directory I have:

07/29/2011  11:44 AM 0 avi7.avg
09/11/2011  11:03 PM85,824,663 incavi.avm
07/29/2011  11:44 AM 0 microavi.avg
07/29/2011  11:44 AM 0 miniavi.avg

I am concerned that the file sizes are zero and that they are not all being
updated.

Thanks,
Don



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Declude 4.9.39 Interim Release Notes

2009-11-04 Thread declude
David,

Thanks for adding the HiJack email.  I had performed the same function through 
a background task that would monitor the hold2 directory.

I had previously sent a suggestion to add a variable to Declude that would 
contain the user authentication email address.  Is this anywhere on the 
suggestion list?  Any possibility of seeing this down the road or anytime soon?

Thanks,
Don Winsauer
Net1 Media

  - Original Message - 
  From: David Barker 
  To: declude.vi...@declude.com ; declude.junkmail@declude.com 
  Sent: Wednesday, November 04, 2009 11:11 AM
  Subject: [Declude.JunkMail] Declude 4.9.39 Interim Release Notes


  Please note these releases are interim and still considered beta. Any test 
feedback would be appreciated. 

   

  


  4.9.39 Added a function to send a notify e-mail when hijack is triggered and 
e-mails are being held in the Hold2 folder 

   

  To turn the Hijack e-mail notify on add the following directive to the 
hijack.cfg.

   

  HIJNOTIFY   ON

   

  Add the include HijackNotify.eml into the \Declude directory. The recipient 
of the email can be modified.

   

  


  4.8.39 IPBYPASS can be configured with CIDR

   

  


  4.8.38 Add the Recipient, mailfrom and subject information to the blklst.txt 
file.

   

the format blklst.txt file is 

   


Date|time|spool#|IP|TotalWeight|LastAction|RecpList|mailfrom|subject|testsfailed

   

   

  Example:

   

  Multiple Recipients:

   

  
10/14/2009|11:40:06.109|53|24.177.234.76|18|s...@hcss.net,s...@hcss.net,test...@yahoo,beg...@yahoo.com,donotl...@gmail,


  
|owner-nolist-30960_*bigm**ridgewoodcable*-...@soar.soulfulbliss.com|[59]Guaranteed*-payment-center|CATCHALLMAILS=0,NOL


  
EGITCONTENT=0,IPNOTINMX=0,SORBS-DUL=5,FIVETEN-SRC=2,ZEN=7,SORBS=7,DYNHELO=5,FROMNOMATCH=2,WEIGHT10=10,WEIGHT14=14,|
 

   

   

  One Recipient:

   

  
10/14/2009|11:40:06.296|15|218.16.123.185|37|s...@hcss.net,|info_claimsprocessgabjgfu...@gmx.net|CONTACT
 AGENT FOR 


  
CONFIRMATION|CATCHALLMAILS=0,NOLEGITCONTENT=0,IPNOTINMX=0,FIVETEN-SRC=2,NJABL=4,BASE64=4,CMDSPACE=8,DYNHELO=5,HELOBOGUS

  =5,REVDNS=10,SPFFAIL=10,WEIGHT10=10,WEIGHT14=14,WEIGHT20=20,WEIGHT30=30,|

   

  


   

  4.8.37 PostiniFix,  Add a new directive POSTINIFIX ON/OFF goes in the 
declude.cfg file

   

  Configuration:

   

  In declude.cfg file:   POSTINIFIXON   in order for the Posting Fix to 
work

   

  


   

  4.8.36 Fix for Virus test was not catching the EICAR test due to e-mail 
formatting 

   

  


   

  4.7.35 Added support for IMail SQL Database for AUTOWHITELIST.

   

  


   

  David Barker
  VP Operations Declude
  Your Email security is our business
  978.499.2933 office
  978.988.1311 fax
  dbar...@declude.com

   


  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to imail...@declude.com, and
  type unsubscribe Declude.JunkMail. The archives can be found
  at http://www.mail-archive.com. 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] User Authentication enhancement suggestion

2009-08-13 Thread declude
I have noticed that Junkmail puts the user authentication email address in 
the log files.  This had been very helpful.  I would like to ask that 
Declude provide this information in a variable.  That way, I might use this 
information in a filter or even put it in the headers of outgoing emails.


Don



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Global.cfg cleanup

2009-04-29 Thread declude
David,

Thanks for the info!!  I was aware of Hijack but being a long time Declude 
user, I thought it was still a product that need to be purchased separately.  I 
turned it on and will track how it does.

Thanks again,
Don

  - Original Message - 
  From: David Barker 
  To: declude.junkmail@declude.com 
  Sent: Tuesday, April 28, 2009 2:19 PM
  Subject: RE: [Declude.JunkMail] Global.cfg cleanup


  This is exactly why delude Hijack is designed to prevent and resolve. If you 
have a file hijack.cfg.off in your \declude directory just rename it to 
hijack.cfg to turn it on. Further information about hijack can be found here. 
http://www.declude.com/searchresults.asp?Cat=125

   

  David Barker
  VP Operations Declude
  Your Email security is our business
  978.499.2933 office
  978.988.1311 fax
  dbar...@declude.com

   

  From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of 
decl...@mail.net1media.com
  Sent: Tuesday, April 28, 2009 3:18 PM
  To: declude.junkmail@declude.com
  Subject: Re: [Declude.JunkMail] Global.cfg cleanup

   

  Serge,

   

  We had a similar situation happen about a week ago.  For us, it turned out 
that one of our clients was infected with a virus/spyware/malware and was 
sending hundreds of thousands of spam messages.  We had WHITELIST AUTH in the 
global.cfg.  Once he authenticated, he was whitelisted.  The system just could 
not keep up with the load.

   

  Once we figured out what was happening it took us a while to identify which 
account it was.  I found that with LOGLEVEL MID, there is a line in the 
DECmmdd.LOG file that has the text [Authenticated:email address].  By 
searching the file and finding an unusually large volume of them from one user 
showed me which account to disable.

   

  Hope this helps,

  Don

   

- Original Message - 

From: nick 

To: declude.junkmail@declude.com 

Sent: Tuesday, April 28, 2009 12:31 PM

Subject: Re: [Declude.JunkMail] Global.cfg cleanup

 

Serge,

Are you getting a lot of invalids?  In other words maybe too much traffic 
for some reason. Also are you scanning for virii after junkmail runs?

-Nick




From: Serge se...@cefib.com
Sent: Tuesday, April 28, 2009 1:04 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Global.cfg cleanup

first thing i did

tested the DNS and looked at declude logs

no problem there

my cpus were not able to handle the traffic, as simple as that

 

 

  - Original Message - 

  From: David Barker 

  To: declude.junkmail@declude.com 

  Sent: Tuesday, April 28, 2009 4:00 PM

  Subject: RE: [Declude.JunkMail] Global.cfg cleanup

   

  Serge, have you checked to make sure you not having DNS issues. DNS 
causes 80% of the issues with delays.

   

   

  David Barker
  VP Operations Declude
  Your Email security is our business
  978.499.2933 office
  978.988.1311 fax
  dbar...@declude.com

   

   

   

  From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Serge
  Sent: Tuesday, April 28, 2009 11:51 AM
  To: declude.junkmail@declude.com
  Subject: [Declude.JunkMail] Global.cfg cleanup
  Importance: High

   


  For about a week my server (2xP3xeon 2.8GHz) was beiing saturated by an 
increase of traffic
  100% CPU for hours and ten of thousands of messages in \proc
  the servers was working fine for several years
  something had to be done, decided to clean global.cfg, and need help 
optimizing

   

  AVafterJM was on
  Cleaned global.cfg
  left only Sniffer, Zerohour, some builtin tests, and a couple of filters

   

  the server is now stable, but i need some answers to decide what to do 
next

   

  1- loglevel and logOK have any effects on CPU ?
  2- Any DNS tests that are realy important ? (for now, I removed all)
  3- Any of the following external tests / Filters are important, or are 
they outdated  ?

   

  TIA

   

  #HELOISIP  external nonzero E:\imail\filters\heloisip\heloisip.exe 3 0
  #HELOISIPX external nonzero E:\imail\filters\heloisip\heloisipx.exe 3 0

   

  #SIZE-S   external11CScript E:\IMail\Filters\Size.vbs //B 
//NoLogo //T:2 50,75,100 %WEIGHT% 100000
  #SIZE-M   external12CScript E:\IMail\Filters\Size.vbs //B 
//NoLogo //T:2 50,75,100 %WEIGHT% 1000-100
  #SIZE-L   external13CScript E:\IMail\Filters\Size.vbs //B 
//NoLogo //T:2 50,75,100 %WEIGHT% 1000-200
  #SIZE-XL  external14CScript E:\IMail\Filters\Size.vbs //B 
//NoLogo //T:2 50,75,100 %WEIGHT% 1000-300

   

  #SPAMCHK external weight E:\spamchk\spamchk.exe
  #INV-URIBL external weight E:\INVURIBL\INVURIBL.exe %WEIGHT% %REMOTEIP

Re: [Declude.JunkMail] Global.cfg cleanup

2009-04-28 Thread declude
Serge,

We had a similar situation happen about a week ago.  For us, it turned out that 
one of our clients was infected with a virus/spyware/malware and was sending 
hundreds of thousands of spam messages.  We had WHITELIST AUTH in the 
global.cfg.  Once he authenticated, he was whitelisted.  The system just could 
not keep up with the load.

Once we figured out what was happening it took us a while to identify which 
account it was.  I found that with LOGLEVEL MID, there is a line in the 
DECmmdd.LOG file that has the text [Authenticated:email address].  By 
searching the file and finding an unusually large volume of them from one user 
showed me which account to disable.

Hope this helps,
Don

  - Original Message - 
  From: nick 
  To: declude.junkmail@declude.com 
  Sent: Tuesday, April 28, 2009 12:31 PM
  Subject: Re: [Declude.JunkMail] Global.cfg cleanup


  Serge,

  Are you getting a lot of invalids?  In other words maybe too much traffic for 
some reason. Also are you scanning for virii after junkmail runs?

  -Nick


--
  From: Serge se...@cefib.com
  Sent: Tuesday, April 28, 2009 1:04 PM
  To: declude.junkmail@declude.com
  Subject: Re: [Declude.JunkMail] Global.cfg cleanup


  first thing i did
  tested the DNS and looked at declude logs
  no problem there
  my cpus were not able to handle the traffic, as simple as that


- Original Message - 
From: David Barker 
To: declude.junkmail@declude.com 
Sent: Tuesday, April 28, 2009 4:00 PM
Subject: RE: [Declude.JunkMail] Global.cfg cleanup


Serge, have you checked to make sure you not having DNS issues. DNS causes 
80% of the issues with delays.





David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
dbar...@declude.com







From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Serge
Sent: Tuesday, April 28, 2009 11:51 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Global.cfg cleanup
Importance: High




For about a week my server (2xP3xeon 2.8GHz) was beiing saturated by an 
increase of traffic
100% CPU for hours and ten of thousands of messages in \proc
the servers was working fine for several years
something had to be done, decided to clean global.cfg, and need help 
optimizing



AVafterJM was on
Cleaned global.cfg
left only Sniffer, Zerohour, some builtin tests, and a couple of filters



the server is now stable, but i need some answers to decide what to do next



1- loglevel and logOK have any effects on CPU ?
2- Any DNS tests that are realy important ? (for now, I removed all)
3- Any of the following external tests / Filters are important, or are they 
outdated  ?



TIA



#HELOISIP  external nonzero E:\imail\filters\heloisip\heloisip.exe 3 0
#HELOISIPX external nonzero E:\imail\filters\heloisip\heloisipx.exe 3 0



#SIZE-S   external11CScript E:\IMail\Filters\Size.vbs //B //NoLogo 
//T:2 50,75,100 %WEIGHT% 100000
#SIZE-M   external12CScript E:\IMail\Filters\Size.vbs //B //NoLogo 
//T:2 50,75,100 %WEIGHT% 1000-100
#SIZE-L   external13CScript E:\IMail\Filters\Size.vbs //B //NoLogo 
//T:2 50,75,100 %WEIGHT% 1000-200
#SIZE-XL  external14CScript E:\IMail\Filters\Size.vbs //B //NoLogo 
//T:2 50,75,100 %WEIGHT% 1000-300



#SPAMCHK external weight E:\spamchk\spamchk.exe
#INV-URIBL external weight E:\INVURIBL\INVURIBL.exe %WEIGHT% %REMOTEIP% 0 0

##
#GIBBERISH filter   E:\IMail\Filters\Gibberish.txt   x   0   0
#GIBBERISHSUB  filter   E:\IMail\Filters\GibberishSub.txtx   0   0  

#DYNAMIC   filter   E:\IMail\Filters\Dynamic.txt x   -1   0 
 
#SURBLfilter   E:\IMail\Filters\Surbl\surbl.txt x   1   0  
#OFFENSIVE   filter   E:\IMail\Filters\offensive.txt  x   0   0  

##
# Good attribute Checks, KM00
#FALSE-AOL  filter  E:\Imail\KM00\False_AOL.txt  x 0 0
#FALSE-YAHOO  filter  E:\Imail\KM00\False_Yahoo.txt  x 0 0
#FALSE-HOTMAIL  filter  E:\Imail\KM00\False_Hotmail.txt  x 0 0
#FALSE-TELEFONICA filter  E:\Imail\KM00\False_telefonica.txt x 0 0
#GOOD-TELEFONICA  filter  E:\Imail\KM00\good_telefonica.txt x 0 0
#GOOD_HOTMAIL  filter  E:\Imail\KM00\Good_Hotmail.txt  x 0 0
#GOOD_AOL  filter  E:\Imail\KM00\Good_Aol.txt  x 0 0
#GOOD_Yahoo  filter  E:\Imail\KM00\Good_Yahoo.txt  x 0 0

##
#FILTER-BODYURL  filter  E:\Imail\KM00\IMail_Filter_URLinBody.txt x 0

[Declude.JunkMail]

2008-11-12 Thread Declude Junkmail
IMail Version 9.2. (We have the latest but just haven't installed it yet)

It works great and helped me catch one false positive just this AM, but I had to create the mailbox (folder)manually from the web interface. Does it make a difference if that's a space or a tab between MAILBOX and spam? I used a tab.
MAILBOX spam
MAILBOX spam

Can Mailbox be used multiple times such a one folder used for an IP blacklist filter and another used for PDFs? Such as:
IPBLACKLIst MAILBOX BADIPs
FILTERPDF MAILBOX PDF

~Joe

- Original Message - 
From: David Barker 
To: declude.junkmail@declude.com 
Sent: Wednesday, November 12, 2008 8:07 AM
Subject: RE: [Declude.JunkMail] Wish List: Related to Anyone know a tool...


This is how the Mailbox action should work. The MAILBOX action will send an E-mail to a specific mailbox (folder) for the recipient. For example, you can have E-mail moved to a "spam" mailbox that the user can check via web messaging or IMAP (or POP3, by setting up a special account in the format "user-mailbox"). To use it, just include the name of the mailbox to use -- for example, "WEIGHT10 MAILBOX spam".

Are you using SM or IM ?

David BarkerVP Operations DecludeYour Email security is our business978.499.2933 office978.988.1311 fax[EMAIL PROTECTED]



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Declude JunkmailSent: Wednesday, November 12, 2008 1:21 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Wish List: Related to Anyone know a tool...

It would certainly be nice if the Mailbox command would create a new folder in a user's account.
Such asweight22mailboxjunkmailwhere thefolder named junkmailwould automatically be created.
Or maybe I'm missing something? When I attempted to use this directive in a username.junkmail file, it wouldn't work until I manually created the folder for email to go to.
Maybe someone can point me to a good way to do this.
~Joe

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


Re: [Declude.JunkMail] BINGO!!!

2008-11-12 Thread Declude Junkmail
Yep... you hit the nail on the head... That certainly did the trick. It works now... :))
THANK YOU.. case closed
~Joe-Original Message-From: "David Barker" [EMAIL PROTECTED]Sent 11/12/2008 4:29:33 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail]




I think you may be correct, this could well be a setting in IMail. 

David Barker


From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ncl AdminSent: Wednesday, November 12, 2008 5:23 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail]

It wouldn't create a folder if Imail is set in the domain control panel to not allow that I believe.Message  Mailbox Options Default Maximum Mailbox Size: byte(s) KB MB GB Max. Outbound Message Size: byte(s) KB MB GB Single Message Maximum Size: byte(s) KB MB GB Full Mailbox Notify (percentage): Default Maximum Messages: Full Mailbox Notify Address: Maximum User Count: Current User Count: Sub-mailbox Creation: Create Send to Inbox Bounce Minimum POP Frequency (minutes): At 04:32 PM 11/12/2008 -0500, David Barker wrote: Not sure why it is not creating the folder as it should do. It should not matter if there is a space or tab used. I would suggest opening a ticket with [EMAIL PROTECTED] m so we can troubleshoot the issue with you.David BarkerFrom: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Declude JunkmailSent: Wednesday, November 12, 2008 11:18 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail]IMail Version 9.2. (We have the latest but just haven't installed it yet)It works great and helped me catch one false positive just this AM, but I had to create the mailbox (folder) manually from the web interface. Does it make a difference if that's a space or a tab between MAILBOX and spam? I used a tab.MAILBOX spamMAILBOX spamCan Mailbox be used multiple times such a one folder used for an IP blacklist filter and another used for PDFs? Such as:IPBLACKLIst MAILBOX BADIPsFILTERPDF MAILBOX PDF~Joe- Original Message - From: mailto:[EMAIL PROTECTED]David Barker To: mailto:declude.junkmail@declude.comdeclude.junkmail@declude.com Sent: Wednesday, November 12, 2008 8:07 AMSubject: RE: [Declude.JunkMail] Wish List: Related to Anyone know a tool...This is how the Mailbox action should work. The MAILBOX action will send an E-mail to a specific mailbox (folder) for the recipient. For example, you can have E-mail moved to a "spam" mailbox that the user can check via web messaging or IMAP (or POP3, by setting up a special account in the format "user-mailbox"). To use it, just include the name of the mailbox to use -- for example, "WEIGHT10 MAILBOX spam".Are you using SM or IM ?David BarkerVP Operations DecludeYour Email security is our business978.499.2933 office978.988.1311 fax[EMAIL PROTECTED]From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Declude JunkmailSent: Wednesday, November 12, 2008 1:21 AMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Wish List: Related to Anyone know a tool...It would certainly be nice if the Mailbox command would create a new folder in a user's account.Such asweight22 mailbox junkmailwhere the folder named junkmail would automatically be created.Or maybe I'm missing something? When I attempted to use this directive in a username.junkmail file, it wouldn't work until I manually created the folder for email to go to.Maybe someone can point me to a good way to do this.~Joe---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. -This information is intended only for the use of the individual orentity named above. If you are not the intended recipient, you are hereby notified thatany disclosure, copying, distribution, or action taken in relianceon the contents of these documents is strictly prohibited. If youhave received this information in error, please notify the senderimmediately and arrange for the return or destruction of the document(s).Warning: All e-mail sent to or from this address will be received orotherwise recorded by the Corporate e-mail system and is subject to archival, monitoring or review by, and/or disclosure to, someone otherthan the recipient.---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. 
---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


[Declude.JunkMail] Wish List: Related to Anyone know a tool...

2008-11-11 Thread Declude Junkmail
It would certainly be nice if the Mailbox command would create a new folder in a user's account.
Such as weight22mailboxjunkmailwhere thefolder named junkmailwould automatically be created.
Or maybe I'm missing something? When I attempted to use this directive in a username.junkmail file, it wouldn't work until I manually created the folder for email to go to.
Maybe someone can point me to a good way to do this.
~Joe
---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


[Declude.JunkMail] Problems with AUTOWHITELIST

2008-11-09 Thread declude
I am having an issue with AUTOWHITELIST.  I have a customer who's users use 
the web mail client exclusively.  Because of this, they put each other in 
their address books.  As spammers will spoof email to one user with another 
user from the same domain's address, this becomes a problem.  With 
AUTOWHITELIST ON, all of this type of spam gets whitelisted.  I cannot turn 
the feature off because that is how I let my other customers manage their 
personal whitelist.


I would request that Declude offer an alternative to AUTOWHITELIST.  Give me 
a test whereby I can assign a weight to an email if the sender is in the 
address book.  That way, I can assign an appropriate negative weight to 
allow some of the email to come through but still catch the real bad stuff. 
Once it's whitelisted, nothing else can be done.  This also goes for 
WHITELIST AUTH.  Give us a test whereby I can test for Authentication and do 
whatever I want based on that.


Please help,
Don



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] whitelist auth and spammer infested computer

2008-08-11 Thread declude
In this regard, I would like to see an alternative to Whitelist Auth.  Create 
a test for Authentication.  That way we can add a negative weight rather than 
whitelist an email.

Just a thought,
Don

  - Original Message - 
  From: Harry vanderzand 
  To: declude.junkmail@declude.com 
  Sent: Monday, August 11, 2008 8:25 PM
  Subject: [Declude.JunkMail] whitelist auth and spammer infested computer


  I have a situation where a client's computer in their network got infected by 
a spammer and 100,000 email got send out over the weekend

   

  It sure caused a big mess.

   

  How can I prevent this when I am using whitelist auth or do I need to turn 
that off?  

   

  I have all the latest software from Declude

   

  Should I be using Declude Hijack?

   

  I do have a few clients that do legitimate mass mailings from time to time.

   

  Any help would be very appreciated.

   

  Harry Vanderzand

  NEW ADDRESS Effective Jan 24, 2008

  Intown Internet

  117 Ruskview Road

  Kitchener, ON, N2M 4S1

  519-741-1222

   


  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail. The archives can be found
  at http://www.mail-archive.com. 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Tip of the day??

2008-05-14 Thread Declude Junkmail
Ping. kinda quiet arounf here... 
Anyone got any tips on blocking the business loan junkmail?
~Joe
---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


[Declude.JunkMail] ENVFROM test

2008-02-28 Thread declude

I could not find this test in the Junkmail Manual.  I have a customer who is
getting false negatives with this test.  I wanted to see what triggers this
but could not find any documentation.  Could someone please fill me in?

Thanks,
Don



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Filter for Bounce messages

2008-02-18 Thread declude
I am looking for a filter that will allow me to delete bounce type 
messages.  We are getting on internal blacklists (Bellsouth, Comcast) from 
what I believe is an over abundance of bounce messages.  I would like to 
filter these out on my server.  If anyone can help, I would appreciate it.


Thanks,
Don



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x

2007-06-08 Thread declude
I too have would love to see a solution for this.  I have talked to doctor's 
offices that need this type of functionality for their email communications 
of patient information.  Usually between two doctors or a doctor's office 
and a hospital.


I will keep watching this thread with great interest.

Don

- Original Message - 
From: Dave Doherty [EMAIL PROTECTED]

To: declude.junkmail@declude.com
Sent: Thursday, June 07, 2007 7:42 PM
Subject: Re: [Declude.JunkMail] Looking for an Secure Email Solution that 
works with Imail Premium 2006.2 and declude 4.x




Interesting. I wonder how it works under the hood.

You send securely to anyone, and they create a password and read the mail. 
Or at least that's what I got out of the NetSol presentation.


As the sender, you add a small plugin to Outlook / OE, but the recipient 
doesn't need to do anything other than create the password. That doesn't 
sound very secure on the receiving end to me. I imagine the encryption 
works fine for keeping people from reading the mail in transit, but I 
don't see how you can be sure without a handshake of some kind how you 
know the intended recipient is the one who got the message.


-Dave Doherty
Skywaves, Inc.
97 Webster Street
Worcester, MA 01603
508-425-7176



- Original Message - 
From: Howard Smith (N.O.R.A.D.) [EMAIL PROTECTED]

To: declude.junkmail@declude.com
Sent: Thursday, June 07, 2007 5:35 PM
Subject: RE: [Declude.JunkMail] Looking for an Secure Email Solution that 
works with Imail Premium 2006.2 and declude 4.x




Here are examples of solutions offered by other ISP:

https://sr.securemail.att.com/securemail/

http://www.networksolutions.com/email-account/email-security.jsp


Howard Smith
.



-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of 
Darrell

([EMAIL PROTECTED])
Sent: Thursday, June 07, 2007 4:56 PM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Looking for an Secure Email Solution that
works with Imail Premium 2006.2 and declude 4.x

Are you looking for a solution like the PGP plug in's for Outlook or
something else?

Darrell

---
Check out http://www.invariantsystems.com for utilities for Declude and
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG Integration, and Log Parsers.

Howard Smith (N.O.R.A.D.) wrote:



 I am an ISP that have customers in need of an Secure Email Solution
such as a outlook plug-in , similar to what ATT and network solutions
offer their email customers . Do anyone know of any company having an
offering for ISP?



Thanks



Howard









Howard Smith


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

[.This E-mail scanned for viruses by www.SecureTrek.com, a N.O.R.A.D.
Company-v2ta]






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.








---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] New Reporting Tool

2006-12-12 Thread Lists - Declude JunkMail
I've got ActiveState Perl 5.8.8 bld 819 installed and working.  I use
perl for all sorts of other scripts with no issues.
 
I'm not sure what Regex is.  I thought it was part of your code.  I
don't see a perl package install called Regex.



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS -
Systems Eng. (Karl Drugge)
Posted At: Monday, December 11, 2006 4:33 PM
Posted To: Lists - Declude JunkMail
Conversation: [Declude.JunkMail] New Reporting Tool
Subject: RE: [Declude.JunkMail] New Reporting Tool



What's Regex ? Do you have PERL installed ?

 

A 20 meg log file shouldn't matter...

 

Karl Drugge

 

 

 

 

 

 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Lists - Declude JunkMail
Sent: Thursday, December 07, 2006 4:29 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] New Reporting Tool

 

Thanks so much for this!

 

I tried it out and it errors out as follows:

 

 File path : g:/logarchive/
 Processing a single day

 

 Opening File : g:/logarchive/dec1206.log


.

 

 Sorting arrays and cleaning up data
Unmatched [ in regex; marked by -- HERE in m/[ -- HERE weight/ at
f:\tools\dis
tro-declog.pl line 443.

 

My log is 20mb if that matters.

 



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS -
Systems Eng. (Karl Drugge)
Posted At: Thursday, December 07, 2006 1:53 PM
Posted To: Lists - Declude JunkMail
Conversation: New Reporting Tool
Subject: [Declude.JunkMail] New Reporting Tool

 

The newest PERL script. Slices, dices, etc ... Throw it in a directory,
edit a few environment variables at the top of the script, dump in a few
Declude logs, run it, enjoy. Requires PERL, of course.

 

Added two command line switches : 'day' and 'week' . Day does the
previous day, week does the previous week. No command line switch, and
you do all the logs in the directory. This can be memory
intensive... You have been warned ! My own server, with 11-13k log
files, consumes 700+ megs of memory when doing an entire month. Folks
with larger files might want to think about doing this many files at
once.

 

Karl Drugge

 

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] New Reporting Tool

2006-12-07 Thread Lists - Declude JunkMail
Thanks so much for this!
 
I tried it out and it errors out as follows:
 
 File path : g:/logarchive/
 Processing a single day
 
 Opening File : g:/logarchive/dec1206.log


.
 
 Sorting arrays and cleaning up data
Unmatched [ in regex; marked by -- HERE in m/[ -- HERE weight/ at
f:\tools\dis
tro-declog.pl line 443.
 
My log is 20mb if that matters.



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS -
Systems Eng. (Karl Drugge)
Posted At: Thursday, December 07, 2006 1:53 PM
Posted To: Lists - Declude JunkMail
Conversation: New Reporting Tool
Subject: [Declude.JunkMail] New Reporting Tool



 

The newest PERL script. Slices, dices, etc ... Throw it in a directory,
edit a few environment variables at the top of the script, dump in a few
Declude logs, run it, enjoy. Requires PERL, of course.

 

Added two command line switches : 'day' and 'week' . Day does the
previous day, week does the previous week. No command line switch, and
you do all the logs in the directory. This can be memory
intensive... You have been warned ! My own server, with 11-13k log
files, consumes 700+ megs of memory when doing an entire month. Folks
with larger files might want to think about doing this many files at
once.

 

Karl Drugge

 

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] declude not modifying subject line

2006-11-09 Thread David Franco-Rocha [ Declude ]

Kevin,

I am very well aware of what byte sequences constitute the end of a line. 
However, if the problem were this simple it would have been fixed long ago. 
Contrary to what some have said here, we have seen many instances where 
IMail likewise appends its headers to the end of the message.


The broken line terminators are not necessarily of the same type in a given 
message. In addition, they are not necessarily adjacent to each other (with 
leading whitespace or unprintable characters on a line). What may appear 
obvious to the eye is often not at all what exists behind the scene. You may 
look at a message and be certain where the headers end and the body begins 
(the separating blank line). However, that message may not necessarily 
contain two consecutive EOL sequences of any type anywhere.


David Franco-Rocha

- Original Message - 
From: Kevin Bilbee [EMAIL PROTECTED]

To: declude.junkmail@declude.com
Sent: Wednesday, November 08, 2006 5:45 PM
Subject: RE: [Declude.JunkMail] declude not modifying subject line


I do not understand why you need to rewrite the message beyond what you 
already do? Just determine the end of headers properly then rewrite the 
message with your headers in the proper location. You already rewrite the 
message when adding headers so why would it take any longer to properly 
detect the end of headers.


If you have two LF sequences next to each other ignoring the CR then you 
have the end of headers.


For example if you have

CRLFCRLF

OR

LFCRLFCR

OR

LFLF

I have never seen a message use CR alone for an end of line.

There are two LF bytes in each sequence ignore the CR bytes. Then when 
writing out the message with the Declude headers include the original byte 
sequences for each line. And the Declude lines should have the proper CRLF 
sequences.



My two cents!


Kevin Bilbee






1. I don't like to keep going in circles on this. If it was as easy as
just
fix it there would be no issue. Please understand that this is a lot
more
complex than you may realize, we are considering making the fixing of
line
terminators as an optional feature to be turned on/off because of a
potential performance degradation of rewriting the messages.







---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com. 




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] ping

2006-06-13 Thread David Franco-Rocha [ Declude ]



pong

  - Original Message - 
  From: 
  Shaun Patterson 
  
  To: declude.junkmail@declude.com 
  
  Sent: Tuesday, June 13, 2006 4:06 
PM
  Subject: [Declude.JunkMail] ping
  ping ---This E-mail came from the Declude.JunkMail 
  mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype 
  "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.


Re: [Declude.JunkMail] Whitelisted address getting trapped anyway

2006-03-21 Thread David Franco-Rocha [ Declude ]



The WHITELIST FROM directive uses the sender of the 
message as specified in the message envelope (MAIL FROM:[EMAIL PROTECTED]), which may or may 
not correspond to the From: line in the headers of the message itself. In this 
case, it did not.

The filters operate on the message file, not on the 
envelope. That is why you can have different results like in this case. The 
X-Declude-Sender: x-header is the sender as specified in the 
envelope.

David Franco-Rocha
Declude Technical / Engineering


  - Original Message - 
  From: 
  Scott 
  Fisher 
  To: Declude.JunkMail@declude.com 
  
  Sent: Thursday, March 16, 2006 12:00 
  PM
  Subject: Re: [Declude.JunkMail] 
  Whitelisted address getting trapped anyway
  
  You might need WHITELIST from .xx.com 
  (the smtp sender address looks to be in the fromat [EMAIL PROTECTED])
  
- Original Message - 
From: 
Harry 
Vanderzand 
To: Declude.JunkMail@declude.com 

Sent: Saturday, March 18, 2006 10:17 
AM
Subject: [Declude.JunkMail] Whitelisted 
address getting trapped anyway

have an addres that I have 
whitelisted

WHITELIST FROM @.com in 
global.cfg

Yet somehow it got marked as spam

There was a matchin a filter file

How is this possible?

Should whitelisting not take 
precedence?

See headers below

Received: from mailface.roving.com 
[63.251.135.75] by intown.net with ESMTP (SMTPD-8.22) id A17A068C; 
Fri, 17 Mar 2006 14:43:54 -0500Received: from ws06 (unknown 
[10.200.200.61])by mailface.roving.com (Postfix) with ESMTP id 
8224448C003for [EMAIL PROTECTED]; Fri, 17 
Mar 2006 14:42:37 -0500 (EST)Message-ID: [EMAIL PROTECTED]Date: 
Fri, 17 Mar 2006 14:43:53 -0500 (EST)From: Ken Weinberg [EMAIL PROTECTED]Reply-To: 
[EMAIL PROTECTED]To: [EMAIL PROTECTED]Subject: We 
Need Your InputMIME-Version: 1.0Content-Type: multipart/alternative; 
boundary="=_Part_13064663_1921543487.1142624633764"X-Roving-Queued: 
20060317 02:43:53.764X-Mailer: Roving Constant Contact 0 (http://www.constantcontact.com)X-Return-Path-Hint: 
[EMAIL PROTECTED]X-Roving-ID: 
1101247029557X-Lumos-SenderID: 1011230829116X-Roving-CampaignId: 
1101247029557X-Roving-StreamId: 0X-Declude-Sender: [EMAIL PROTECTED] 
[63.251.135.75]X-Declude-Spoolname: D11790199df6a.smdX-Note: 
Total spam weight of this E-mail is 22.X-Note: Spam Tests Failed: 
FIVETEN-BULK [3], MYFILTER [19], WEIGHT10 [10], WEIGHT11 [11], WEIGHT12 
[12], WEIGHT15 [15], WEIGHT19 [19]X-Note: REMOTEIP: 
63.251.135.75X-Note: REVDNS: mailface.roving.comX-Note: FROM: [EMAIL PROTECTED]X-Note: 
TO: X-Spam-Tests-Failed: FIVETEN-BULK, MYFILTER, WEIGHT10, WEIGHT11, 
WEIGHT12, WEIGHT15, WEIGHT19 [22]X-RCPT-TO: [EMAIL PROTECTED]Status: 
UX-UIDL: 428964605X-IMail-ThreadID: 11790199df6a



Harry Vanderzand inTown Internet  
Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 
1L2519-741-1222




[Declude.JunkMail] SBC contact phone number

2006-03-01 Thread declude
Does anyone have a contact phone number for the abuse department at 
SBCGlobal.Net?  We got on their blacklist somehow and having been trying to 
get off.  The log entry says to email [EMAIL PROTECTED]  I emailed 
that address with the pertinent IP info but don't get a response back.


Any help would be appreciated,
Don 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Headers / MIME Attachments

2006-02-20 Thread David Franco-Rocha [ Declude ]
With reference to the problem reported regarding the detection of 
attachments in email, please be advised that we are looking into this issue 
today.


David Franco-Rocha
Declude Technical / Engineering


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] AVAFTERJM

2006-02-02 Thread David Franco-Rocha [ Declude ]
When scanning for viruses after JunkMail through use of the above directive, 
the following rule applies:


All email will continue to be scanned for viruses EXCEPT those emails having 
a final JunkMail action of:


HOLD
DELETE

David Franco-Rocha
Declude Technical / Engineering

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] ANN: SMTP Gateway

2006-01-26 Thread Lists - Declude JunkMail
I see Alligate as an excellent compliment to our Imail 8.15/Declude 1.82
setup.  

I for one was thankful to learn about it through this list, as we've
been struggling with finding an SMTP filtering gateway to sit in front
of our working, stable Imail/Declude setup.  I didn't have any prior
experience with Alligate or Brian so my reading of the announcement was
strictly informational.

I don't see Alligate being a competitor to Imail or SmarterMail.  It
doesn't provide pop3, imap, webmail, or anything of the things that our
customers call their mail server.  

It could compete against Declude.  Except it works at the initial SMTP
connection level (Pre processing) whereas Declude works after the SMTP
connection is complete (Post processing).  If Declude offered a stable
pre-processing solution, I for one would sign up immediately.  As I am
not aware of any information from Declude stating they have a solution
for this, we've all had to look elsewhere (5XX, Vamsoft, IMGate, etc).

Dictionary attacks are killing us, as is the volume of spammers hitting
our Imail box.  ANYTHING to minimize what Imail/Declude has to process,
without costing and arm and a leg, or a forklift upgrade is welcome!

Alligate is a step above the 5XXSINK, by including tarpitting, detailed
text logs, secondary SMTP AUTH port, connection blocking, etc.  To me
it's the right solution at the right time.

IMGate wouldn't work for us because my staff doesn't do *nix, and I
don't want to be the only one to support the box ;)  I've got to sleep
sometimes.

Since we let our Imail support lapse and are holding judgment on
SmarterMail until v3 is released, we're in a technical holding pattern
while the spammers continue to assault our servers.  

I don't think I'm alone, which means there is an opportunity for someone
and a potential market.  While I love all this stuff, I have to eat too,
and don't fault anyone for turning my pain into their financial gain so
they can eat, if the value proposition is right.

R. Scott Perry got assaulted on the Imail list repeatedly for years for
pushing his wares.  Imail had a gap-in-functionality, Declude seized the
moment and profited by patching that gap.  I was thankful for his
repeated input/arguments and purchased his product - against Imail's own
later offering.  

I hope Declude isn't struggling - they are vital to our business.  I
also hope that others aren't silent about other available options,
competitive or otherwise.  This list is so great for learning - where
else can one go to learn more about real-world, ISP-level email
delivery?

Sorry for the ramble, just had to put my .02 in...
 
Maintain,
Babul
 
(210) 696-1130, ext. 102
(210) 696-0572 [fax]
Text Pager Email: [EMAIL PROTECTED]
 
The Montopolis Group, Ltd. - www.montopolis.com 
Building stronger businesses... with Technology


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Sanford
Whiteman
Posted At: Wednesday, January 25, 2006 5:35 PM
Posted To: Lists - Declude JunkMail
Conversation: [Declude.JunkMail] ANN: SMTP Gateway
Subject: Re: [Declude.JunkMail] ANN: SMTP Gateway


I  can't  believe  what is apparently permissible on this list. Has no
one  realized that this product is a commercial competitor to IMail or
SmarterMail,  with  no  relevance  to Declude? Don't try that mail is
stopped before Declude has to deal with it attempt at association. It
is  what  it  is.  A  separate,  commercial  anti-spam gateway with no
integral link to the now-struggling Declude.

At  least  Len  Conrad's  free  cookbook for IMGate has the exact same
features as the one he charges $500 to install. That's always been the
redeeming quality of his plugging model. Guess the game has changed.

For everyone who's silently letting this go: how'd you feel if Vamsoft
started  advertising  here?  Do you think there aren't other people on
the list who've kept quiet about similar products and services?

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
 
http://www.imprimia.com/products/software/freeutils/SPAMC32/download/rel
ease/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail
Aliases!
 
http://www.imprimia.com/products/software/freeutils/exchange2aliases/dow
nload/release/
 
http://www.imprimia.com/products/software/freeutils/ldap2aliases/downloa
d/release/

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED

RE: [Declude.JunkMail] OT - Server Watching.

2006-01-23 Thread Lists - Declude JunkMail



Or at least half ;)

Maintain,Babul

(210) 696-1130, ext. 102(210) 
696-0572 [fax]Text Pager Email: [EMAIL PROTECTED]

The Montopolis Group, Ltd. - www.montopolis.com "Building 
stronger businesses... with Technology"



From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Nick 
HayerPosted At: Monday, January 23, 2006 5:53 PMPosted To: 
Lists - Declude JunkMailConversation: [Declude.JunkMail] OT - Server 
Watching.Subject: Re: [Declude.JunkMail] OT - Server 
Watching.John T (Lists) wrote: 

  
  

   

  BTW, what server 
  did DAD stand for? (It never made it off the design board, of if it did it 
  never became a beta, only an alpha.)well 
with family court so prevalent I would guess MOM got all of DAD's 
stuff?-Nick :)

  
  
  
  John 
  T
  eServices For 
  You
  
  
  -Original 
  Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]] 
  On Behalf Of Colbeck, 
  AndrewSent: 
  Monday, 
  January 23, 2006 
  2:59 
  PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT - 
  Server Watching.
  
  I find that companies 
  that will pay for Microsoft Exchange Server and Client licences (and other 
  BackOffice products) wouldn't blink at the cost of MOM; and the pricing is 
  staggered so that you can buy as much utility as you can realistically 
  implement.
  
  What I find 
  attractive is not the application management so much as the Event Log 
  gathering and reporting.
  
  Weirdly enough, it's 
  not the large shops that I've seen deploying MOM, but rather, it's the small 
  to medium sized shops that don't have the in-house expertise and find MOM 
  cheaper than outsourcing the high-end technologists. In particular, MOM 
  providesthe basic "root cause analysis" that junior technologists lack, 
  e.g. so that MOM can tell thehelp deskthat the webserver outage is 
  really a DNS problem.
  
  Andrew 
  8)
  
  




From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]] 
On Behalf Of MattSent: Monday, January 
23, 2006 2:46 
PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] OT - 
Server Watching.
Maybe that's because it costs an arm and a 
leg: http://www.microsoft.com/mom/howtobuy/default.mspxThis 
is really remote management software and not just simply monitoring and 
reporting. Probably makes sense in big enterprises but not for small 
businesses.MattColbeck, Andrew wrote: 
I'm quite surprised that nobody has named:http://www.microsoft.com/mom/default.mspxMicrosoft MOM yet. It's quite popular in Microsft shops.Andrew 8)  
-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Colbeck, AndrewSent: Monday, January 23, 2006 11:45 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT - Server Watching.WhatsUp someversionorother http://www.ipswitch.comNagios (Open Source, with a *nix bent) http://www.nagios.org/Andrew 8) 
  -Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED]] On Behalf Of Jerod M. BennettSent: Monday, January 23, 2006 11:25 AMTo: Declude.JunkMail@declude.comSubject: [Declude.JunkMail] OT - Server Watching.Hey,I know this is off topic, but I respect the knowledge and opinions of 
  the people on this list.What software / services do you guys use to watch your servers for up/down status?-Jerry---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---[This E-mail was scanned for viruses by Declude EVA www.declude.com]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. 


Re: [Declude.JunkMail] Hardware Issue

2005-12-27 Thread declude

David,

Thanks for the response but I only understand part of your answer.


An expired license agreement is not equal to an expired license to run the
software.


I know when I have an expired license agreement but when does my license to 
run the software expire?


Don

- Original Message - 
From: David Franco-Rocha [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Tuesday, December 27, 2005 5:50 AM
Subject: Re: [Declude.JunkMail] Hardware Issue



An expired license agreement is not equal to an expired license to run the
software. It simply does not allow you to update the software, but you can
continue to run the version you have been running.

David Franco-Rocha
Declude Technical / Engineering

- Original Message - 
From: [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Tuesday, December 27, 2005 1:17 AM
Subject: Re: [Declude.JunkMail] Hardware Issue


I too have stayed at the 1.82 version while keeping my service contract 
up

to date.  I am not ambitious enough to work through all the 2.x and 3.x
issues.  A heart felt thank you goes out to those of you who are.

With the new licensing policy in 3.x, what happens when I decide not to
renew the service agreement?  Will all the Declude software I have stop
working?  Am I paying for it's usage only while I have a valid service
agreement?  It used to be that the service agreement allowed me major
version upgrades when they were available without paying an additional

fee.

Am I now paying for a license to use the software?

Don

- Original Message - 
From: Darin Cox [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Monday, December 26, 2005 3:03 PM
Subject: Re: [Declude.JunkMail] Hardware Issue


 Bottom line is we were told if the license server was offline we would

not
 be impacted.  It is seeming now that that statement was not true, 
 though

I

 should withhold judgement until we hear exactly why this had an impact.
 Very glad I've stuck with 1.82 at the moment, though we had a service
 agreement that entitled us to upgrade to 3.x.

 I would certainly like to know what will be done to the software

licensing

 to make sure this problem does not happen again.  Otherwise, since mail

is

 considered a critical system, Declude needs to staff 24/7 to address
 problems as they arise.

 Darin.


 - Original Message - 
 From: John T (Lists) [EMAIL PROTECTED]

 To: Declude.JunkMail@declude.com
 Sent: Monday, December 26, 2005 3:50 PM
 Subject: RE: [Declude.JunkMail] Hardware Issue


 True, very true. But like Andy or Darrell said, they should have done a
 test
 by pulling the plug on their license server during the week when they

were

 watching it to see what would happen.

 But of course, hind sight is always 20/20 and Monday morning
 quarterbacking
 is highly overrated. ;-)

 John T
 eServices For You

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Don Brown
 Sent: Monday, December 26, 2005 12:44 PM
 To: Declude.JunkMail@declude.com
 Subject: Re: [Declude.JunkMail] Hardware Issue

 Software and hardware breaks.  Nothing is bulletproof.  Some are just
 better than others.


 Monday, December 26, 2005, 11:50:20 AM, John T (Lists)
 [EMAIL PROTECTED] wrote:
 JTL
 JTL
 JTL
 JTL OUCH!
 JTL
 JTL
 JTL
 JTL Gee, I thought this is the kind of thing that we were told no way
 would happen.
 JTL
 JTL
 JTL
 JTL
 JTL John T
 JTL
 JTL eServices For You
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL -Original Message-
 JTL  From: [EMAIL PROTECTED]
 JTL [mailto:[EMAIL PROTECTED] On Behalf Of David
 Franco-
 Rocha
 JTL  Sent: Monday, December 26, 2005 9:29 AM
 JTL  To: Declude.JunkMail@declude.com
 JTL  Cc: Declude.Virus@declude.com
 JTL  Subject: [Declude.JunkMail] Hardware Issue
 JTL
 JTL
 JTL
 JTL
 JTL Due to the long holiday weekend, we have been away from the
 JTL office for a few days. Unfortunately it has come to our attention
 JTL that there could be a problem with key validation on the server
 JTL there. After some testing, we have determined that there is in
 JTL fact a hardware issue that we expect to have resolved today.
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL We appreciate that you have taken the time to bring this matter
 JTL to our attention and appreciate your patience while we rectify
 JTL the situation. We will once again post to this list when the 
 issue

 has been
 corrected.
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL Declude Technical / Engineering
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL
 JTL


 
 Don Brown - Dallas, Texas USA Internet Concepts, Inc.
 [EMAIL PROTECTED]   http://www.inetconcepts.net
 (972) 788-2364Fax: (972) 788-5049
 

 ---
 [This E-mail was scanned for viruses by Declude EVA www.declude.com]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http

Re: [Declude.JunkMail] Hardware Issue

2005-12-26 Thread declude
I too have stayed at the 1.82 version while keeping my service contract up 
to date.  I am not ambitious enough to work through all the 2.x and 3.x 
issues.  A heart felt thank you goes out to those of you who are.


With the new licensing policy in 3.x, what happens when I decide not to 
renew the service agreement?  Will all the Declude software I have stop 
working?  Am I paying for it's usage only while I have a valid service 
agreement?  It used to be that the service agreement allowed me major 
version upgrades when they were available without paying an additional fee. 
Am I now paying for a license to use the software?


Don

- Original Message - 
From: Darin Cox [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Monday, December 26, 2005 3:03 PM
Subject: Re: [Declude.JunkMail] Hardware Issue



Bottom line is we were told if the license server was offline we would not
be impacted.  It is seeming now that that statement was not true, though I
should withhold judgement until we hear exactly why this had an impact.
Very glad I've stuck with 1.82 at the moment, though we had a service
agreement that entitled us to upgrade to 3.x.

I would certainly like to know what will be done to the software licensing
to make sure this problem does not happen again.  Otherwise, since mail is
considered a critical system, Declude needs to staff 24/7 to address
problems as they arise.

Darin.


- Original Message - 
From: John T (Lists) [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Monday, December 26, 2005 3:50 PM
Subject: RE: [Declude.JunkMail] Hardware Issue


True, very true. But like Andy or Darrell said, they should have done a 
test

by pulling the plug on their license server during the week when they were
watching it to see what would happen.

But of course, hind sight is always 20/20 and Monday morning 
quarterbacking

is highly overrated. ;-)

John T
eServices For You


-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Don Brown
Sent: Monday, December 26, 2005 12:44 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Hardware Issue

Software and hardware breaks.  Nothing is bulletproof.  Some are just
better than others.


Monday, December 26, 2005, 11:50:20 AM, John T (Lists)
[EMAIL PROTECTED] wrote:
JTL
JTL
JTL
JTL OUCH!
JTL
JTL
JTL
JTL Gee, I thought this is the kind of thing that we were told no way

would happen.

JTL
JTL
JTL
JTL
JTL John T
JTL
JTL eServices For You
JTL
JTL
JTL
JTL
JTL
JTL -Original Message-
JTL  From: [EMAIL PROTECTED]
JTL [mailto:[EMAIL PROTECTED] On Behalf Of David

Franco-

Rocha
JTL  Sent: Monday, December 26, 2005 9:29 AM
JTL  To: Declude.JunkMail@declude.com
JTL  Cc: Declude.Virus@declude.com
JTL  Subject: [Declude.JunkMail] Hardware Issue
JTL
JTL
JTL
JTL
JTL Due to the long holiday weekend, we have been away from the
JTL office for a few days. Unfortunately it has come to our attention
JTL that there could be a problem with key validation on the server
JTL there. After some testing, we have determined that there is in
JTL fact a hardware issue that we expect to have resolved today.
JTL
JTL
JTL
JTL
JTL
JTL
JTL
JTL We appreciate that you have taken the time to bring this matter
JTL to our attention and appreciate your patience while we rectify
JTL the situation. We will once again post to this list when the issue

has been

corrected.
JTL
JTL
JTL
JTL
JTL
JTL
JTL
JTL Declude Technical / Engineering
JTL
JTL
JTL
JTL
JTL
JTL
JTL
JTL
JTL



Don Brown - Dallas, Texas USA Internet Concepts, Inc.
[EMAIL PROTECTED]   http://www.inetconcepts.net
(972) 788-2364Fax: (972) 788-5049


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] HoldAnalyzer

2005-12-07 Thread Declude
Darin, I am extremely interested in your app ... Will you be announcing the
release via this forum?

TIA
Doris Dean

- Original Message - 
From: Darin Cox [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Tuesday, December 06, 2005 5:12 PM
Subject: Re: [Declude.JunkMail] HoldAnalyzer


 Now I remember your app.  Sounds great.  Unfortunately, our users don't
want
 spam summary messages like this, so we review for them.  Fortunately
they're
 happy to pay a little extra for the service of not seeing spam at all, and
 are satisfied with our review intervals.  Our app is very similar to
 SLSoft's old SpamReview app, but adds customizable actions on messages,
like
 adding to a kill file, negative weight list, false positive report, etc.

 Darin.


 - Original Message - 
 From: Kevin Bilbee [EMAIL PROTECTED]
 To: Declude.JunkMail@declude.com
 Sent: Tuesday, December 06, 2005 6:56 PM
 Subject: RE: [Declude.JunkMail] HoldAnalyzer


 You create a configuration file with the DHR.exe and then schedule it to
run
 with task Scheduler, (dhrcon.exe DHRconfig.xml). It then sends and email
to
 all users with held email, one email per timeperiod you have configured,
the
 minimum is one day. In the email it gives them basic information about the
 messages headers like Envelope Sender, From Sender, Tests Failed, Date and
 Time  the message arrived, and the subject of the message.

 Then there is a link after each message summary in the email the user
clicks
 to recover the message. If the link is clicked the message will be
requeued
 and the message source sent to the admin email as configured.

 At this time they can not log in but if you saw last month I posted a .net
 utility to encrypt and decrypt imail passwords. This is in preperation to
 allow for that functionality next year along with the daily email. This
way
 users can go and check the messages held for them anytime they want or
just
 wait til the next day for the email.

 If you can please let me know exactly what was unclear about the
 documentation so I can fix it. Rewrite it if you want.
 Kevin Bilbee



  -Original Message-
  From: [EMAIL PROTECTED]
  [mailto:[EMAIL PROTECTED] Behalf Of Serge
  Sent: Tuesday, December 06, 2005 3:21 PM
  To: Declude.JunkMail@declude.com
  Subject: Re: [Declude.JunkMail] HoldAnalyzer
 
 
  Hi Kevin,
  you mean an asp app where users can log in and check the hold mail ?
  how does it exactly work ?
  do you have a single hold dir for all users ? that will not work
  in an ISP
  environment .
  or is there a way to filter user access to only his own messages ?
  TIA
 
  - Original Message -
  From: Kevin Bilbee [EMAIL PROTECTED]
  To: Declude.JunkMail@declude.com
  Sent: Tuesday, December 06, 2005 9:25 PM
  Subject: RE: [Declude.JunkMail] HoldAnalyzer
 
 
   With a Hold Analyzer you know longer have to do that for the user.
Users
   recover their own messages. Having users recover their own
  messages lets
   the
   admin know what the recipient thinks is spam and what is not
  spam. I find
   it
   difficult to read their minds. when I did this in the past I made
   incorrect
   assumptions on what was spam.
  
  
  
   Kevin Bilbee
  
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] Behalf Of Serge
   Sent: Tuesday, December 06, 2005 1:04 PM
   To: Declude.JunkMail@declude.com
   Subject: Re: [Declude.JunkMail] HoldAnalyzer
  
  
   we use imail spool viewer v1.2.4
   has all the options we need (check envelope, header, delete, move
   to spool,
   ...)
   great tool
  
  
   ---
   [This E-mail was scanned for viruses by Declude EVA www.declude.com]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
   ---
   [This E-mail scanned for viruses by Declude Virus]
  
  
  
  
   ---
   [This E-mail scanned for viruses by Declude Virus]
  
   ---
   [This E-mail was scanned for viruses by Declude EVA www.declude.com]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
   type unsubscribe Declude.JunkMail.  The archives can be found
   at http://www.mail-archive.com.
  
 
 
  ---
  [This E-mail was scanned for viruses by Declude EVA www.declude.com]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type unsubscribe Declude.JunkMail.  The archives can be found
  at http://www.mail-archive.com.
  ---
  [This E-mail scanned for viruses by Declude Virus]
 
 
 

 ---
 [This E-mail scanned for viruses by Declude Virus]

 ---
 [This E-mail was scanned for viruses by Declude EVA www.declude.com]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED

[Declude.JunkMail] Fixed: SPF False Positives

2005-11-08 Thread David Franco-Rocha [ Declude ]
The issue of false positives with the SPF test, reported by a couple of 
people, has been fixed. This will be included in the next release of the 
software (post 3.0.5.18).


David Franco-Rocha
Declude Technical / Engineering


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Excluding domains form tests

2005-11-08 Thread David Franco-Rocha [ Declude ]



Dean,

There is currently no way to exclude emails from 
being scanned by Declude. All emails are checked; only the actions taken can 
vary by domain. We may provide finer tuning of that as a future enhancement. 


David Franco-Rocha
Declude Technical / Engineering

  - Original Message - 
  From: 
  Dean Lawrence 
  
  To: declude.junkmail@declude.com 
  
  Sent: Tuesday, November 08, 2005 9:04 
  AM
  Subject: [Declude.JunkMail] Excluding 
  domains form tests
  
  I thought that I had this working properly, but now I'm not too sure. My 
  setup is to by default not to have mail scanned by Junkmail and to only scan 
  domains that I have set-up per-domain rules. All of my tests are defined in my 
  global.cfg file and all test actions in my master $default$.junkmail are 
  commented out. Then in in each domain directory, I have a separate 
  $default$.junkmail mail which defines the action for each individual 
  domain.
  
  What I am seeing in my logs though, is that every message that hits my 
  Imail server (8.21) is being tested. The only difference from the per-domain 
  emails is that the action for all of the tests is IGNORE. Other than 
  whitelisting all of my other domains, is there a way to save on processing by 
  not having these message evaluated? I am running Junkmail 3.05.18.
  
  Thanks,
  
  Dean-- 
  __Dean Lawrence, 
  CIO/PartnerInternet Data Technology888.GET.IDT1 ext. 701 * fax: 
  888.438.4381http://www.idatatech.com/Corporate 
  Internet Development and Marketing Specialists 


Re: [Declude.JunkMail] Address Not Whitelisted?

2005-11-04 Thread declude

I am missing the thought process.

Why is counterweighting by a large number so much better than whitelisting 
if both achieve the same purpose?


Just asking,
Don

- Original Message - 
From: Travis Sullivan [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Friday, November 04, 2005 8:59 AM
Subject: Re: [Declude.JunkMail] Address Not Whitelisted?


Exactly, counterweight works so much better.  Whitelist at the last 
possible option.


I counterweight everything and don't have a single whitelist entry.

Travis

- Original Message - 
From: Darin Cox [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Thursday, November 03, 2005 7:24 PM
Subject: Re: [Declude.JunkMail] Address Not Whitelisted?


We've found that to be too general...  You might try a regex or 
phrase-based
whitelist that looks for unique text in the newsletter to whitelist it 
(or

rather counterweight it).

Darin.


- Original Message - 
From: Tyler Jensen [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Thursday, November 03, 2005 7:01 PM
Subject: RE: [Declude.JunkMail] Address Not Whitelisted?


Try

Whitelist from @returns.bulk.yahoo.com

Or

Whitelist from @yahoo-inc.com

I have one of these to allow fantasy football and baseball emails through 
to
my franchisees. I have not seen any spam whitelisted because of this 
setup
and I have been using it for at least a year. It may not be the best way 
but

it has worked for me.

Tyler



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of mail-lists
Sent: Thursday, November 03, 2005 6:36 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Address Not Whitelisted?


 I'm at my wits end.. These Yahoo news alerts are legitimate messages, 
but

I can't seem to whitelist them.

 So far in my global.cf I've added WHITELIST FROM settings to the 
following
addresses, but they still don't get to the recipient! 
[EMAIL PROTECTED],
[EMAIL PROTECTED], and [EMAIL PROTECTED]  Anybody 
know

what else I can do to allow these e-mails in?

 Thanks!

 Cavell

Received: from n10.bulk.scd.yahoo.com [66.218.66.189] by
cottonwoodfinancial.com
 (SMTPD-8.21) id A1190444; Thu, 03 Nov 2005 13:12:25 -0600
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws; s=ginc1024;
d=yahoo-inc.com;

b=p2OiCTjMDGenNXSS96zFPWPUJWbDSYtXDGfx+d+759EZNpjxhxAkRF35XS37W00BJ3v6G0WpK8
rYURzt55Dtrw8e6wXInDswJk67+7vNJnZRNIECCZO7cXBoKKaw2i4B8/wcWwL6WNeIq2lOUW
rYURzt55Dtrw8e6wXInDswJk67+f8JH
rYogvNoV28SaQReeLJUYw=;
Received: from [66.218.69.2] by n10.bulk.scd.yahoo.com with NNFMP; 03 Nov
2005 19:12:53 -
Received: from [66.94.229.26] by mailer2.bulk.scd.yahoo.com with NNFMP; 
03

Nov 2005 19:12:53 -
Received: from [127.0.0.1] by dlv8.alerts.scd.yahoo.com with NNFMP; 03 
Nov

2005 19:12:53 -
X-yahoo-newman-property: alerts
X-yahoo-newman-id: [EMAIL PROTECTED]
From: Yahoo! Alerts [EMAIL PROTECTED]
Subject: **SPAM**=?UTF-8?B?S2V5d29yZCBOZXdzOiBbIkFkdmFuY2UgQW1lcmljYSJd?=
To: [EMAIL PROTECTED]
Reply-To: Yahoo! Alerts [EMAIL PROTECTED]
Return-Path: [EMAIL PROTECTED]
Errors-To: [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 8bit
X-Yahoo-AlertId:5cYJ5LIxGXHDwPmeko3O878bwgWlTAmS
X-Yahoo-Alerts-Beta: YES
Date: Thu,  3 Nov 2005 11:12:53 -0800
Message-Id: [EMAIL PROTECTED]
X-RBL-Warning: MXRATE-ALLOW: GOOD SENDER
X-RBL-Warning: CMDSPACE: Space found in RCPT TO: command.
X-RBL-Warning: MAILFROM: Domain returns.bulk.y has no MX or A records
[0301].
X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam
[420e].
X-RBL-Warning: SUBJECTCHARS: Subject with at least 50 characters found.
X-RBL-Warning: WEIGHT10: Weight of 24 reaches or exceeds the limit of 10.
X-Declude-Sender:
alerts.kmydqmbqgu2wknrtmy3taljygvxdau3ikndxovs7he3gwx3hhbeha2thovsvmvjxmiyuw
[EMAIL PROTECTED] [66.218.66.189]
X-Declude-Spoolname: D611901607008.smd
X-Declude-Note: Scanned by Declude 3.0.5.5
(http://www.declude.com/x-note.htm) for spam.
X-Declude-Scan: Score [24] at 13:12:37 on 03 Nov 2005
X-Declude-Tests: MXRATE-ALLOW, CMDSPACE, MAILFROM, SPAMHEADERS,
SUBJECTCHARS, WEIGHT10, WEIGHT14, WEIGHT18
X-Country-Chain: UNITED STATES-destination
X-RCPT-TO: [EMAIL PROTECTED]
Status: U
X-UIDL: 424737504
X-IMail-ThreadID: 611901607008




Confidentiality Notice:  The information contained in this transmission 
is

intended only for the personal and confidential use of the designated
recipient named above.  If the receiver of this transmission is not the
intended recipient or an agent responsible for delivering it to the 
intended
recipient, you are hereby notified that you have received this document 
in
error, and that any review, dissemination, distribution, or copying of 
this

message is strictly prohibited.  If you are not the intended recipient,
please immediately notify the sender and delete this e-mail message from
your system.


---
This E-mail

Re: [Declude.JunkMail] testing mailserver

2005-11-03 Thread David Franco-Rocha [ Declude ]



Bonno,

The text actually did appear as the body of the 
email. The problem was that the headers were added after the body, which has 
been an ongoing problem. Declude was not able to determine where the headers 
actually ended and the body began, so it only *looks* like the text is not in 
the body.

Please send the actual message file as an 
attachment to [EMAIL PROTECTED] so 
that we can look at the raw data format of the message.

With regard to these broken emails where headers 
are placed in the wrong location, we are still doing some testing and expect to 
have a solution very shortly.

David Franco-Rocha
Declude Technical / Engineering


  - Original Message - 
  From: 
  Bonno Bloksma 
  
  To: Declude.JunkMail@declude.com 
  
  Sent: Wednesday, November 02, 2005 6:31 
  AM
  Subject: [Declude.JunkMail] testing 
  mailserver
  
  Hi,
  
  I was testing our mailserver by setting up a 
  telnet session on port 25 and then entering the commands. I must have done 
  something realy wrong as my tekst appears in the headers in a way not even 
  Outlook Express can see. ;-0 It will show a blank message.
  
  This is wat was delivered to me:
  
  Received: from TEST [194.109.165.42] by 
  tio.nl (SMTPD-8.21) id AE3902D0; Wed, 02 Nov 2005 12:08:41 
  +0100dit is een testX-RBL-Warning: BADHEADERS: This E-mail was sent 
  from a broken mail client [8c200041].X-Declude-Sender: [EMAIL PROTECTED] 
  [194.109.165.42]X-Declude-Spoolname: 
  D9DFC01B0059C.SMDX-Declude-Note: Scanned at tio.nl by Declude 2.0.6 
  (http://www.declude.com/x-note.htm) 
  for spam.X-Declude-Scan: Score [8] at 12:09:30 on 02 Nov 
  2005X-Declude-Tests: BADHEADERSX-Country-Chain: 
  NETHERLANDS-destination---[E-mail scanned at tio.nl for viruses by 
  Declude Virus]From: [EMAIL PROTECTED]Date: Wed, 2 Nov 
  2005 12:09:30 +0100X-RCPT-TO: [EMAIL PROTECTED]Status: 
  UX-UIDL: 383765952X-IMail-ThreadID: 9dfc01b0059c
  
  See the "dit is een test" below the received from 
  line? This is what I did:
  
  Start (Windows) telnetset LOCAL_ECHOopen 
  mail.tio.nl 25HELO TESTMAIL FROM:[EMAIL PROTECTED]RCPT TO:[EMAIL PROTECTED]DATAdit is een 
  test.QUIT
  Did I make a BIG mistake? I know I should have 
  added a msgid somewhere and a date line to have a proper valid message but is 
  that nessecary in order to have the text after the DATA command appear as the 
  body part of a mail?
  
  I'm using Declude 2.0.6
  
  
  
  Met vriendelijke 
  groet,
  Bonno Bloksma
  hoofd 
  systeembeheer
  
  tio hogeschool toerisme en 
  hospitality
  julianalaan 9 / 7553 ab 
  hengelo
  t 074 255 06 10 / f 074 
  255 06 16
  [EMAIL PROTECTED] / www.tio.nl


Re: [Declude.JunkMail] Headers showing up in the body on 3.05.10

2005-10-28 Thread David Franco-Rocha [ Declude ]
Testing thus far has not yet returned any errors in determining the actual 
end of the headers. The resolution of this issue was not as simple as it may 
have appeared to some. The search for cr/lf/cr/lf or lf/lf was not 
sufficient because of the nature of these messages. Some lf sequences, even 
within the same message, may have been preceded by cr and others not. In 
addition, only by looking at hexdumps of actual messages did the culprit 
sequences become clearer. One of the more recent was a cr/lf/space/lf and 
/cr/lf/tab/lf or a string of invisible characters between the unreliable 
line terminators. Sometimes there are mixes of spaces and tabs or multiples 
of each. We anticipate including this fix in the next interim release.


David Franco-Rocha
Declude Technical / Engineering

- Original Message - 
From: Mark Smith [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Friday, October 28, 2005 7:55 AM
Subject: FW: [Declude.JunkMail] Headers showing up in the body on 3.05.10



David,
Just for follow-up.
As I posted earlier we reverted back to 2.6 from 3.6.11 and 99% of these
headers in the body messages are gone.






-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Tuesday, October 25, 2005 4:54 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Headers showing up in the body on
3.05.10

David,
Thanks for the explanation!

However, I have yet to see a message with SMTP headers in the body if
I remove Declude and send mail directly into Exchange.
Maybe Exchange will just not deliver?



 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of
David Barker
 Sent: Tuesday, October 25, 2005 3:27 PM
 To: Declude.JunkMail@declude.com
 Subject: RE: [Declude.JunkMail] Headers showing up in the body on
 3.05.10

 In every instance that we have observed so far the headers
in the body
 are caused by broken mail clients. This is not only an issue for
 Declude but for mail servers as well. To illustrates the difficulty
 coming up with a single algorithm that will detect all instances of
 these broken emails to prevent headers from appearing at
the end of a
 message or within the body of a message.

 RFC dictates all lines must end with a CR/LF sequence, with
a double
 sequence CR/LF/CR/LF separating the headers from the body.
 Technically, that would be a 0D 0A 0D 0A sequence.

 In the byte sequence below, the sixth line contains:

 22 0A 20 0D 0A 49 20 73-74 61 72 74 65 64 20 68

 where a single 0A is followed by a space and then the
required 0D 0A
 sequence. When this problem was first reported, changes
were made in
 the source to detect a simple 0A as a line terminator, followed by
 another line terminator sequence.

 However, this example would not get detected because they
inserted a
 space, which is invisible, between the two line termination
sequences.
 They could have inserted a tab (09) also, so checking only
for a space
 would not have caught all possibilities.

 In addition, checking only for spaces at the beginning of a
line would
 not solve the problem because certain header lines can be
continued on
 the next line, which requires spaces and then non-blank characters
 prior to the next line termination sequence.

 30 38 3A 35 37 3A 31 33-20 2D 30 35 30 30 0D 0A 4D 49 4D 45
2D 56 65
 72-73 69 6F 6E 3A 20 31 2E 30 0D 0A 43 6F 6E 74 65-6E 74 2D
54 79 70
 65 3A 20 74 65 78 74 2F 70 6C-61 69 6E 3B 0D 0A 09 63
 68 61 72 73 65 74 3D 22-75 73 2D 61 73 63 69 69
 22 0A 20 0D 0A 49 20 73-74 61 72 74 65 64 20 68
 61 76 69 6E 67 20 61 6E-20 61 66 66 61 69 72 20
 77 69 74 68 20 61 20 79-6F 75 6E 67 65 72 2C 20

 Often from the outset these issues look extremely simple.
 However, because all eventualities that have to be covered
it becomes
 quite complex. I am providing this example because things
are rarely
 as simple as they may at first appear.

 With all that said we are looking into providing a solution
for this
 problem.

 David B
 www.declude.com

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Matt
 Sent: Monday, October 24, 2005 9:07 PM
 To: Declude.JunkMail@declude.com
 Subject: Re: [Declude.JunkMail] Headers showing up in the body on
 3.05.10

 This looks like Declude was expecting to see an occurrence of Blank
 Folding, but it is making the mistake of detecting headers
in the MIME
 segments or the body as a continuation of the real headers, either
 that or they changed the code that detects where to throw in the
 Declude generated headers in order to handle Blank Folding.  IMO,
 Declude should just throw the headers just before the
location of the
 first CRLFCRLF or possibly following a mistaken LFLF.

 I haven't seen any Declude headers in the body using 2.0.6.16 and
 earlier.

 Matt



 Robert Grosshandler wrote:

 This has been a problem for awhile (happened with the move
 to the new
 architecture, but Declude says it's

[Declude.JunkMail] Declude with SmarterMail 3.0

2005-10-28 Thread David Franco-Rocha [ Declude ]
The 3.0 version of SmarterMail, yet to be released, will pass authentication 
information to Declude. For those of you who have been patiently waiting to 
implement WHITELIST AUTH with SmarterMail, please be advised that Declude 
will support that functionality with SmarterMail 3.0.


David Franco-Rocha
Declude Technical / Engineering

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Bug: HOP directive

2005-10-28 Thread David Franco-Rocha [ Declude ]
We have discovered a bug in 3.x if you omit the HOP directive in your 
global.cfg file. The default value will be invalid if the directive does not 
appear in your configuration file. Instead of omitting the directive 
altogether, you must specify HOP 0. This will be corrected in the next 
interim release to default properly to HOP 0 if the directive is omitted.


David Franco-Rocha
Declude Technical / Engineering

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Headers in Body or at End of Message

2005-10-27 Thread David Franco-Rocha [Declude]



We are preparing to test an algorithm to eliminate 
the problem whereby headers were inserted into the body of a message or at the 
end of the message. If you have any examples of emails like these, please send 
them as attachments to [EMAIL PROTECTED]. We would like to run 
as many as possible through the test program to check that the start of the body 
is accurately detected. Thanks.

David Franco-Rocha
Declude Technical / Engineering



[Declude.JunkMail] Headers in Body or at End of Message

2005-10-27 Thread David Franco-Rocha [Declude]




We are preparing to test an algorithm to eliminate 
the problem whereby headers were inserted into the body of a message or at the 
end of the message. If you have any examples of emails like these, please send 
them as attachments to support at declude.com. We would like to run as many as 
possible through the test program to check that the start of the body is 
accurately detected. Thanks.

David Franco-Rocha
Declude Technical / Engineering



[Declude.JunkMail] Mail sent to Yahoo! address ends up in Bulk folder

2005-10-04 Thread declude
When any customer sends an email through our server to a Yahoo! address, the 
email get put into the Bulk mail folder.


Has anyone else experienced this behavior and have any suggestions?  Does 
anyone have a phone number for the Yahoo! Postmaster to help resolve this 
issue


Thanks in advance,
Don

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Mail sent to Yahoo! address ends up in Bulk folder

2005-10-04 Thread declude

Thanks John for your reply,

I sent an email to my test Yahoo! account and it went into the Bulk email 
folder.  I opened it up and clicked on the option for full headers.  There 
was not anything that gave any indication as to why it had been put there. 
They probably don't to keep the spammers from figuring out a way around 
them.


Anyone have any other thoughts?

Any help would be appreciated,
Don

- Original Message - 
From: John T (Lists) [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Tuesday, October 04, 2005 2:07 PM
Subject: RE: [Declude.JunkMail] Mail sent to Yahoo! address ends up in Bulk 
folder




Best place to start is to find out why it is being placed there. I believe
Yahoo adds header lines for filtering, so getting the headers from the
recipient would be the place to start.

John T
eServices For You



-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sent: Tuesday, October 04, 2005 11:53 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Mail sent to Yahoo! address ends up in Bulk

folder


When any customer sends an email through our server to a Yahoo! address,

the

email get put into the Bulk mail folder.

Has anyone else experienced this behavior and have any suggestions?  Does
anyone have a phone number for the Yahoo! Postmaster to help resolve this
issue

Thanks in advance,
Don

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] AOL Now blocking Port 25

2005-09-30 Thread declude

I searched the archives but couldn't find what I was looking for.

Didn't someone post a link to a small software app that would run on the 
mail server and would forward all traffic from port 587 to port 25.  We are 
not on the current Imail version so we can't use it's built in feature.


Thanks in advance,
Don

- Original Message - 
From: Mark Smith [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Thursday, September 29, 2005 11:34 PM
Subject: RE: [Declude.JunkMail] AOL Now blocking Port 25



Setup Windows IIS SMTP service to listen on port XX (something other than
25).
Both can run and won't conflict.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: Thursday, September 29, 2005 4:23 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] AOL Now blocking Port 25

Anybody out there know the Cisco PIX CLI syntax to do port forwarding on 
the

firewall?

I'm running Imail 8.15 and I'm stuck with port 25...

-Dave Doherty
Skywaves, Inc.




- Original Message -
From: Kevin Bilbee [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Thursday, September 29, 2005 3:48 PM
Subject: RE: [Declude.JunkMail] AOL Now blocking Port 25



If you are on imail 8.2x you can setup the alternate port. Search for the
thread on the how to. No additional software is needed to do port
forwarding.


Kevin Bilbee


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Mark Smith
Sent: Thursday, September 29, 2005 11:39 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] AOL Now blocking Port 25


As a web hosting company, we put an SMTP server listening on a
different TCP
port.
We instruct users to modify their SMTP settings in their mail
client to use
this port.

The server listens on this port but relays on 25.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Frederick Samarelli
Sent: Thursday, September 29, 2005 2:20 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] AOL Now blocking Port 25

Has anyone else been told AOL is now enfosing this policy and how
do we get
around it.

a.. 554 IPT:OA
http://postmaster.info.aol.com/errors/554iptoa.html
EXPLANATION:

The message you received is generated from AOL when sending mail through
a
third party program and connecting through the default port 25.

America Online Inc. will no longer accept outgoing connections on port 
25

through third party mail programs.

SOLUTION:

If you are trying to access your America Online e-mail please
visit Keyword:

Open Mail Access

Send third party e-mail through port 587. This port requires you to
authenticate and may require a change to your email client settings.
Note,
the server you are connecting to must support this configuration.
If you are
trying to get your AOL e-mail visit Keyword Open Mail Access, all others
contact your server administrator for further support on this
configuration.

For more information visit the port 25 FAQ.


---
This E-mail came from the Declude.JunkMail mailing list.  To 
unsubscribe,

just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]




---
[This E-mail scanned for viruses by Declude Virus]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Server Running at 100%

2005-09-09 Thread David Franco-Rocha [ Declude ]
AVAFTERJM ON must be in the virus.cfg file (if it is used) and it does 
require the ON parameter.


David Franco-Rocha

- Original Message - 
From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Thursday, September 08, 2005 9:08 PM
Subject: Re: [Declude.JunkMail] Server Running at 100%







I'm confused.  The page in the Knowledge Base
http://support.declude.com/Customer/KBArticle.aspx?articleid=11


Now I am too - I had no idea there was a knowledge base now :)


says to put it in the global.cfg file.  It also says nothing about adding 
the ON switch.  I even exchanged emails with Declude support back on 
Aug. 2 stating that I was putting AVAFTERJM in my global.cfg file, and 
support never mentioned that I should have put it in the virus.cfg file, 
nor was anything said about PRESCAN.


Placing it in your global.cfg is wrong.  It needs to be in your virus.cfg.

Prescan is a seperate feature that if it basically detects no attachments 
or harmful code it will skip scanning the message period.


Darrell
---
Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail Queue Monitoring, Declude Overflow Queue Monitoring, 
SURBL/URI integration, MRTG Integration, and Log Parsers.




 Original Message 

From: David Barker [EMAIL PROTECTED]
Sent: Thursday, September 08, 2005 12:01 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Server Running at 100%

In your virus.cfg file:

AVAFTERJM ON

Also ensure that you have the directive:

PRESCANON

David B
www.declude.com



From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris
Sent: Thursday, September 08, 2005 11:56 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Server Running at 100%
Importance: High


I was told to see if using AVAFTERJM would help on resources on my
server...right now I almost dead in the water..my server is cralling to 
send
mailhow do I use this command...exactly how does it go into the 
config..


Richard Farris
Ethixs Online
1.270.247. Office
1.800.548.3877 Tech Support
Crossroads to a Cleaner Internet


- Original Message - 
From: Richard Farris mailto:[EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Thursday, August 04, 2005 11:21 AM
Subject: [Declude.JunkMail] Spam box

Is there a box I can put in front of my Imail server that will help
take some of the load off of the spam filtering that Declude is doing

Richard Farris
Ethixs Online
1.270.247. Office
1.800.548.3877 Tech Support
Crossroads to a Cleaner Internet






---
[This E-mail scanned for viruses by Declude Virus]


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Declude and IMail 8.2

2005-08-25 Thread David Franco-Rocha [ Declude ]

Todd,

The engineering staff here at Declude has no role in the development or 
maintenance of the web site. Our sole priority in engineering is the 
maintenance and development of the product.


David Franco-Rocha
Declude Technical / Engineering

- Original Message - 
From: Todd [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Wednesday, August 24, 2005 11:27 AM
Subject: Re: [Declude.JunkMail] Declude and IMail 8.2




While I don't see the guys at Declude drinking beer, I do see them 
updating

their website and marketing sales. Its a matter or priorities.

3 months may be acceptable for software development,  but for a major bug 
I
do not see it as acceptable.  And I don't think Scott would have ever let 
it

go this long.

IMail has released patches for 8.2 and that may cloud the issue, but that
means Declude has to stay focused.  It would be better to clearly
communicate they have an issue to there client base, which they did not, 
and

then create a fix for a particular version of 8.2, rather than chase
IPSwitch and every version they produce over a period of a year.  If
IPSwitch releases another patch will it delay the Declude fix for several
more months while they correct the code for the new version?

The people that will have this problem are most likely the ones with 
current
service agreements, at least with IPSwitch, the ones paying money to stay 
on

top of the software.  Declude should keep this in mind.


- Original Message - 
From: Michael Jaworski [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Tuesday, August 23, 2005 9:56 PM
Subject: RE: [Declude.JunkMail] Declude and IMail 8.2


Heimir,

You may want to consider using this list as your first line of defense. 
This

is the best place to learn of new issues which are brought to everyone's
attention by folks who are in the trenches. Keep in mind not everyone here
has the latest version  and not everyone is using iMail. I would not 
expect
Declude to keep track of what is going on with my particular e-mail 
servers.

I prefer them to spend all resources keeping up with the spammers.

A few have made mention of the delay getting out this fix. It hurts when 
you
are the one who is being impacted by an issue. I have been there but in 
the
end I know they will find a fix and get it implemented as soon as 
possible.

I don't see the folks at Declude sitting around drinking beer and working
issues when they feel like it. From my experience in the software 
developing

cycle 3 months for a major change is fast. Keep in mind they need to test
and retest all those features we have requested over the years. Add the
issue of iMail changing their software and then balance it out with what 
we

pay for maintenance ... I am happy they are still in business constantly
working and listening to us to update their product(s).

Best to not play victim but actively monitor this anti-spam community
created by Scott and driven by a lot of knowledgable, talented and hard
working customers. And maintain your maintenance agreement. Small price to
pay for what the product does for my customers.

Michael Jaworski
Puget Sound Network, Inc.
(206) 217-0400
(800) 599-9485




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Heimir Eidskrem
Sent: Tuesday, August 23, 2005 5:43 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude and IMail 8.2


Thank you for the update.
It concern me that I can't find the email notifying your customer about 
this
bug. Could you tell me when it was sent so I can find it and make sure I 
am
not holding this type of emails. They are critical to us so I will put 
some

effort in making sure I get them.

Its been over 2.5 months.
The fix will not be available for some time according your email. This is 
a

very long time and frankly I think it makes Declude look very bad.

I think there have been plenty of complaints about Declude lately. It 
seems

that your reputation is getting a little tarnished.


[EMAIL PROTECTED] wrote:


Thank you for you posts.

We understand your frustration; here are the facts so there is no
confusion.

1. This is NOT a bug in Declude. Ipswitch made changes to their IMail
architecture, making it incompatible with Declude and this requires a
fundamental re-write of Declude not a 10 minute fix. 2. As soon as we
were aware of these changes we began development to modify Declude to
work with IMail 8.2. 3. It has been our priority and focus since we
first identified the problem.

4. In order to deliver a quality product, sufficient testing needs to
be done to ensure customer satisfaction. Since identification of the
issue additional patches have been released by Ipswitch meaning
additional testing and development has been required. 5. This is not an
issue of interim releases as Declude product architecture has had to
change making it very different from earlier versions of Declude. 6.
This is not an issue of having Scott

Re: [Declude.JunkMail] Whitelisting

2005-07-26 Thread David Franco-Rocha [ Declude ]



Richard,

The problem here is, first of all, that Declude 
does not look at the cc: or bcc: in the headers. It deals with recipients of the 
email solely on the basis of what is in the message envelope (q*.smd file), 
which is discarded by IMail after processing; all you eventually see is the 
contents of the message itself (the d*.smd file).

Whitelisting ensures that the email will pass all 
tests. Under optimal circumstances, if an email source or destination is 
whitelisted, all tests should be skipped. If there are two recipients and only 
one were whitelisted, the headers of te email would have to indicate a 
whitelisted weight of 0 for one recipient and the actual weight for the other 
(non-whitelisted) recipient. That would necessitate two different sets of 
headers, which would require two separate message files and therefore two 
separate envelopes: If the non-whitelisted weight exceeded the HOLD threshold, 
one copy of the email would be placed into the HOLD folder with the envelope 
modified for that single recipient; the other would be whitelisted and the held 
recipient would be deleted from that envelope. In other words, Declude would 
have to generate multiple emails from a single email, which is not practical. 
How would Declude assign a new queue number to the duplicate email? If one 
recipient were whitelisted and the other had a weight of 5 (to be delivered), 
there would be different sets of headers and therefore different emails. They 
could not both have the same queue number because they could no be placed into 
the spool at the same time (one would overwrite the other).

The email server generates a separate copy of the 
email for each recipient after processing by Declude. However, there is no 
practical way for Declude to create multiple emails from a single 
message.

David Franco-Rocha
Declude Technical Support



  - Original Message - 
  From: 
  Richard 
  Farris 
  To: Declude.JunkMail@declude.com 
  
  Sent: Monday, July 25, 2005 4:24 PM
  Subject: [Declude.JunkMail] 
  Whitelisting
  
  I just took out all the email addresses I had 
  whitelisted in my Global file last week because I thought this would 
  helpstop more spam getting thruand of course folks are now emailing 
  me saying they are missing mail..newsletters and such...
  
  My question is "Why is it not possible with 
  Declude to whitelist an email address and it only applies to that email 
  address and not any others that might be in CC or BCC"?
  Richard FarrisEthixs Online1.270.247. 
  Office1.800.548.3877 Tech Support"Crossroads to a Cleaner 
  Internet"
  
- Original Message - 
From: 
Matt 

To: Declude.JunkMail@declude.com 

Sent: Monday, July 25, 2005 1:47 
PM
Subject: Re: [Declude.JunkMail] Filter 
not triggering
Kevin,Just a thought if you wanted to confirm this as 
a bug, maybe try a filter for this same message, but match a full word to 
see if it triggers. I did decode this segment and there is no 
additional encoding or other tricks that would cause a filter to not 
hit.IMO, knowing about bugs like this would be very helpful at 
times, especially considering the time that it would take each one of us 
that was affected by it to figure it out on our own. Maybe if Declude 
doesn't want to post this information on their site, we could take it upon 
ourselves to share such information with the list when it is 
discovered. This is for the most part how the list used to function in 
the old days, though most of us seemed to desire a page dedicated to the 
topic regardless.MattKevin Bilbee wrote: 

  
  

  Well that would explain why many of my filters are not as effective 
  as they used to be. Has Declude announced when the fix will be 
  available
  
  
  
  Kevin Bilbee
  
-Original Message-From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]]On 
Behalf Of John CarterSent: Monday, July 25, 2005 8:05 
AMTo: Declude.JunkMail@declude.comSubject: 
RE: [Declude.JunkMail] Filter not triggering
    I have reported to Declude a problem with the 
"CONTAINS" statement. Prior to 2.0.6 (or somewhere around 
there)it worked oncharacter match, but after an upgrade to 
Declude it only works on a word match. (In other words you could not 
longer match on a string of characters within a word.) This would 
affect your situation.

I believe the fix is caught up in the wait for the 
newest version (the one they are testing now.)

John


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]] 
On Behalf Of Kevin BilbeeSent: Monday, July 25, 2005 
9:10 AMTo: JunkMail DecludeSubject: 
[Declude.JunkMail] Filter not triggering
The attache

[Declude.JunkMail] Declude's responsiveness on this list

2005-07-26 Thread declude
Yesterday I complained about the lack of participation on this list from
Declude.  Today alone there have been over a half a dozen posts.  This has
not gone unnoticed.

Keep up the good work!

Don

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Filter not triggering

2005-07-25 Thread declude



This is one of the main problems with the "new" Declude - lack 
of communication! In the old days, Scott would monitor this list and 
respond to posts throughout the day. Now, we are lucky if they respond 
even bi-weekly. The last post from Declude was 7/15/05 - 10 days 
ago,. Prior to that, the last significant postwas on 6/29/05 - 
approx. 2 weeks before that. Why is it so difficult for them to post on a 
regular basis? It seem like such an easy thing to do that builds customer 
loyalty. On the other hand, lack of it breeds resentment. We all 
want Declude to succeed. If they do - we do.

Declude, could you please work on this?

Don


- Original Message - 

  From: 
  Matt 
  To: Declude.JunkMail@declude.com 
  
  Sent: Monday, July 25, 2005 1:47 PM
  Subject: Re: [Declude.JunkMail] Filter 
  not triggering
  Kevin,Just a thought if you wanted to confirm this as a 
  bug, maybe try a filter for this same message, but match a full word to see if 
  it triggers. I did decode this segment and there is no additional 
  encoding or other tricks that would cause a filter to not hit.IMO, 
  knowing about bugs like this would be very helpful at times, especially 
  considering the time that it would take each one of us that was affected by it 
  to figure it out on our own. Maybe if Declude doesn't want to post this 
  information on their site, we could take it upon ourselves to share such 
  information with the list when it is discovered. This is for the most 
  part how the list used to function in the old days, though most of us seemed 
  to desire a page dedicated to the topic 
  regardless.MattKevin Bilbee wrote: 
  



Well that would explain why many of my filters are not as effective 
as they used to be. Has Declude announced when the fix will be 
available



Kevin Bilbee

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]]On 
  Behalf Of John CarterSent: Monday, July 25, 2005 8:05 
  AMTo: Declude.JunkMail@declude.comSubject: 
  RE: [Declude.JunkMail] Filter not triggering
  I have reported to Declude a problem with the 
  "CONTAINS" statement. Prior to 2.0.6 (or somewhere around 
  there)it worked oncharacter match, but after an upgrade to 
  Declude it only works on a word match. (In other words you could not 
  longer match on a string of characters within a word.) This would 
  affect your situation.
  
  I believe the fix is caught up in the wait for the 
  newest version (the one they are testing now.)
  
  John
  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]] 
  On Behalf Of Kevin BilbeeSent: Monday, July 25, 2005 
  9:10 AMTo: JunkMail DecludeSubject: 
  [Declude.JunkMail] Filter not triggering
  The attached email is not getting trapped by 
  my STOCKFILTER??? Here are the log lines. They do not indicate any issues 
  with the STOCKFILTER. In the STOCKFILTER this line should be 
  hitting
  
  BODY 10CONTAINS (OTC:
  Any idea why this email is not triggering 
  this line and assigning 10 points Could declude not be decoding the 
  BASE64 This also seems to be an intermittent issue!
  
  
  07/24/2005 19:57:36 Q551E097C0333 Filter 
  HELOFILTER: Not skipping E-mail due to current weight of 2.07/24/2005 
  19:57:36 Q551E097C0333 Filter VIRUSTRAP: Not skipping E-mail due to 
  current weight of 2.07/24/2005 19:57:36 Q551E097C0333 Filter 
  REVDNSFILTER: Not skipping E-mail due to current weight of 
  2.07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 
  19.07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 
  13.07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 
  14.07/24/2005 19:57:36 Q551E097C0333 Filter: Set max weight to 
  5.07/24/2005 19:57:36 Q551E097C0333 Filter STOCKFILTER: Not 
  skipping E-mail due to current weight of 2.07/24/2005 19:57:36 
  Q551E097C0333 Filter: Set max weight to 15.07/24/2005 19:57:36 
  Q551E097C0333 Filter BODYFILTER: Not skipping E-mail due to current 
  weight of 2.07/24/2005 19:57:36 Q551E097C0333 NOABUSE:2 . 
  Total weight = 2.07/24/2005 19:57:36 Q551E097C0333 Using 
  [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail.07/24/2005 
  19:57:36 Q551E097C0333 Redirecting [EMAIL PROTECTED] 
  to file 
  D:\Imail\declude\junkmailfiles\standardabrasives.com.junkmail.07/24/2005 
  19:57:36 Q551E097C0333 Msg failed NOABUSE ("Not supporting [EMAIL PROTECTED]"). Action="">07/24/2005 
  19:57:36 Q551E097C0333 Msg failed BASE64 (A binary encoded text or 
  HTML section was found in this E-mail.). Action="">07/24/2005 
  19:57:36 Q551E097C0333 L1 Message OK07/24/2005 19:57:36 
  Q551

Re: [Declude.JunkMail] custom delivery executable?

2005-06-24 Thread David Franco-Rocha [ Declude ]

Darrell,

This would not work with Declude because Declude uses imail1.exe to send out 
the notification messages for viruses. All such notifications, instead of 
going to the intended recipient, would likewise go to this text file. There 
may be other ways in which it might interfere with Declude, but this struck 
me as the most obvious.


David Franco-Rocha
Declude Technical Support


- Original Message - 
From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Thursday, June 23, 2005 11:44 AM
Subject: Re: [Declude.JunkMail] custom delivery executable?


Or another thought to try is renaming your custom delivery app to 
imail1.exe and replacing theirs.  Althought I am not sure what else this 
would break.

Darrell

Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, 
MRTG Integration, and Log Parsers.


Darin Cox writes:
You could change all email addresses to be program aliases.  The batch 
file run by the program alias could then dump the message into a text 
file, or even post the message straight into your database. Darin. -  
Original Message - 
From: Chase Seibert To: Declude.JunkMail@declude.com Sent: Thursday, June 
23, 2005 9:53 AM
Subject: [Declude.JunkMail] custom delivery executable? Hey guys, We have 
a very non-standard iMail/Declude install. Basically, we only us the 
system for the SMTP protocol, as well as virus and spam filtering. Once a 
message has passed through those systems, it's delivered to a mailbox as 
normal. However, we don't allow POP or IMAP access to our systems. 
Instead, we parse the mailboxes when they change, pull out new mail and 
insert it into a SQL Server database for access in our web-based CRM. 
Messed up, huh? We are looking to skip the whole step of delivering the 
mail to a mailbox and then chunking it out. It's not a speed problem, but 
rather a reliability concern. Our current solution has about a .1% 
failure rate, meaning that some messages are not delivered until the next 
message comes along into that folder to knock it out. Ok, here is my 
question. I am wondering if there is some way to setup iMail/Declude so 
that it delivers a message right to a stand alone file, as apposed to a 
mailbox. Qmail, for example, can do this. I doubt there is any out of the 
box support for this, so I started investigating using a custom Declude 
filter for this.

From the manual:
For more flexibility, you can have Declude JunkMail pass parameters to 
your program, using variables. For example, you can set up the test as 
'TESTNAME external returnvalue filename %INOROUT%', which would send 
the %INOROUT% variable as a parameter to your program (which would be 
incoming for an incoming E-mail, or outgoing for an outgoing 
E-mail).


Presumably, we could write a custom executable and define a rule for it 
in Junkmail. The custom executable would get the entire message body and 
just pipe it to a stand-alone file. If the message was later also 
delivered to an iMail mailbox, that's fine. However, I think the issue 
with that idea is that the filters will not have executed when that 
custom executable is called. Accoring to the Declude manaul, the order of 
execution is: 1. IMail's Control Access file (to block IPs)

2. IMail's Kill List (to block return addresses)
3. IMail v8 anti-spam (most tests)
4. Declude Virus
5. Declude Hijack
6. Declude JunkMail
7. IMail's filters and extra IMail v8 anti-spam tests
*we want to insert a custom exectuable here Is this even possible, or 
should I just start looking as Linux mail systems?  -Chase
Chase Seibert |  Network and Systems Engineer |  Bullhorn Inc  | 
617.464.2440 x119  |  www.bullhorn.com



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: Re[2]: [Declude.JunkMail] Log file errors

2005-06-24 Thread David Franco-Rocha [ Declude ]

David,

I will get back to you (and the list) on this by Monday. I have to scan the 
entire Declude source tree for these types of messages and will let you 
know.


David Franco-Rocha
Declude Technical Support


- Original Message - 
From: David Sullivan [EMAIL PROTECTED]

To: Declude.JunkMail@declude.com
Sent: Friday, June 24, 2005 10:13 AM
Subject: Re[2]: [Declude.JunkMail] Log file errors



Hello Dan,

Friday, June 24, 2005, 9:50:10 AM, you wrote:

DH SERVFAIL means that the domain does exist and the root name servers 
have
DH information on this domain, but that the authoritative name servers 
are

DH not answering queries for this domain.

Great, thanks Dan. Now, Declude...are there any other conditions
whereby Declude puts a Warning in the log file that is related to
the functioning of the actual Declude software?

We monitor log files for the words ERROR or WARNING. In this case,
this warning is fairly normal operation of Declude. If software
related issues are only logged under ERROR then we'll drop the
WARNING monitoring.

DS 06/22/2005 00:39:15 Qeb72438900c4923f WARNING: DNS server
DS 66.179.12.115 returned a SERVER FAILURE error for MX or A for
DS fadmail.com.



--
Best regards,
Davidmailto:[EMAIL PROTECTED]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Insufficient system resources error

2005-05-26 Thread Allan Ries \(Declude Lists\)
A few questions to the customers having this issue.
Add another customer to the list!

What version of Windows are you using?
Windows 2000 Server

What SP's are installed?
SP4

What version of Declude are you using?
1.82

What version of IMail are you using?
8.20

What hot fixes have you applied to IMail?
HF1

How long before you see this resource problem?
Problem occurs based on occasional large outbound mailings generated on
another server.

Does your scanner software automatically update itself (not definitions but
the software itself)
Nope.  Using F-Prot 3.16b for Windows.  I manually upgrade the scanner
software on the server.

When did this start happening? Did ANY kind upgrade happen? Win, Declude,
IMail, Scanner?
After upgrade to IMail 8.20! no changes to Windows, Declude, or F-Prot.

Your name and phone number
Allan Ries
Archdiocese of Milwaukee
414-769-3332
riesa at archmil.org

Any else you suspect or find odd.

Summary: This definitely happened to us after upgrading to IMail 8.20.
Before that, no problems in our setup.  I am guessing that their new
threading is  causing the issue.  We generate large broadcast messages to
various groups of our employees and volunteers.  Some weekly messages have
1000 - 2500 recipients.  These are generated on another server and sent to
the mail server.  After a certain point, the mail server gets overwhelmed.
I get a message that the server is running low on virtual memory.  After
that is when the insufficient resources messages involving Declude appear.
I always have to restart the SMTP service in IMail.  Reducing the # of
mailing threads on the other server did not help.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] WHITELIST LOCAL v2.0.6.12

2005-05-11 Thread David Franco-Rocha [ Declude ]
I expect to have the fix for this issue available tomorrow.
David Franco-Rocha
Declude Technical Support
- Original Message - 
From: Shayne Embry [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Wednesday, May 11, 2005 4:14 PM
Subject: RE: [Declude.JunkMail] WHITELIST LOCAL v2.0.6.12


We had the same problem with v2.0.6.10. Contacted support about it, but
haven't gotten a firm answer.
Shayne

-Original Message-
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Don Brown
Sent: Wednesday, May 11, 2005 2:59 PM
To: Declude.JunkMail@declude.com
Cc: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] WHITELIST LOCAL v2.0.6.12

I added WHITELIST LOCAL to the Global.cfg and all (and I mean 
ALL) inbound e-mail to local users was whitelisted.

My read was that this would whitelist e-mail from local users 
to other local users. Is that not correct?

Thanks,

Don Brown - Dallas, Texas USA Internet Concepts, Inc.
[EMAIL PROTECTED]   http://www.inetconcepts.net
(972) 788-2364Fax: (972) 788-5049


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Split headers

2005-05-09 Thread David Franco-Rocha [ Declude ]
John,
This problem was reported previously to us and has been corrected in the 
latest interim release.

It is caused by broken mail clients that do not terminate header lines with 
the required cr/lf sequence.

David Franco-Rocha
Declude Technical Support
- Original Message - 
From: John Carter [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Monday, May 09, 2005 9:08 AM
Subject: [Declude.JunkMail] Split headers


While reviewing some held emails, I have seen messages with what I'll call
split headers -- as in the normal header lines are at the beginning of the
msg file and the Declude headers are the end of the msg file with the msg
body in between.  My question is will this mess up any test results, esp.
using filters with MAILFROM, etc.?
John
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] OT - headers script for Outlook or Express

2005-05-06 Thread David Franco-Rocha [ Declude ]
Not sure about Outlook.
Outlook Express cuts off most headers if you use the Forward icon. Instead, 
select Message from the top-level menu and then select Forward As 
Attachment. The forwarded email will have all the headers intact.

David Franco-Rocha
Declude Technical Support
- Original Message - 
From: Fritz Squib [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, May 06, 2005 1:09 PM
Subject: RE: [Declude.JunkMail] OT - headers script for Outlook or Express


Try http://www.xintercept.com/pkpeek.htm, only works with Oultook though.
I've posted the link here a couple of times before.
Fritz
Frederick P. Squib, Jr.
Network Operations
Citizens Telephone Company of Kecksburg
http://www.wpa.net
()  ascii ribbon campaign - against html email
/\- against microsoft attachments
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Marc Catuogno
Sent: Friday, May 06, 2005 12:46 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] OT - headers script for Outlook or Express
Anyone have any ideas how to give challenged users a really
easy way to get the headers out of Outlook or Outlook express
and forward them to my spam account?  As soon as I start
talking to most of them about right clicking, copying,
pasting etc they get this strange blank look on their face...
Also I thought a report spam button on the IMAIL web
interface that would copy the full headers, and forward them
and the e-mail to a pre-determined address wouldn't be to
hard, anyone have anything like this?  Or any suggestions on
how to get the headers from spam that gets through the all
the filters?
Thanks -
Marc
---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be
found at http://www.mail-archive.com.
---
[This E-mail scanned by Citizens Internet Services with
Declude Virus.]

---
[This E-mail scanned by Citizens Internet Services with Declude Virus.]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Outbound Scanning

2005-05-05 Thread David Franco-Rocha [ Declude ]
Evans,
We have this on a list of possible enhancements for the very near future. It 
would, however, be a global setting that applies to the entire server: 
scanning inbound only, outbound only or both.

David Franco-Rocha
- Original Message - 
From: Evans Martin [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Thursday, May 05, 2005 2:11 AM
Subject: RE: [Declude.JunkMail] Outbound Scanning

Because I'm running 7.15 of IMail.
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Wednesday, May 04, 2005 6:57 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Outbound Scanning
If you have Pro, why don't you turn AUTOWHITELIST ON?  That way anyone who
authenticates is whitelisted.
Darin.
- Original Message -
From: Evans Martin [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Wednesday, May 04, 2005 7:16 PM
Subject: RE: [Declude.JunkMail] Outbound Scanning
I'm talking about Junkmail; not Virus.  I'm marking my own outbound mail
as
spam in a lot of cases.  I want to disable this behavior.
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Jonathan
 Sent: Wednesday, May 04, 2005 6:13 PM
 To: Declude.JunkMail@declude.com
 Subject: Re: [Declude.JunkMail] Outbound Scanning

 I think you're looking for virus_domains.txt - it has inbound only,
 outbound only, both, etc options.

 Jonathan


 Evans Martin wrote:

 So there is no way to turn off outbound scanning?
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Kevin Bilbee
 Sent: Wednesday, May 04, 2005 4:41 PM
 To: Declude.JunkMail@declude.com
 Subject: RE: [Declude.JunkMail] Outbound Scanning
 
 Then they need to auth to the server. You need 8.x to be able to have
 declude
 know if the user has authed just set WHITELIST AUTH in yor
 
 
 global.cfg
 
 
 Kevin Bilbee
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Evans Martin
 Sent: Wednesday, May 04, 2005 2:24 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] Outbound Scanning
 
 
 I am trying to disable outbound scanning of my domains.  I
 commented everything out in the slightly modified from default
 global.cfg that came after the outbound section using a # but it
 still seems to be scanning outbound.
 
 I am using per domain configs but I don't see where Declude is
 being instructed to scan outbound.  Many of my users are
 complaining because their mail goes out tagged as spam.  Help!
 
 Thanks,
 Evans Martin
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 
 
 
 
 
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 
 
 
 

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail

2005-05-03 Thread David Franco-Rocha [ Declude ]
Dave,
This was a problem when we first implemented Declude with SmarterMail. The 
spool manager would show files in the spool, even after we had deleted them. 
The only way to get rid of them was to bring down the SM services and then 
restart them. Then the files no longer appeared in the spool. I believe that 
SmarterTools has now rectified that.

- Original Message - 
From: Dave Doherty [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Monday, May 02, 2005 6:08 PM
Subject: Re: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail


However, the contents of the HDR file are retained in memory by 
SmarterMail.
That sounds like it could lead to a memory leak. I tried SM as a SmartHost 
caching server and deleted all returns beforee SM could send them. About 
once a week I had to reboot the machine. Now I think I know why.

-d

- Original Message - 
From: David Franco-Rocha [ Declude ] [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Monday, May 02, 2005 8:27 AM
Subject: Re: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail


See below.
David Franco-Rocha
- Original Message - 
From: David Sullivan [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, April 29, 2005 5:28 PM
Subject: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail


Hello David,
Friday, April 29, 2005, 4:55:53 PM, you wrote:
DFRD No, there is not an inherent delay in the delivery of all 
messages. If
DFRD Declude does not complete processing within a specified time 
period,
DFRD SmarterMail tries to take the file. However, if Declude finishes 
processing

So, does this mean that SM could process a file that Declude did NOT
scan?
That should not happen, since the message is passed to Declude by 
SmarterMail.

Or, are you saying this moving the file in a different folder
process prevents SM from EVER processing a file that Declude hasn't
finished?
No, I am not saying that at all. There are some unique aspects regarding 
the way SmarterMail processes messages that necessitate  equally unique 
behavior on the part of Declude (unfortunately). When the incoming SMTP 
dialogue has been completed, SmarterMail creates the envelope file (HDR) 
and the message data file (EML). However, the contents of the HDR file 
are retained in memory by SmarterMail. The most significant negative 
effect of this behavior is that changes made by Declude to the envelope 
(re-routing a recipient, deleting a recipient, etc.) are not seen by 
SmarterMail; when SmarterMail regains control of the message it uses the 
envelope in memory and completely disregards any changes made to the 
envelope.

To circumvent this behavior, Declude renames the HDR and EML files after 
processing by prepending X to the spool name prior to moving the message 
back to the SmarterMail spool. This causes SmarterMail to see this as a 
new message and reads a new envelope into memory. It eventually realizes 
that, in a sense, the old message has been deleted. Since this is seen as 
a new message by SmarterMail, it tries to pass it once again to Declude. 
However, Declude ignores all messages whose names begin with X because it 
knows they have already been processed.

DF
--
Best regards,
Davidmailto:[EMAIL PROTECTED]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail

2005-05-02 Thread David Franco-Rocha [ Declude ]
See below.
David Franco-Rocha
- Original Message - 
From: David Sullivan [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, April 29, 2005 5:28 PM
Subject: Re[6]: [Declude.JunkMail] Imail 8.2 / smartermail


Hello David,
Friday, April 29, 2005, 4:55:53 PM, you wrote:
DFRD No, there is not an inherent delay in the delivery of all messages. 
If
DFRD Declude does not complete processing within a specified time period,
DFRD SmarterMail tries to take the file. However, if Declude finishes 
processing

So, does this mean that SM could process a file that Declude did NOT
scan?
That should not happen, since the message is passed to Declude by 
SmarterMail.

Or, are you saying this moving the file in a different folder
process prevents SM from EVER processing a file that Declude hasn't
finished?
No, I am not saying that at all. There are some unique aspects regarding the 
way SmarterMail processes messages that necessitate  equally unique behavior 
on the part of Declude (unfortunately). When the incoming SMTP dialogue has 
been completed, SmarterMail creates the envelope file (HDR) and the message 
data file (EML). However, the contents of the HDR file are retained in 
memory by SmarterMail. The most significant negative effect of this behavior 
is that changes made by Declude to the envelope (re-routing a recipient, 
deleting a recipient, etc.) are not seen by SmarterMail; when SmarterMail 
regains control of the message it uses the envelope in memory and completely 
disregards any changes made to the envelope.

To circumvent this behavior, Declude renames the HDR and EML files after 
processing by prepending X to the spool name prior to moving the message 
back to the SmarterMail spool. This causes SmarterMail to see this as a new 
message and reads a new envelope into memory. It eventually realizes that, 
in a sense, the old message has been deleted. Since this is seen as a new 
message by SmarterMail, it tries to pass it once again to Declude. However, 
Declude ignores all messages whose names begin with X because it knows they 
have already been processed.

DF
--
Best regards,
Davidmailto:[EMAIL PROTECTED]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Imail 8.2 / smartermail

2005-04-29 Thread David Franco-Rocha [ Declude ]
Declude does not currently plug directly into SmarterMail's spam tools. They 
are completely separate. The MAILBOX directive used by Declude with IMail, 
whereby an email is moved to a specific user folder, is not available on the 
SmarterMail platform. When I have discussed this with SmarterMail, they have 
said that the recipient can move it himself to a particular folder on the 
basis of headers added to the message by Declude.

David Franco-Rocha
- Original Message - 
From: Jonathan [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Thursday, April 28, 2005 10:57 PM
Subject: Re: [Declude.JunkMail] Imail 8.2 / smartermail


Darrell ([EMAIL PROTECTED]) wrote:
Sidenote, I assume SmarterMail can act as a domain filtering gateway
with Declude, right? Pretty sure I saw some marketing spam saying it
could ..
Yes, that is absolutly correct - Declude will work on Smartermail.

So I was just playing with the SM web interface -- does Declude plug 
directly into SM's spam tools? If so, that looks pretty slick compared to 
hacked up scripts shuffling stuff into the right folders .. :)

Darrell
---
Check out http://www.invariantsystems.com for utilities for Declude And
Imail.  IMail Queue Monitoring, Declude Overflow Queue Monitoring, 
SURBL/URI
integration, MRTG Integration, and Log Parsers.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: Re[2]: [Declude.JunkMail] Imail 8.2 / smartermail

2005-04-29 Thread David Franco-Rocha [ Declude ]
There is a very specific reason for this process. Unlike IMail, which 
provides for a daisy-chain mechanism whereby Declude gets the msg for 
processing and hands it back to smtp32 for delivery, SmarterMail passes the 
msg to Declude and, after a set period of time, tries to deliver it. Taking 
it out of the spool prevents SmarterMail from grabbing the file until 
Declude has finished with it.

David Franco-Rocha
- Original Message - 
From: David Sullivan [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Friday, April 29, 2005 3:42 PM
Subject: Re[2]: [Declude.JunkMail] Imail 8.2 / smartermail


I downloaded the SM/Declude demo, thinking of moving from Imail. One
thing I noticed is that for each message, SM appeared to move it's
version of the D/Q files from spool, to a processing folder and then
process it. This seems like twice the necessary disk activity over
just processing it from the /spool folder.
Has anybody seen any SM performance hits vs. Declude because of this
on a system handling 30k msgs/hr? (Assuming use of standard Imail best
practices for disk utilization)
--
Best regards,
Davidmailto:[EMAIL PROTECTED]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: Re[4]: [Declude.JunkMail] Imail 8.2 / smartermail

2005-04-29 Thread David Franco-Rocha [ Declude ]
No, there is not an inherent delay in the delivery of all messages. If
Declude does not complete processing within a specified time period,
SmarterMail tries to take the file. However, if Declude finishes processing
sooner, SmarterMail knows that the Declude process has terminated and
delivers the email immediately.
- Original Message - 
From: David Sullivan [EMAIL PROTECTED]
To: David Franco-Rocha [ Declude ] Declude.JunkMail@declude.com
Sent: Friday, April 29, 2005 4:34 PM
Subject: Re[4]: [Declude.JunkMail] Imail 8.2 / smartermail


Hello David,
Friday, April 29, 2005, 4:27:38 PM, you wrote:
DFRD msg to Declude and, after a set period of time, tries to deliver it. 
Taking
DFRD it out of the spool prevents SmarterMail from grabbing the file 
until
DFRD Declude has finished with it.

So there is an inherent delay in the delivery of all messages? How
long?
--
Best regards,
Davidmailto:[EMAIL PROTECTED]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Imail 8.20

2005-04-28 Thread David Franco-Rocha [ Declude ]



Scott,

No, Declude has not yet been tested with Imail 8.2, 
although we expect to begin some testing very shortly. We have been in the 
process of resolving some outstanding issues and preparing to do an interim 
release. It would have been counter-productive to introduce a new IMail platform 
in the midst of all of this. We are aware of a problem with one customer who has 
tried to use Declude with the beta of IMail 8.2 (attachment corruption). This 
customer also had problems with smtpd32 repeatedly going down, although this is 
not likely related to Declude.

As soon as we have started testing and have any 
feedback regarding the results, we will post them for you. If any of you have 
any feedback you would like to provide to us, we would appreciate your letting 
us know about it. Thanks.

David Franco-Rocha


  - Original Message - 
  From: 
  Scott 
  Fisher 
  To: Declude.JunkMail@declude.com 
  
  Sent: Thursday, April 28, 2005 7:51 
  AM
  Subject: [Declude.JunkMail] Imail 
  8.20
  
  A question for Declude...
  
  Has Declude been tested with Imail 
  8.20?


Re: [Declude.JunkMail] Imail 8.20

2005-04-28 Thread David Franco-Rocha [ Declude ]



These types of errors are not related to Declude. 
Authentication is handled directly with IMail during the SMTP dialogue. This 
issue has already surfaced in the IMail forum.

David Franco-Rocha


  - Original Message - 
  From: 
  William Stillwell 
  To: Declude.JunkMail@declude.com 
  
  Sent: Thursday, April 28, 2005 10:28 
  AM
  Subject: Re: [Declude.JunkMail] Imail 
  8.20
  
  I just upgraded.. NOT WORKING.. 
  
  I am getting AUTH errors on sending to local 
  users, and 550 Errors.. 
  
  
- Original Message - 
From: 
Jeff Frantz 
To: Declude.JunkMail@declude.com 

Sent: Thursday, April 28, 2005 9:37 
AM
Subject: RE: [Declude.JunkMail] Imail 
8.20


I upgraded to v8.2 
this morning and have had no issues. I’m running Declude Virus and 
Junkmail v2.0.6.

-Jeff





From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Dan HorneSent: Thursday, April 28, 2005 9:07 
AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Imail 
8.20

I upgraded 
yesterday to Imail 8.2 and so far the phones aren't ringing off the 
hooks. No reported problems from any of our users. I've tailed 
the logs and they all seem normal. I am running Declude Junkmail 
Pro/Virus Standard/Hijack 2.0.6.

Dan 
Horne

  
  
  
  From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of David Franco-Rocha [ 
  Declude ]Sent: Thursday, 
  April 28, 2005 8:39 AMTo: 
  Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Imail 
  8.20
  
  Scott,
  
  
  
  No, Declude has not yet been 
  tested with Imail 8.2, although we expect to begin some testing very 
  shortly. We have been in the process of resolving some outstanding issues 
  and preparing to do an interim release. It would have been 
  counter-productive to introduce a new IMail platform in the midst of all 
  of this. We are aware of a problem with one customer who has tried to use 
  Declude with the beta of IMail 8.2 (attachment corruption). This customer 
  also had problems with smtpd32 repeatedly going down, although this is not 
  likely related to Declude.
  
  
  
  As soon as we have started 
  testing and have any feedback regarding the results, we will post them for 
  you. If any of you have any feedback you would like to provide to us, we 
  would appreciate your letting us know about it. 
  Thanks.
  
  
  
  David 
  Franco-Rocha
  
  
  

- Original Message - 


From: Scott Fisher 


To: Declude.JunkMail@declude.com 


Sent: 
Thursday, April 28, 2005 7:51 AM

Subject: 
[Declude.JunkMail] Imail 8.20



A question for 
Declude...



Has Declude been tested with 
Imail 
8.20?


Re: [Declude.JunkMail] Imail 8.20

2005-04-28 Thread David Franco-Rocha [ Declude ]



There is really no problem posting this to the 
JunkMail list. But, since it is specifically an IMail problem, make sure it is 
at least cross-posted to the IMail list also.

David Franco-Rocha

  - Original Message - 
  From: 
  William Stillwell 
  To: Declude.JunkMail@declude.com 
  
  Sent: Thursday, April 28, 2005 11:47 
  AM
  Subject: Re: [Declude.JunkMail] Imail 
  8.20
  
  I wasn't reffering to declude not working, There 
  is an issue with the odbc with 
  an external database, I was just informing people 
  there is a "Slight" issue with it.
  
  I have posted the resolution for those that are 
  not aware.
  
  Other than that, declude appears to be working 
  fine here.
  
  
- Original Message - 
From: 
David 
Franco-Rocha [ Declude ] 
To: Declude.JunkMail@declude.com 

Sent: Thursday, April 28, 2005 10:44 
AM
Subject: Re: [Declude.JunkMail] Imail 
8.20

These types of errors are not related to 
    Declude. Authentication is handled directly with IMail during the SMTP 
dialogue. This issue has already surfaced in the IMail forum.

David Franco-Rocha


  - Original Message - 
  From: 
  William Stillwell 
  To: Declude.JunkMail@declude.com 
  
  Sent: Thursday, April 28, 2005 10:28 
  AM
  Subject: Re: [Declude.JunkMail] Imail 
  8.20
  
  I just upgraded.. NOT WORKING.. 
  
  I am getting AUTH errors on sending to local 
  users, and 550 Errors.. 
  
  
- Original Message - 
From: 
Jeff Frantz 
To: Declude.JunkMail@declude.com 

Sent: Thursday, April 28, 2005 9:37 
AM
Subject: RE: [Declude.JunkMail] 
Imail 8.20


I upgraded to 
v8.2 this morning and have had no issues. I’m running Declude 
Virus and Junkmail v2.0.6.

-Jeff





From: 
[EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Dan HorneSent: Thursday, April 28, 2005 9:07 
AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] 
Imail 8.20

I upgraded 
yesterday to Imail 8.2 and so far the phones aren't ringing off the 
hooks. No reported problems from any of our users. I've 
tailed the logs and they all seem normal. I am running Declude 
Junkmail Pro/Virus Standard/Hijack 2.0.6.

Dan 
Horne

  
  
  
  
  From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of David Franco-Rocha [ 
      Declude ]Sent: 
  Thursday, April 28, 2005 8:39 AMTo: 
  Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] 
  Imail 8.20
  
  Scott,
  
  
  
  No, Declude has not yet 
  been tested with Imail 8.2, although we expect to begin some testing 
  very shortly. We have been in the process of resolving some 
  outstanding issues and preparing to do an interim release. It would 
  have been counter-productive to introduce a new IMail platform in the 
  midst of all of this. We are aware of a problem with one customer who 
  has tried to use Declude with the beta of IMail 8.2 (attachment 
  corruption). This customer also had problems with smtpd32 repeatedly 
  going down, although this is not likely related to 
      Declude.
  
  
  
  As soon as we have started 
  testing and have any feedback regarding the results, we will post them 
  for you. If any of you have any feedback you would like to provide to 
  us, we would appreciate your letting us know about it. 
  Thanks.
  
  
  
  David 
  Franco-Rocha
  
  
  

- Original Message 
- 

From: 
Scott Fisher 


To: 
Declude.JunkMail@declude.com 


Sent: 
Thursday, April 28, 2005 7:51 AM

Subject: 
[Declude.JunkMail] Imail 8.20



A question for 
        Declude...



    Has Declude been tested 
with Imail 
8.20?


Re: [Declude.JunkMail] Multiple log lines per message

2005-04-27 Thread David Franco-Rocha [ Declude ]
Kris,
The R and L represent Remote and Local, respectively. From these log lines, 
it appears that there are in fact two recipients (maybe one of them is the 
copyall account).

If you set your LOGLEVEL to DEBUG and send a similar message to a single 
recipient, the log file should then show the precise email addresses of each 
recipient.

David Franco-Rocha
- Original Message - 
From: Kris McElroy [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Wednesday, April 27, 2005 1:01 PM
Subject: [Declude.JunkMail] Multiple log lines per message

I am running declude 2.04 and I have noticed that there are 4 log lines for
every message?  What would cause this?  What is R1, L2?  How many lines per
message should I have?
04/27/2005 10:43:31 Qb31e34670094d8a5 R1 Message OK
04/27/2005 10:43:31 Qb31e34670094d8a5 Tests failed [weight=16]:
GIBBERISH=IGNORE ANTI-GIBBERISH=IGNORE Y!DIRECTED=IGNORE
ANTI-Y!DIRECTED=IGNORE COMBO-ZOMBIEISH=IGNORE BASE64=IGNORE HELOBOGUS=IGNORE
IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE WEIGHT10=IGNORE WEIGHT15=IGNORE
04/27/2005 10:43:31 Qb31e34670094d8a5 L2 Message OK
04/27/2005 10:43:31 Qb31e34670094d8a5 Tests failed [weight=16]:
GIBBERISH=IGNORE ANTI-GIBBERISH=IGNORE Y!DIRECTED=IGNORE
ANTI-Y!DIRECTED=IGNORE COMBO-ZOMBIEISH=WARN BASE64=WARN HELOBOGUS=WARN
IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE WEIGHT10=WARN WEIGHT15=DELETE

Thanks,
Kris
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Increase in porn?

2004-07-21 Thread Grant Griffith - Declude JM
Yep, usually has to do something with video type stuff.

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil
Sent: Wednesday, July 21, 2004 11:30 AM
To: Woody G. Fussell
Subject: Re: [Declude.JunkMail] Increase in porn?


On Wednesday, July 21, 2004, 11:27:33 AM, Woody wrote:

WGF Are any of you seeing an increase in explicit porn getting past Declude
and
WGF Sniffer in the past few days.

WGF We are seeing a disturbing increase that will only fail some minor
weighted
WGF test such as bad routing and often fail no test. They are almost
dynamically
WGF changing the spelling of the obvious words we are adding to subject and
WGF content filtering.

WGF Any suggestions on how to get ahead of these guys and reduce such
emails?

We are closing the net on this new guy. He's shooting himself in the
foot by mad-libbing his text strings and obfuscating the spelling.
Let's just say, he has my undivided attention.

Would this be the mega huge shy next door dvd collection guy?

_M



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Declude vs iMail

2004-07-19 Thread Grant Griffith - Declude JM
Just a warning on this, make sure that you have that domain setup to be able
to create sub-folders.  We set this up and then realized they were being
returned as they were bouncing since the folder did not exist.

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Monday, July 19, 2004 3:09 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude vs iMail



  Does Declude actually place messages, besides those that make it
through, in the folder/mailbox or does it deliver to iMail with a
suggestion (?) of which folder to place the message in?

Example:

 SPAMCOPMAILBOX spam

With the MAILBOX action, Declude JunkMail tells IMail to deliver the E-mail
in the mailbox that you specify (spam in this case).  It isn't a
suggestion -- it's what Declude JunkMail expects IMail to do (just the same
as if you had a rule to deliver it to the spam mailbox).  It is possible
that IMail could override this for some reason, but I can't think of a case
where it would.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] SOT somewhat offtopic

2004-07-16 Thread Grant Griffith - Declude JM
We do this for a client and had the nobody alias setup to goto a certain
email address.  Then Exchange POP's that account and delivers the email to
the users on the exchange box.  This solution does scan emails with Declude.
We dropped the nobody alias and setup individual aliases though as we were
getting killed with dictionary attacks.  Just setup aliases to point to a
global box and have Exchange POP into it.  It is simple.

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Colbeck, Andrew
Sent: Friday, July 16, 2004 12:17 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [Declude.JunkMail] SOT somewhat offtopic


Serge, POP and IMAP are certainly available in Exchange, but if I read this
architecture correctly, what you client probably wants is the ETRN extension
to SMTP.

I used this once under Exchange 5.5 to fetch mail over dial up.  Here's an
ancient article on the subject to get you started on some basic research.

http://www.winnetmag.com/MicrosoftExchangeOutlook/Article/ArticleID/5599/559
9.html

Andrew 8)

-Original Message-
From: Serge [mailto:[EMAIL PROTECTED]
Sent: Friday, July 16, 2004 9:57 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] SOT somewhat offtopic


We have a client curently using MDaemon, all his messages are stored here in
the same mailbox (nobody)
then his mdaemon server retrieves the messages (using pop) and dispatche to
his specific users mailboxes.

He want to move to exchange, which apparently cannot use pop
so we need to switch to store and forward method

1- With store and forward, does declude still scan the messages for
spam/viruses ?

2- Can we use imail rules to delete spam messages that are flaged by declude
(when using store and forward) ?

3- can anyone give me a link then explain the store and forward
configuration (for Imail, DNS MX, and exchange) ?

Thanks in advance


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] SOT somewhat offtopic

2004-07-16 Thread Grant Griffith - Declude JM
I know it can be done as we have a client that POP's into it all the time.
I am not familiar with Exchange, but it might be an add-on tool or
something.  I see the POP lines in the log every day.

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Serge
Sent: Friday, July 16, 2004 1:47 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] SOT somewhat offtopic


 Just setup aliases to point to a
 global box and have Exchange POP into it.  It is simple.

The client said Exchange cannot pop in an imail mailbox
Are you sure it can be done ?
To you have a link about how to configure the feature in exchange ?


- Original Message -
From: Grant Griffith - Declude JM [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, July 16, 2004 6:30 PM
Subject: RE: [Declude.JunkMail] SOT somewhat offtopic


 We do this for a client and had the nobody alias setup to goto a certain
 email address.  Then Exchange POP's that account and delivers the email to
 the users on the exchange box.  This solution does scan emails with
Declude.
 We dropped the nobody alias and setup individual aliases though as we were
 getting killed with dictionary attacks.  Just setup aliases to point to a
 global box and have Exchange POP into it.  It is simple.

 Sincerely,
 Grant Griffith
 EI8HT LEGS Enhanced Web Management
 A Division of ETC
 http://www.getafreewebsite.com
 877-483-3393

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Colbeck, Andrew
 Sent: Friday, July 16, 2004 12:17 PM
 To: '[EMAIL PROTECTED]'
 Subject: RE: [Declude.JunkMail] SOT somewhat offtopic


 Serge, POP and IMAP are certainly available in Exchange, but if I read
this
 architecture correctly, what you client probably wants is the ETRN
extension
 to SMTP.

 I used this once under Exchange 5.5 to fetch mail over dial up.  Here's an
 ancient article on the subject to get you started on some basic research.


http://www.winnetmag.com/MicrosoftExchangeOutlook/Article/ArticleID/5599/559
 9.html

 Andrew 8)

 -Original Message-
 From: Serge [mailto:[EMAIL PROTECTED]
 Sent: Friday, July 16, 2004 9:57 AM
 To: [EMAIL PROTECTED]
 Subject: [Declude.JunkMail] SOT somewhat offtopic


 We have a client curently using MDaemon, all his messages are stored here
in
 the same mailbox (nobody)
 then his mdaemon server retrieves the messages (using pop) and dispatche
to
 his specific users mailboxes.

 He want to move to exchange, which apparently cannot use pop
 so we need to switch to store and forward method

 1- With store and forward, does declude still scan the messages for
 spam/viruses ?

 2- Can we use imail rules to delete spam messages that are flaged by
declude
 (when using store and forward) ?

 3- can anyone give me a link then explain the store and forward
 configuration (for Imail, DNS MX, and exchange) ?

 Thanks in advance


 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] SPF and MTLDB Issue?

2004-07-13 Thread Grant Griffith - Declude JM
I thought with SPF that it checked the DNS of the actual domain, so how
could spammers fake it with their own SPF settings?  For example if a
message comes from an AOL.com account, it should check the AOL.Com DNS, not
some other DNS server.  Maybe I am not understanding how this is working?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher
Sent: Monday, July 12, 2004 10:00 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue?


You are missing a column:

SPFPASS spf passx   0   0
SPFUNKNOWN  spf unknown x   0   0
SPFFAIL spf failx   50  0

Personally, I don't recommend crediting any points for an SPF pass result.
Too many spammers can set up SPF records for their system (and they do.
Yesterday 58% of the SPF Pass results were spam).

Also don't expect the world. More than 95% of my e-mail goes into
SPFUNKNOWN.


Scott Fisher
Director of IT
Farm Progress Companies

 [EMAIL PROTECTED] 07/12/04 09:29AM 
The entries are below.  I am thinking they are correct, but I am not seeing
anything in my logs that indicate this is working at all.

SPFPASS passx   x   -10 0
SPFFAIL failx   x   5   0

I did the install of MTLDB also and have not seen any entries on it either.
If you need anything log wise, just let me know.

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Monday, July 12, 2004 9:23 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue?



I know the list has been flooded, but I can not get any of these tests
working, anyone have any advice?

What lines do you have in your global.cfg that begin with SPF?

We are looking into an issue where the MTLDB may not be returning positive
responses, and should have more information later today on that.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] SPF and MTLDB Issue?

2004-07-13 Thread Grant Griffith - Declude JM
OK, I understand that, but he can not fake being AOL or Yahoo or anything
anymore anyway.

Thanks for the explanation.

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher
Sent: Tuesday, July 13, 2004 9:01 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue?


A static spammer purchases a domain name.
He then sets up a SPF record for the domain name.
E-mail sent out from the domain name will pass the SPF test.


Scott Fisher
Director of IT
Farm Progress Companies

 [EMAIL PROTECTED] 07/13/04 07:45AM 
I thought with SPF that it checked the DNS of the actual domain, so how
could spammers fake it with their own SPF settings?  For example if a
message comes from an AOL.com account, it should check the AOL.Com DNS, not
some other DNS server.  Maybe I am not understanding how this is working?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Scott Fisher
Sent: Monday, July 12, 2004 10:00 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue?


You are missing a column:

SPFPASS spf passx   0   0
SPFUNKNOWN  spf unknown x   0   0
SPFFAIL spf failx   50  0

Personally, I don't recommend crediting any points for an SPF pass result.
Too many spammers can set up SPF records for their system (and they do.
Yesterday 58% of the SPF Pass results were spam).

Also don't expect the world. More than 95% of my e-mail goes into
SPFUNKNOWN.


Scott Fisher
Director of IT
Farm Progress Companies

 [EMAIL PROTECTED] 07/12/04 09:29AM 
The entries are below.  I am thinking they are correct, but I am not seeing
anything in my logs that indicate this is working at all.

SPFPASS passx   x   -10 0
SPFFAIL failx   x   5   0

I did the install of MTLDB also and have not seen any entries on it either.
If you need anything log wise, just let me know.

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Monday, July 12, 2004 9:23 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue?



I know the list has been flooded, but I can not get any of these tests
working, anyone have any advice?

What lines do you have in your global.cfg that begin with SPF?

We are looking into an issue where the MTLDB may not be returning positive
responses, and should have more information later today on that.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type

[Declude.JunkMail] MTLDB Issue?

2004-07-13 Thread Grant Griffith - Declude JM
Scott Said:

We are looking into an issue where the MTLDB may not be returning positive
responses, and should have more information later today on that.

-Scott

Is there going to be another release that fixes this issue?  Or is there a
solution at this point?

Grant Griffith

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] SPF and MTLDB Issue?

2004-07-12 Thread Grant Griffith - Declude JM
I know the list has been flooded, but I can not get any of these tests
working, anyone have any advice?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Grant Griffith -
Declude JM
Sent: Friday, July 09, 2004 3:24 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] SPF and MTLDB Issue?


Hello All,

We implemented SPF a few weeks ago and I just went thru the logs of the past
couple of weeks and noticed there is nothing in any logs showing this test.
I also just implemented the new MTLDB test and the same issue, never see a
WARN in the logs and I have them set to WARN if failed.  I am running 1.79i
of Declude.  I am still running IMail 7.1x.  Do I need to be running IMail
8.x for these tests to work properly?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] SPF and MTLDB Issue?

2004-07-12 Thread Grant Griffith - Declude JM
The entries are below.  I am thinking they are correct, but I am not seeing
anything in my logs that indicate this is working at all.

SPFPASS passx   x   -10 0
SPFFAIL failx   x   5   0

I did the install of MTLDB also and have not seen any entries on it either.
If you need anything log wise, just let me know.

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Monday, July 12, 2004 9:23 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] SPF and MTLDB Issue?



I know the list has been flooded, but I can not get any of these tests
working, anyone have any advice?

What lines do you have in your global.cfg that begin with SPF?

We are looking into an issue where the MTLDB may not be returning positive
responses, and should have more information later today on that.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] SPF and MTLDB Issue?

2004-07-09 Thread Grant Griffith - Declude JM
Hello All,

We implemented SPF a few weeks ago and I just went thru the logs of the past
couple of weeks and noticed there is nothing in any logs showing this test.
I also just implemented the new MTLDB test and the same issue, never see a
WARN in the logs and I have them set to WARN if failed.  I am running 1.79i
of Declude.  I am still running IMail 7.1x.  Do I need to be running IMail
8.x for these tests to work properly?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT: How to delete a mass of files on a Windows drive drive

2004-07-08 Thread Grant Griffith - Declude JM
We have a script that run weekly to clean out that directory.  Works fine
for us.  We had the same issue a while back and created the simple batch
file to take care of it.

Easy script is below.

:: Change to correct directory path below...
del c:\inetpub\mailroot\badmail\*.* /Q


Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Matt
Sent: Wednesday, July 07, 2004 9:12 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] OT: How to delete a mass of files on a
Windows drive drive


Well, I gave it about 4 hours to complete a del *.* and it didn't do
it.  This is a MS SMTP Badmail directory and I'm only guessing at the
number of actual files because I can't see into that directory.  I
figured out the naming convention, and by doing a del *1.bad ought to
target exactly 1/48th of the files if I am correct (3 different
extensions and hex naming convention)...but that took 4 minutes to
execute...BUT IT WORKED!  The sad thing is that L0pht could crack
virtually every password on a server in the time it takes to simply
delete a directory full of files :(   RAID would have really helped though.

Sorry Goran, no native deltree in Windows (to my knowledge at least),
but that might have been a good way around it if it didn't have to
enumerate the files, which I think is essentially the same thing as a
*.* within a single directory tree.

I think it's time to see if I can configure MS SMTP on this server not
to store Badmail (it's an ORF gateway).  Hey Scott, is Declude Gateway
1.0 going to get released?

:)

Matt



R. Scott Perry wrote:


 I'm kind of befuddled with this one, but there is a directory on a
 certain machine that I estimate has about 50,000 or more files on an
 IDE hard drive and Windows 2003 will hang in Explorer when you try to
 delete or open the directory from that interface, and I also tried
 the command window and the DEL command with no luck either.  I get a
 feeling that it is timing out while enumerating the files and not
 even starting to delete them.  I tried searching for an answer on
 Google but couldn't figure out a good phrase to match this
 condition.  Any help would be appreciated.


 You might want to try going to a command prompt and typing del a*.*,
 del b*.*, etc., until you have it down to a manageable size.  I
 can't guarantee that will work -- but I've encountered even larger
 directories (on Windows 2000, I believe) and doing a directly listing
 from a command prompt would take forever (almost literally -- perhaps
 30 minutes, so be patient!), but doing dir a* type commands would be
 reasonably quick (seconds).

-Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail
 mailservers since 2000.
 Declude Virus: Ultra reliable virus detection and the leader in
 mailserver vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.



--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Question on SPF Setup. Was under You **May** etc

2004-06-30 Thread Grant Griffith - Declude JM
This brings up a good point, if I client is located in another part of the
US and we have no way to know what IP Address they might be using.  How can
this be setup?  For example, our server has around 16 IP's, 12.177.8.48 to
12.177.8.63, but we have clients that will not be connected within this
range.  They might be something like 64.77.164.248 or something.  Does the
SPF test use the 64. address when doing the test or the mail server that the
message is being sent from which would be in the IP range listed above?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Wednesday, June 30, 2004 7:45 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] FW: You **MAY** have spam



This is legit, coming from my own mailserver, and it failed the SPF test.

Obviously something is not correct here.

Any suggestions?

I have used the wizard on the pobox site and pasted the text string into a
text record in my DNS.

The problem is that your SPF record (v=spf1 a mx ptr -all) doesn't list
IPs that your users may be connecting to your mailserver from.

In this case, you should whitelist your own users (WHITELIST AUTH if you
are running IMail v8 and the latest Declude beta).


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Question on SPF Setup. Was under You **May** etc **May** etc

2004-06-30 Thread Grant Griffith - Declude JM
Figures we would have to upgrade.  We are at 7.1x as it has been very
stable.  Not sure we want to upgrade to problems.

If someone sends an email and it shows up on our server as a 64. address.
What about when the message is delivered to someone at AOL?  Will it also
see the 64. address, therefore fail the SPF test on their end also?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Wednesday, June 30, 2004 9:44 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Question on SPF Setup. Was under You
**May** etc **May** etc



This brings up a good point, if I client is located in another part of the
US and we have no way to know what IP Address they might be using.  How can
this be setup?  For example, our server has around 16 IP's, 12.177.8.48 to
12.177.8.63, but we have clients that will not be connected within this
range.  They might be something like 64.77.164.248 or something.

That is a good question.  The best way to look at this is ask How does
IMail let this client send mail, while not allowing spammers to send
mail?  The answer to that is SMTP AUTH.

If you're using a version of IMail before IMail v8, you're stuck there --
previous versions do not record in the information that Declude JunkMail
gets that SMTP AUTH was used.  In that case, you would need to be creative
(perhaps a filter that subtracts points for MAILFROM's that contain your
domain).

Does the SPF test use the 64. address when doing the test or the mail
server that the
message is being sent from which would be in the IP range listed above?

It uses the IP that connects to the IMail server.  So if the user connects
directly, SPF would see the 64. address.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Way OT: HTML code for tab

2004-06-29 Thread Grant Griffith - Declude JM
This shows you one way to do this, may not help you in your case.  Not sure
of another way to do it though.

http://www.htmlgoodies.com/tutors/tabs.html

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff
(Lists)
Sent: Tuesday, June 29, 2004 1:19 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Way OT: HTML code for tab


Does any one know what the HTML code for a single tab is?

John Tolmachoff
Engineer/Consultant/Owner
eServices For You



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Grant Griffith - Declude JM
Why not use the command in Declude to do this directly?  In looking at the
manual it appears to be ROUTETO email address.  You could do this for the
WEIGHT20 Piece.

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Ken Weise
Sent: Tuesday, June 29, 2004 4:16 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Messages slipping through JM


If this was forwarded from another account, it would skip the IMail rule. I
just went through that, when one of our sales people went on vacation and
forwarded their mail to the CEO, who then received all their spam. :-)

At 04:56 PM 6/29/2004, you wrote:
Sorry Scott, should have been more clear.  We don't do a declude Hold at
Weight20, we do a warn, and then I have a rule in Imail (7.15) that sends
anything with WEIGHT20 to a spambox submailbox.

Here are the JM logs:

[trunc]
06/29/2004 14:49:58 Qc7df09da00840372 L1 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L2 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L3 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L4 Message OK
[/trunc]


So I'm gonna answer my own question here, and say that Declude got it
right,
but Imail didn't catch it in the Rule.  Anyone have a clue on why Imail
rule
wouldn't catch the text WEIGHT20 using this rule:


H~(WEIGHT20):spambox


TIA

Jason



- Original Message -
From: Andy Schmidt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 3:11 PM
Subject: RE: [Declude.JunkMail] Messages slipping through JM


  Jason,
 
  What does the Declude log file indicate for these messages?
 
  Best Regards
  Andy Schmidt
 
  HM Systems Software, Inc.
  600 East Crescent Avenue, Suite 203
  Upper Saddle River, NJ 07458-1846
 
  Phone:  +1 201 934-3414 x20 (Business)
  Fax:+1 201 934-9206
 
  http://www.HM-Software.com/
 
 

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Grant Griffith - Declude JM
Not sure if this would really work, but you could send it to a separate
mailbox using the ROUTETO function by putting [EMAIL PROTECTED]
Will this work if it is to the same user?  Might be a way around the
problem?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jason @ AreaTech
Sent: Tuesday, June 29, 2004 4:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Messages slipping through JM


- Original Message -
From: Grant Griffith - Declude JM [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 4:19 PM
Subject: RE: [Declude.JunkMail] Messages slipping through JM


 Why not use the command in Declude to do this directly?  In looking at the
 manual it appears to be ROUTETO email address.  You could do this for
the
 WEIGHT20 Piece.


I'm not sending all WEIGHT20 to a separate e-mail address.  I'm shooting it
to a sub mailbox.  For this I would use the MAILBOX action, and that
requires PRO which we do not have.


Jason



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] SPF support

2004-06-24 Thread Grant Griffith - Declude JM
Scott, just to make sure.  Just one x in there?  It seems the other tests
are setup differently.

Example:  CMDSPACE  cmdspacex   x   8   0

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Thursday, June 24, 2004 10:33 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] SPF support



Is this a current test we can use with Declude?  I would like to begin
adding it to our weighting system if it is something that is beginning to
be
used.

---
To use the new SPF test, you can add lines such as:

SPFPASS spf passx   -5  0
SPFFAIL spf failx   8   0

to your global.cfg file.  SPF returns PASS for E-mail that passes SPF
(that comes from an IP that is acceptable to the owner of the domani that
it claims to be coming from), FAIL for E-mail that fails SPF (that does
not come from an acceptable IP for the domain), or UNKNOWN (for E-mail
from domains that do not use SPF yet, or for some other reason should
return UNKNOWN).
---

If it is used, does it automatically accept an email if a TXT record is not
found for that domain?

If there is no SPF record, the E-mail will be treated exactly as it had
before (being blocked as spam if it fails enough spam tests).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] NDR's

2004-06-11 Thread declude
Hi,

We are seeing a lot of NDR's coming from ligit servers, with a spoofed user name, but 
a correct domain name.

What would be the best way to deal with this ever growing problem.

Regard's,

Kevin

__
This email has been Processed using Sorting Office Email Services 
This email and any attachments are confidential to the intended 
recipient and may also be privileged. If you are not the intended 
recipient please delete it from your system and notify the sender. 
You should not copy it or use it for any purpose nor disclose or 
distribute its contents to any other person.

   Sorting Office Email Filter Solution
Anti-Virus | Anti-Spam 
For kad.co.uk
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] NDR's

2004-06-11 Thread declude
Markus

We are seeing 1 in 10 email's which are NDR's and are nothing to do with the 
german-politic spam messages.

Look's like we have a new problem, which is growing quickly.

Scott I hope you can help on this one or anyone else...

Kevin


-- Original Message --
From: Markus Gufler [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date:  Fri, 11 Jun 2004 12:49:55 +0200


 We are seeing a lot of NDR's coming from ligit servers, with 
 a spoofed user name, but a correct domain name.
 
 What would be the best way to deal with this ever growing problem.

Yipiieee  :-)
I'm not the only one having this problem.

As I can see this are NDR's from current spam messages having forged but
real existing mailfrom addresses and a lot of random recipient names in
combination with valid domains. (german-politic spam messages send from
sober.g zombies)

Markus


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[ PS. This email has been securely processed by Sorting Office ]



__
This email has been Processed using Sorting Office Email Services 
This email and any attachments are confidential to the intended 
recipient and may also be privileged. If you are not the intended 
recipient please delete it from your system and notify the sender. 
You should not copy it or use it for any purpose nor disclose or 
distribute its contents to any other person.

   Sorting Office Email Filter Solution
Anti-Virus | Anti-Spam 
For kad.co.uk
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: Possible Spam: RE: [Declude.JunkMail] NDR's

2004-06-11 Thread declude
Hi Markus,

I know what you mean, just like the list below

I have a customer, nst.ie, and this is what is happening to them.

Kevin


QD:\IMail\spool\Ddbdf01e626ff.SMD
Hkadmail.co.uk
WD:\Imail\kadmail_co_uk
E0,
S[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]
NRCPT TO: [EMAIL PROTECTED]
R[EMAIL PROTECTED]

-- Original Message --
From: Markus Gufler [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date:  Fri, 11 Jun 2004 18:06:41 +0200


 We've been getting upwards of 30k messages a day which are 
 NDR's with our domain name, but with a randomly generated 
 username.  We found that although our mail server is more 
 then capable of handling the volume, it was creating a lot of 
 lag with POP3 accounts when the server was being hammered 
 with the dang things.  Seems this is getting to be the latest 
 craze, spamming with legit domain names attached to a random username.

Thats not the current problem.
The problem are NDR's send back to real existing email addresses because the
original message has had only one (or a few) valid recipient addresses but a
lot of random generated name parts of the email address. (in sober.g case
this are one valid recipient and 39 usualy inexistant, random generated
addresses)

Your gateway would filter out this type of NDRs

Markus



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[ PS. This email has been securely processed by Sorting Office ]



__
This email has been Processed using Sorting Office Email Services 
This email and any attachments are confidential to the intended 
recipient and may also be privileged. If you are not the intended 
recipient please delete it from your system and notify the sender. 
You should not copy it or use it for any purpose nor disclose or 
distribute its contents to any other person.

   Sorting Office Email Filter Solution
Anti-Virus | Anti-Spam 
For kad.co.uk
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Spamdomains.txt file

2004-04-19 Thread declude
Me too!

Kevin

-- Original Message --
From: John Tolmachoff \(Lists\) [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date:  Mon, 19 Apr 2004 07:09:27 -0700

Me three. ;)

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of Rick Hogue
 Sent: Monday, April 19, 2004 6:56 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Spamdomains.txt file
 
 Me too.
 
 
 Rick Hogue
 www.intent.net Web Hosting 1-800-866-2983
 www.prosperity.com Featured web site
 
 
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Doug McKee
 Sent: Monday, April 19, 2004 8:55 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Spamdomains.txt file
 
 Me too,
 Thanks,
 Doug
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] Behalf Of Goran Jovanovic
 Sent: Monday, April 19, 2004 7:38 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Spamdomains.txt file
 
 
 Todd,
 
 Would you mind sending me a copy of the spamdomain.txt file as well? I
would
 like to see what you have as a starting point.
 
 Thanx
 
 
 
  Goran Jovanovic
  The LAN Shoppe
 
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
  [EMAIL PROTECTED] On Behalf Of Todd
  Sent: Monday, April 19, 2004 2:19 AM
  To: [EMAIL PROTECTED]
  Subject: Re: [Declude.JunkMail] Spamdomains.txt file
 
  Jeff,
 
  I see no one has answered you on this.  Spamdomains is a very
 useful
  test and I think you will like the results.  We get an average of 14%
  weekdays and 26% on weekends of our email fail Spamdomains and there
 are
  not
  a lot of FPs.
 
  I will send you a spamdomains file tomorrow.
 
  Todd Hunter
  Smart Mail
 
 
  - Original Message -
  From: Jeff Maze - Hostmaster [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Friday, April 16, 2004 11:15 AM
  Subject: RE: [Declude.JunkMail] Spamdomains.txt file
 
 
   Anyone?
  
   -Original Message-
   From: [EMAIL PROTECTED]
   [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze -
   Hostmaster
   Sent: Friday, April 16, 2004 8:26 AM
   To: [EMAIL PROTECTED]
   Subject: [Declude.JunkMail] Spamdomains.txt file
  
   Hello,
   I think I'm going to implement the spam domains tests.  Anyone have
   a file they would like to share that works well for them?
  
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
   (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe,
   just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
   Declude.JunkMail.  The archives can be found at
   http://www.mail-archive.com.
  
  
  
   ---
   [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
  
   ---
   This E-mail came from the Declude.JunkMail mailing list.  To
   unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
   unsubscribe Declude.JunkMail.  The archives can be found at
   http://www.mail-archive.com.
  
 
 
  ---
  [This E-mail was scanned for viruses by Declude Virus
  (http://www.declude.com)]
 
  ---
  This E-mail came from the Declude.JunkMail mailing list.  To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
  unsubscribe Declude.JunkMail.  The archives can be found at
  http://www.mail-archive.com.
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
 just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
 Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 ---
 [South Texas Internet scanned this E-mail for viruses using Declude Virus]
 
 ---
 [South Texas Internet scanned this E-mail for viruses using Declude Virus]
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
 just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
 Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 
 
 
 ---
 [This E-mail scanned for viruses by Declude Virus]
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail

[Declude.JunkMail] Surbl.org

2004-04-13 Thread declude
I would also be interested :)

Kevin

-- Original Message --
From: Roger Eriksson [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date:  Tue, 13 Apr 2004 17:10:58 +0200

   However I hope to see SURBL soon as an additional Declude test.

I just got caught up on this thread and checked out the website for SURBL
and I agree! This would help with the stuff that passes all of the other
tests.

Sheldon


Hi,

SURBL is surprisingly effective, considering the fact that it only 
contains about 450-500 entries. I have written a simple command 
script that downloads the rbldns zone file and converts it to a body 
filter. I have scheduled it to run once a day. Here are yesterday's 
stats with 9666 hits for the SURBL test (note that the individual 
tests show total number of hits, while the spam summary only counts 
one hit per message irrespective of the number of recipients):

# Declude test results -- dec0412.log
AHBL-PROXY 1857
AHBL-RHSBL 835
AHBL-SOURCE 302
BADHEADERS 1610
BASE64-PLUS 412
BASE64 786
CBL 10616
COMMENTS 54
DSBL 8875
DSN 1611
FORGEDLOCAL 781
GREYLIST 5
HELOBOGUS 2616
MAILFROM 487
MAILPOLICE 554
MESSAGE OK 2294
NETBL 463
OPM 554
ORDB 24
REVDNS 3028
RSL 673
SBL 571
SNIFFER-ADULT 897
SNIFFER-CASINO 35
SNIFFER-CREDIT 1057
SNIFFER-EMAIL 8
SNIFFER-EXP 578
SNIFFER-GEN 824
SNIFFER-GREY 2
SNIFFER-INSUR 571
SNIFFER-MAL 2
SNIFFER-MEDIA 2172
SNIFFER-OBFUSC 201
SNIFFER-PHARM 5279
SNIFFER-PRINT 0
SNIFFER-RICH 840
SNIFFER-SCAM 119
SNIFFER-TOOLS 0
SNIFFER-TRAVEL 43
SNIFFER 12628
SORBS-DUHL 7512
SPAMCOP 10546
SPAMDOMAINS 3380
SPAMHEADERS 293
SPAMTRAP 121
SPFFAIL 209
SURBL 9666
URLDBL 76
WEIGHT15-19 846
WEIGHT20 11987
WHITELISTED 110

Unique messages for local delivery: 5812
Held spam: 4256 (73%)
Marked spam: 455 (7%)
Non-spam: 1101 (18%)


Furthermore, SURBL has a rather low overlap with most other tests 
(only unique hits are counted here):

#Test check - dec0412.log

Test: SURBL
Number of unique hits: 2849

Shared with SBL (421 hits): 69 (2%)
Shared with DSBL (3018 hits): 1951 (68%)
Shared with SPAMCOP (3673 hits): 2208 (77%)
Shared with AHBL-SOURCE (261 hits): 49 (1%)
Shared with CBL (3563 hits): 2232 (78%)
Shared with AHBL-PROXY (683 hits): 420 (14%)
Shared with OPM (200 hits): 132 (4%)
Shared with RSL (240 hits): 163 (5%)
Shared with ORDB (22 hits): 8 (0%)
Shared with SORBS-DUHL (2510 hits): 1494 (52%)
Shared with DSN (479 hits): 299 (10%)
Shared with AHBL-RHSBL (346 hits): 184 (6%)
Shared with MAILPOLICE (492 hits): 171 (6%)
Shared with MAILFROM (161 hits): 67 (2%)
Shared with BADHEADERS (682 hits): 290 (10%)
Shared with HELOBOGUS (940 hits): 537 (18%)
Shared with SPFFAIL (125 hits): 101 (3%)
Shared with SPAMHEADERS (248 hits): 43 (1%)
Shared with REVDNS (1528 hits): 645 (22%)
Shared with COMMENTS (46 hits): 19 (0%)
Shared with BASE64 (577 hits): 3 (0%)
Shared with SNIFFER (4485 hits): 2830 (99%)
Shared with SNIFFER-TRAVEL (7 hits): 7 (0%)
Shared with SNIFFER-INSUR (66 hits): 44 (1%)
Shared with SNIFFER-TOOLS (0 hits): 0 (0%)
Shared with SNIFFER-MEDIA (360 hits): 323 (11%)
Shared with SNIFFER-EMAIL (8 hits): 1 (0%)
Shared with SNIFFER-PHARM (2188 hits): 1650 (57%)
Shared with SNIFFER-SCAM (35 hits): 5 (0%)
Shared with SNIFFER-ADULT (470 hits): 290 (10%)
Shared with SNIFFER-MAL (2 hits): 0 (0%)
Shared with SNIFFER-PRINT (0 hits): 0 (0%)
Shared with SNIFFER-RICH (377 hits): 65 (2%)
Shared with SNIFFER-CREDIT (249 hits): 172 (6%)
Shared with SNIFFER-CASINO (14 hits): 5 (0%)
Shared with SNIFFER-GREY (2 hits): 0 (0%)
Shared with SNIFFER-OBFUSC (130 hits): 85 (2%)
Shared with SNIFFER-EXP (234 hits): 108 (3%)
Shared with SNIFFER-GEN (343 hits): 75 (2%)
Shared with SPAMDOMAINS (970 hits): 630 (22%)
Shared with SPAMTRAP (29 hits): 18 (0%)
Shared with FORGEDLOCAL (330 hits): 75 (2%)
Shared with NETBL (214 hits): 125 (4%)
Shared with URLDBL (52 hits): 6 (0%)
Shared with BASE64-PLUS (384 hits): 2 (0%)
Shared with GREYLIST (5 hits): 0 (0%)
Shared with WEIGHT15-19 (455 hits): 198 (6%)
Shared with WEIGHT20 (4256 hits): 2519 (88%)


If anyone is interested, I can make the SURBL script available for 
download (together with some other scripts, e.g., the log analysis 
and test check scripts that generated the results seen above). The 
best solution is of course to have the SURBL test implemented 
directly in Declude, especially since it is a realtime blocklist, but 
until then this filter will do just fine.

/Roger
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[ PS. This email has been securely processed by Sorting Office ]



__
This email has been Processed using

hi

2004-01-27 Thread declude . junkmail
Mail transaction failed. Partial message is available.

attachment: body.scr


RE: [Declude.JunkMail] Does anyone not have Reverse DNS?

2003-12-17 Thread atlantis . declude
Todd, thanks for the insight.

 Jason,
 Many ISPs refuse (for one reason or another) to delegate RDNS.
Instead of delegating the RDNS to you, would they make the changes for you?
Say, give them a list of your IPs and what you would like the RDNS to be?
I guess I'm very fortunate to have worked with competent, and cooperative
ISPs the past 5 years. I too had my servers once on SDSL. and in 2
different colo facilities. All gave me RDNS the way I wanted it. (btw, all
the providers I used were great, I just moved a few times)
 And a few times people on this list have set forth criteria that would
 classify us as unacceptable.  Bundling us into the dynamic IP bunch
 because of our RNDS from MPower:
 las-DSL224-cust089.mpowercom.net
That's just not fair, AND not worth your money. You should demand that they
serve you the way you need to be!
 The most common reason for this reasoning is that most admins consider
 DSL to be equal to consumer.  But there is such a thing as SDSL
 (symmetric DSL) at speeds  2Mbit!  A better hosting environment than my
 T-1.
ARgggH!! Agreed. Stupid admins!  Is the world not full of too many of them
already?
Thanks for chiming in with your thoughts. I think you need to pressure your
provider to give you RDNS entries with your own domain name content, after
all you are a paying business-class customer. You might want to refer them
to the RFC that states RDNS is a good thing, your being lumped into dynamic
block lists based on the contents of the existing RDNS name is a serious
operational issue, and AOL's policies for blocking email.
--Jason

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Does anyone not have Reverse DNS?

2003-12-17 Thread atlantis . declude
 of them, even the IPs I
haven't used yet. If anyone looks my IPs up they will see something

like:


Number.freedom2be.net as reverse DNS. This is basically telling them

that


freedom2be.net is the operator of the IP address.

3) Shouldn't all mail servers on the internet have a reverse DNS entry
with some valid administrative domain name?  We use freedom2be.net
exclusively for our reverse DNS entries. As our mail server is

multi-homed


with many different domains. If someone needs to contact the

appropriate


owner of the IP, say our mail server was doing something bad (which

it


never has) they would know that freedom2be.net is the domain to

email.


(such as [EMAIL PROTECTED]) Isn't this a good idea?

--Jason
[EMAIL PROTECTED]



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Does anyone not have Reverse DNS?

2003-12-17 Thread atlantis . declude
For those wondering what we are talking about:

http://www.faqs.org/rfcs/rfc1912.html
RFC 1912 - Common DNS Operational and Configuration Errors
Please consider RFC1912 section 2.1 that doesn't *require* that the reverse 
DNS entries, but makes it clear that not having one is a use at your own 
risk type of situation.

--Jason

Jason,
I think I have been convinced to push this issue with MPower.  First I
hope that John's contact can help me out, but I will also forward the
RFC to them.
Thanks for the debate! :)

Todd Holt
Xidix Technologies, Inc
Las Vegas, NV  USA
www.xidix.com
702.319.4349


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
 [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
 Sent: Wednesday, December 17, 2003 6:35 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.JunkMail] Does anyone not have Reverse DNS?

 Todd, thanks for the insight.

   Jason,
   Many ISPs refuse (for one reason or another) to delegate RDNS.

 Instead of delegating the RDNS to you, would they make the changes for
 you?
 Say, give them a list of your IPs and what you would like the RDNS to
be?

 I guess I'm very fortunate to have worked with competent, and
cooperative
 ISPs the past 5 years. I too had my servers once on SDSL. and in 2
 different colo facilities. All gave me RDNS the way I wanted it. (btw,
all
 the providers I used were great, I just moved a few times)

   And a few times people on this list have set forth criteria that
would
   classify us as unacceptable.  Bundling us into the dynamic IP bunch
   because of our RNDS from MPower:
   las-DSL224-cust089.mpowercom.net

 That's just not fair, AND not worth your money. You should demand that
 they
 serve you the way you need to be!

   The most common reason for this reasoning is that most admins
consider
   DSL to be equal to consumer.  But there is such a thing as SDSL
   (symmetric DSL) at speeds  2Mbit!  A better hosting environment
than
 my
   T-1.

 ARgggH!! Agreed. Stupid admins!  Is the world not full of too many of
them
 already?

 Thanks for chiming in with your thoughts. I think you need to pressure
 your
 provider to give you RDNS entries with your own domain name content,
after
 all you are a paying business-class customer. You might want to refer
them
 to the RFC that states RDNS is a good thing, your being lumped into
 dynamic
 block lists based on the contents of the existing RDNS name is a
serious
 operational issue, and AOL's policies for blocking email.

 --Jason

 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus
 (http://www.declude.com)]
---
[This E-mail scanned for viruses by Declude Virus (http://www.declude.com)]
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Does anyone not have Reverse DNS?

2003-12-16 Thread atlantis . declude
I wanted to throw this question to the list:

1) Who does *NOT* have Reverse DNS (PTR) entries for their mailservers?

2) If so, why not?

Personally I think reverse DNS entries adds an ounce of ownership to who actually uses 
an IP address. For instance, I have several IPs given to me by my colo provider. I 
have reverse DNS on all of them, even the IPs I haven't used yet. If anyone looks my 
IPs up they will see something like:  Number.freedom2be.net as reverse DNS. This is 
basically telling them that freedom2be.net is the operator of the IP address.

3) Shouldn't all mail servers on the internet have a reverse DNS entry with some valid 
administrative domain name?  We use freedom2be.net exclusively for our reverse DNS 
entries. As our mail server is multi-homed with many different domains. If someone 
needs to contact the appropriate owner of the IP, say our mail server was doing 
something bad (which it never has) they would know that freedom2be.net is the 
domain to email. (such as [EMAIL PROTECTED]) Isn't this a good idea?

--Jason
[EMAIL PROTECTED]






---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] ROUTETO Peculiarity

2003-08-17 Thread atlantis . declude
WEIGHT10weight  x   x   10  0
WEIGHT20weight  x   x   20  0
WEIGHT30weight  x   x   30  0
WEIGHT40weight  x   x   40  0
WEIGHT50weight  x   x   50  0
Would reversing the order help? like:

WEIGHT50weight  x   x   50  0
WEIGHT40weight  x   x   40  0
WEIGHT30weight  x   x   30  0
WEIGHT20weight  x   x   20  0
At 11:19 PM 8/17/2003, you wrote:
What do the corresponding entries in your global.cfg file look like?

Bill

- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Sunday, August 17, 2003 7:17 PM
Subject: [Declude.JunkMail] ROUTETO Peculiarity
 In my $default$.junkmail file I have the following setup:

 WEIGHT50 ROUTETO [EMAIL PROTECTED]
 WEIGHT40 ROUTETO [EMAIL PROTECTED]
 WEIGHT30 ROUTETO [EMAIL PROTECTED]
 WEIGHT20 ROUTETO [EMAIL PROTECTED]

 I was hoping to have 20+, 30+, 40+, 50+ weighted email to route to
separate
 sub mailboxes. This system is working (in part).

 I get 20-29 in the weight 20 box
 I get 30-39 in the weight 30 box
 I get 40-49 in the weight 40 box

 However, the 50 and up weight does *NOT* go in the weight50 box, it goes
 into the weight40 box.

 Does anyone have any idea what would cause this?

 Thanks,

 Jason

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] HELOBOGUS not working: follow-up

2002-10-25 Thread Declude Junkmail
Recap - In three days, I've only had one message trip the HELOBOGUS test.
Here's the recap:

1) I'm catching lots of spam with other tests
2) Scott checked the header of a message (see posting at Thu 10/24/2002 2:17
PM) and didn't note any problems

New information:
1) I'm running Declude 1.60
2) I have my DNS servers properly set up in IMail's SMTP section
3) I don't override those servers in my Declude configuration
4) I'm catching a lot of messages with ORDB, REVDNS, MONKEYFORMMAIL, OSRELAY

What should I check next?

Thanks in advance for any help,
-Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] HELOBOGUS not working: follow-up

2002-10-25 Thread Declude Junkmail
Scott,
When I reviewed the debug log, I found that I was actually running v1.53 - I
had never copied 1.60 to the \IMail folder (I had just copied it to
\Imail\Declude).

I'm going to let it run over the weekend and then if it isn't looking right,
I'll capture a debug log and send it to you.

If it comes to that, would you prefer the debug log sent somewhere other
than this list?

Thanks,
-Bill Naber

-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner;declude.com]On Behalf Of R. Scott Perry
Sent: Friday, October 25, 2002 10:16 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] HELOBOGUS not working: follow-up



Recap - In three days, I've only had one message trip the HELOBOGUS test.
Here's the recap:

1) I'm catching lots of spam with other tests
2) Scott checked the header of a message (see posting at Thu 10/24/2002
2:17
PM) and didn't note any problems

New information:
1) I'm running Declude 1.60
2) I have my DNS servers properly set up in IMail's SMTP section
3) I don't override those servers in my Declude configuration
4) I'm catching a lot of messages with ORDB, REVDNS, MONKEYFORMMAIL,
OSRELAY

What should I check next?

The next step would be the debug mode.

You can do this by changing the LOGLEVEL LOW line in
\IMail\Declude\global.cfg to LOGLEVEL DEBUG.  Then, after about 10 or so
E-mails have been received, you can then switch back to LOGLEVEL
LOW.  You can then send me the \IMail\spool\dec.log file (as an
attachment), and I should be able to get a better idea of what is going on.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] HELOBOGUS Question

2002-10-24 Thread Declude Junkmail
I'm running Declude 1.60.

I've had exactly one message flagged by HELOBOGUS - I'll take a look at the
DNS-based tests and pick this thread up in the morning.

Thanks,
-Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner;declude.com]On Behalf Of R. Scott Perry
Sent: Thursday, October 24, 2002 2:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] HELOBOGUS Question



The header info you requested is listed below.

Received: from declude.com [66.189.58.123] by mail.jamesoninns.com with
ESMTP
   (SMTPD32-7.13) id A01E19250134; Thu, 24 Oct 2002 13:38:38 -0400
 X-Declude-Sender: [EMAIL PROTECTED] [66.189.58.123]

These two headers show that Declude did use the top Received: header, and
should have used declude.com for the HELOBOGUS test (which is correct).

Are other DNS-based spam tests working properly?  Are you running a recent
version of Declude JunkMail?  Has at least one E-mail failed the HELOBOGUS
test?
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] HELOBOGUS Question

2002-10-24 Thread Declude Junkmail
We do not have a backup mailserver or gateway - any other ideas?

-Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner;declude.com]On Behalf Of R. Scott Perry
Sent: Thursday, October 24, 2002 1:01 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] HELOBOGUS Question



I've just recently put junkmail into a test phase on my server and have
noticed that I am getting almost no hits on the HELOBOGUS test -
specifically one hit over a three day/10,000 message period.

 From what I've been reading on this forum, I'd expect more than that and
was
wondering what might be inhibiting the HELOBOGUS test.

Do you have a backup mailserver or a gateway mailserver that receives the
mail before IMail does?
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.