RE: [Declude.JunkMail] Declude does not see email
Agreed - I too have very occasionally seen instances where emails were clearly not processed by Declude (no Declude headers) but were delivered to my mailboxes. Imail 7.0 Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Karen D. Oland Sent: Thursday, December 04, 2003 12:33 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude does not see email I've seen this twice in the last month. IMAIL 7.15, declude 1.76. No real-time scanning of email directories. May be related to hard disk traffic, but not specific to IMAIL 8.x > -Original Message- > From: R. Scott Perry > Sent: Wednesday, December 03, 2003 1:01 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > >I am now seeing this also. This is disturbing as it is allowing > >viruses through. > > > >The particular message that I am concerned with (containing a virus) > >does show up in the c:\declude.log file but is not in the virus or > hijack log but > >is seen in this line in the JM log: > > > >12/03/2003 06:11:30 Qeedf08fb02486d2c Could not lock > >F:\Spool\Qeedf08fb02486d2c.SMD; timed out (j=2). > > This will happen if either the Q*.SMD file disappears, or is locked by > another program (presumably IMail). > > It looks like there are several issues with IMail v8. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
I've seen this twice in the last month. IMAIL 7.15, declude 1.76. No real-time scanning of email directories. May be related to hard disk traffic, but not specific to IMAIL 8.x > -Original Message- > From: R. Scott Perry > Sent: Wednesday, December 03, 2003 1:01 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > >I am now seeing this also. This is disturbing as it is allowing viruses > >through. > > > >The particular message that I am concerned with (containing a virus) does > >show up in the c:\declude.log file but is not in the virus or > hijack log but > >is seen in this line in the JM log: > > > >12/03/2003 06:11:30 Qeedf08fb02486d2c Could not lock > >F:\Spool\Qeedf08fb02486d2c.SMD; timed out (j=2). > > This will happen if either the Q*.SMD file disappears, or is locked by > another program (presumably IMail). > > It looks like there are several issues with IMail v8. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude does not see email
I wonder if this has something to do with Declude crashing every now and then -- it only shows up in the event viewer under W2K3 -- no declude error files are written. Thursday, December 4, 2003, 6:32:39 AM, R. Scott Perry <[EMAIL PROTECTED]> wrote: >>Scott, what information can we provide you to help you track down whether >>IMail is calling Declude for each message or whether it is calling Declude >>twice for the same message? RSP> We have already confirmed cases of IMail v8 not calling Declude. We have RSP> "almost confirmed" cases of IMail calling Declude more than once, but have RSP> not officially confirmed it yet. RSP> With the latest interim release, if the E-mail is not referenced in the RSP> C:\Declude.log file, then IMail didn't start Declude. If it is listed more RSP> than once in the C:\Declude.log file, IMail probably (but not definitely) RSP> started Declude more than once. RSP> -Scott RSP> --- RSP> Declude JunkMail: The advanced anti-spam solution for IMail mailservers. RSP> Declude Virus: Catches known viruses and is the leader in mailserver RSP> vulnerability detection. RSP> Find out what you've been missing: Ask about our free 30-day evaluation. RSP> --- RSP> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] RSP> --- RSP> This E-mail came from the Declude.JunkMail mailing list. To RSP> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and RSP> type "unsubscribe Declude.JunkMail". The archives can be found RSP> at http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude does not see email
Scott, what information can we provide you to help you track down whether IMail is calling Declude for each message or whether it is calling Declude twice for the same message? We have already confirmed cases of IMail v8 not calling Declude. We have "almost confirmed" cases of IMail calling Declude more than once, but have not officially confirmed it yet. With the latest interim release, if the E-mail is not referenced in the C:\Declude.log file, then IMail didn't start Declude. If it is listed more than once in the C:\Declude.log file, IMail probably (but not definitely) started Declude more than once. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude does not see email
Here are my numbers from yesterday: gawk "{print $3}" dec1203.log | usort | uniq | grep -c Q 25462 gawk "{print $3}" vir1203.log | usort | uniq | grep -c Q 25460 grep "12/02/2003" declude.log | gawk "{print $4}" | usort | uniq | grep -c Q 25612 Scott, what information can we provide you to help you track down whether IMail is calling Declude for each message or whether it is calling Declude twice for the same message? Bill - Original Message - From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 03, 2003 4:19 PM Subject: RE: [Declude.JunkMail] Declude does not see email So back to my original idea, in my case, yesterday 5 messages did not make it to Virus or JunkMail processing. That is barely over 1/10 of 1%. What are others experiences? (I will also do this latter on the other servers I work on.) John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Bill Landry > Sent: Wednesday, December 03, 2003 3:48 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Declude does not see email > > Great. The last script shown below should actually be: > > grep "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq | grep > -c > Q > > Removed "-c" after the first grep command. > > Bill > > - Original Message - > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, December 03, 2003 3:40 PM > Subject: RE: [Declude.JunkMail] Declude does not see email > > > Bill, never mind. I just got the reference paper from you and it is listed > in there where it is at and such. Works. Thanks. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > > -----Original Message- > > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, December 03, 2003 3:32 PM > > To: '[EMAIL PROTECTED]' > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > Bill, usort was not included in the files on the unixtools site you > posted > > before, but I was able to find it here: > > http://www.profsoftware.com/unixdos/ud09.htm However, now when running > the > > command, I am getting an error saying needed dll udbase.dll not found. > > > > John Tolmachoff > > Engineer/Consultant/Owner > > eServices For You > > > > > > > -Original Message- > > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > [EMAIL PROTECTED] On Behalf Of Bill Landry > > > Sent: Wednesday, December 03, 2003 1:47 PM > > > To: [EMAIL PROTECTED] > > > Subject: Re: [Declude.JunkMail] Declude does not see email > > > > > > John, a few weeks ago I sent you a copy of my 1st draft "UNIX > Utilities > > > Reference Guide" I had put together, but heard no response back from > > you. > > > Had you reviewed it you probably would have been able to figure this > > out. > > > Anyway, here is what I found on one of my IMail servers: > > > > > > gawk "{print $3}" dec1202.log | usort | uniq | grep -c Q > > > 25624 > > > > > > gawk "{print $3}" vir1202.log | usort | uniq | grep -c Q > > > 25625 > > > > > > grep -c "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq > | > > > grep -c Q > > > 25612 > > > > > > Hmmm, strange that the number listed in the declude.log file is > actually > > > less then what's reported in the JunkMail and Virus log files. > > > > > > Bill > > > > > > - Original Message - > > > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > > > To: <[EMAIL PROTECTED]> > > > Sent: Wednesday, December 03, 2003 12:34 PM > > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > > > > To help track this down, it would be helpful to do the following: > > > > > > Compare the number of messages logged in C:\declude.log to the number > > > logged > > > in the virus log in a 24 hour period. > > > > > > Any one know how to do that? > > > > > > John Tolmachoff > > > Engineer/Consultant/Owner > > > eServices For You > > > > > > > > > > -Original Message- > > > > From: [EMAIL
Re: [Declude.JunkMail] Declude does not see email
I wonder if this has something to do with Declude crashing every now and then -- it only shows up in the event viewer under W2K3 -- no declude error files are written. No, this is unrelated. The C:\Declude.log file entries from the latest release prove it (they are created immediately as the program is started). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
So back to my original idea, in my case, yesterday 5 messages did not make it to Virus or JunkMail processing. That is barely over 1/10 of 1%. What are others experiences? (I will also do this latter on the other servers I work on.) John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Bill Landry > Sent: Wednesday, December 03, 2003 3:48 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Declude does not see email > > Great. The last script shown below should actually be: > > grep "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq | grep > -c > Q > > Removed "-c" after the first grep command. > > Bill > > - Original Message - > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, December 03, 2003 3:40 PM > Subject: RE: [Declude.JunkMail] Declude does not see email > > > Bill, never mind. I just got the reference paper from you and it is listed > in there where it is at and such. Works. Thanks. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > > -Original Message----- > > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, December 03, 2003 3:32 PM > > To: '[EMAIL PROTECTED]' > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > Bill, usort was not included in the files on the unixtools site you > posted > > before, but I was able to find it here: > > http://www.profsoftware.com/unixdos/ud09.htm However, now when running > the > > command, I am getting an error saying needed dll udbase.dll not found. > > > > John Tolmachoff > > Engineer/Consultant/Owner > > eServices For You > > > > > > > -Original Message- > > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > [EMAIL PROTECTED] On Behalf Of Bill Landry > > > Sent: Wednesday, December 03, 2003 1:47 PM > > > To: [EMAIL PROTECTED] > > > Subject: Re: [Declude.JunkMail] Declude does not see email > > > > > > John, a few weeks ago I sent you a copy of my 1st draft "UNIX > Utilities > > > Reference Guide" I had put together, but heard no response back from > > you. > > > Had you reviewed it you probably would have been able to figure this > > out. > > > Anyway, here is what I found on one of my IMail servers: > > > > > > gawk "{print $3}" dec1202.log | usort | uniq | grep -c Q > > > 25624 > > > > > > gawk "{print $3}" vir1202.log | usort | uniq | grep -c Q > > > 25625 > > > > > > grep -c "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq > | > > > grep -c Q > > > 25612 > > > > > > Hmmm, strange that the number listed in the declude.log file is > actually > > > less then what's reported in the JunkMail and Virus log files. > > > > > > Bill > > > > > > - Original Message - > > > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > > > To: <[EMAIL PROTECTED]> > > > Sent: Wednesday, December 03, 2003 12:34 PM > > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > > > > To help track this down, it would be helpful to do the following: > > > > > > Compare the number of messages logged in C:\declude.log to the number > > > logged > > > in the virus log in a 24 hour period. > > > > > > Any one know how to do that? > > > > > > John Tolmachoff > > > Engineer/Consultant/Owner > > > eServices For You > > > > > > > > > > -Original Message- > > > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > > [EMAIL PROTECTED] On Behalf Of R. Scott Perry > > > > Sent: Wednesday, December 03, 2003 10:01 AM > > > > To: [EMAIL PROTECTED] > > > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > > > > > > > >I am now seeing this also. This is disturbing as it is allowing > > viruses > > > > >through. > > > > > > > > > >The particular message that I am concerned with (containing a > virus) > > > does > > > > >show up in the c:\declude.log file but is not in the virus or
RE: [Declude.JunkMail] Declude does not see email
And for the last 15 minutes I have been trying to figure out what I am doing wrong to where I keep getting a result of 0. ;) John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Bill Landry > Sent: Wednesday, December 03, 2003 3:48 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Declude does not see email > > Great. The last script shown below should actually be: > > grep "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq | grep > -c > Q > > Removed "-c" after the first grep command. > > Bill > > - Original Message - > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, December 03, 2003 3:40 PM > Subject: RE: [Declude.JunkMail] Declude does not see email > > > Bill, never mind. I just got the reference paper from you and it is listed > in there where it is at and such. Works. Thanks. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > > -Original Message----- > > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] > > Sent: Wednesday, December 03, 2003 3:32 PM > > To: '[EMAIL PROTECTED]' > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > Bill, usort was not included in the files on the unixtools site you > posted > > before, but I was able to find it here: > > http://www.profsoftware.com/unixdos/ud09.htm However, now when running > the > > command, I am getting an error saying needed dll udbase.dll not found. > > > > John Tolmachoff > > Engineer/Consultant/Owner > > eServices For You > > > > > > > -Original Message- > > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > [EMAIL PROTECTED] On Behalf Of Bill Landry > > > Sent: Wednesday, December 03, 2003 1:47 PM > > > To: [EMAIL PROTECTED] > > > Subject: Re: [Declude.JunkMail] Declude does not see email > > > > > > John, a few weeks ago I sent you a copy of my 1st draft "UNIX > Utilities > > > Reference Guide" I had put together, but heard no response back from > > you. > > > Had you reviewed it you probably would have been able to figure this > > out. > > > Anyway, here is what I found on one of my IMail servers: > > > > > > gawk "{print $3}" dec1202.log | usort | uniq | grep -c Q > > > 25624 > > > > > > gawk "{print $3}" vir1202.log | usort | uniq | grep -c Q > > > 25625 > > > > > > grep -c "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq > | > > > grep -c Q > > > 25612 > > > > > > Hmmm, strange that the number listed in the declude.log file is > actually > > > less then what's reported in the JunkMail and Virus log files. > > > > > > Bill > > > > > > - Original Message - > > > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > > > To: <[EMAIL PROTECTED]> > > > Sent: Wednesday, December 03, 2003 12:34 PM > > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > > > > To help track this down, it would be helpful to do the following: > > > > > > Compare the number of messages logged in C:\declude.log to the number > > > logged > > > in the virus log in a 24 hour period. > > > > > > Any one know how to do that? > > > > > > John Tolmachoff > > > Engineer/Consultant/Owner > > > eServices For You > > > > > > > > > > -Original Message- > > > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > > [EMAIL PROTECTED] On Behalf Of R. Scott Perry > > > > Sent: Wednesday, December 03, 2003 10:01 AM > > > > To: [EMAIL PROTECTED] > > > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > > > > > > > >I am now seeing this also. This is disturbing as it is allowing > > viruses > > > > >through. > > > > > > > > > >The particular message that I am concerned with (containing a > virus) > > > does > > > > >show up in the c:\declude.log file but is not in the virus or > hijack > > > log > > > > but > > > > >is seen in this line in
Re: [Declude.JunkMail] Declude does not see email
Great. The last script shown below should actually be: grep "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq | grep -c Q Removed "-c" after the first grep command. Bill - Original Message - From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 03, 2003 3:40 PM Subject: RE: [Declude.JunkMail] Declude does not see email Bill, never mind. I just got the reference paper from you and it is listed in there where it is at and such. Works. Thanks. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] > Sent: Wednesday, December 03, 2003 3:32 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [Declude.JunkMail] Declude does not see email > > Bill, usort was not included in the files on the unixtools site you posted > before, but I was able to find it here: > http://www.profsoftware.com/unixdos/ud09.htm However, now when running the > command, I am getting an error saying needed dll udbase.dll not found. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of Bill Landry > > Sent: Wednesday, December 03, 2003 1:47 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] Declude does not see email > > > > John, a few weeks ago I sent you a copy of my 1st draft "UNIX Utilities > > Reference Guide" I had put together, but heard no response back from > you. > > Had you reviewed it you probably would have been able to figure this > out. > > Anyway, here is what I found on one of my IMail servers: > > > > gawk "{print $3}" dec1202.log | usort | uniq | grep -c Q > > 25624 > > > > gawk "{print $3}" vir1202.log | usort | uniq | grep -c Q > > 25625 > > > > grep -c "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq | > > grep -c Q > > 25612 > > > > Hmmm, strange that the number listed in the declude.log file is actually > > less then what's reported in the JunkMail and Virus log files. > > > > Bill > > > > - Original Message - > > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Wednesday, December 03, 2003 12:34 PM > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > To help track this down, it would be helpful to do the following: > > > > Compare the number of messages logged in C:\declude.log to the number > > logged > > in the virus log in a 24 hour period. > > > > Any one know how to do that? > > > > John Tolmachoff > > Engineer/Consultant/Owner > > eServices For You > > > > > > > -Original Message- > > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > [EMAIL PROTECTED] On Behalf Of R. Scott Perry > > > Sent: Wednesday, December 03, 2003 10:01 AM > > > To: [EMAIL PROTECTED] > > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > > > > >I am now seeing this also. This is disturbing as it is allowing > viruses > > > >through. > > > > > > > >The particular message that I am concerned with (containing a virus) > > does > > > >show up in the c:\declude.log file but is not in the virus or hijack > > log > > > but > > > >is seen in this line in the JM log: > > > > > > > >12/03/2003 06:11:30 Qeedf08fb02486d2c Could not lock > > > >F:\Spool\Qeedf08fb02486d2c.SMD; timed out (j=2). > > > > > > This will happen if either the Q*.SMD file disappears, or is locked by > > > another program (presumably IMail). > > > > > > It looks like there are several issues with IMail v8. > > > > > > -Scott > > > --- > > > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers. > > > Declude Virus: Catches known viruses and is the leader in mailserver > > > vulnerability detection. > > > Find out what you've been missing: Ask about our free 30-day > evaluation. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the
RE: [Declude.JunkMail] Declude does not see email
Bill, never mind. I just got the reference paper from you and it is listed in there where it is at and such. Works. Thanks. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] > Sent: Wednesday, December 03, 2003 3:32 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [Declude.JunkMail] Declude does not see email > > Bill, usort was not included in the files on the unixtools site you posted > before, but I was able to find it here: > http://www.profsoftware.com/unixdos/ud09.htm However, now when running the > command, I am getting an error saying needed dll udbase.dll not found. > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of Bill Landry > > Sent: Wednesday, December 03, 2003 1:47 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] Declude does not see email > > > > John, a few weeks ago I sent you a copy of my 1st draft "UNIX Utilities > > Reference Guide" I had put together, but heard no response back from > you. > > Had you reviewed it you probably would have been able to figure this > out. > > Anyway, here is what I found on one of my IMail servers: > > > > gawk "{print $3}" dec1202.log | usort | uniq | grep -c Q > > 25624 > > > > gawk "{print $3}" vir1202.log | usort | uniq | grep -c Q > > 25625 > > > > grep -c "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq | > > grep -c Q > > 25612 > > > > Hmmm, strange that the number listed in the declude.log file is actually > > less then what's reported in the JunkMail and Virus log files. > > > > Bill > > > > - Original Message - > > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Wednesday, December 03, 2003 12:34 PM > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > To help track this down, it would be helpful to do the following: > > > > Compare the number of messages logged in C:\declude.log to the number > > logged > > in the virus log in a 24 hour period. > > > > Any one know how to do that? > > > > John Tolmachoff > > Engineer/Consultant/Owner > > eServices For You > > > > > > > -Original Message- > > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > [EMAIL PROTECTED] On Behalf Of R. Scott Perry > > > Sent: Wednesday, December 03, 2003 10:01 AM > > > To: [EMAIL PROTECTED] > > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > > > > >I am now seeing this also. This is disturbing as it is allowing > viruses > > > >through. > > > > > > > >The particular message that I am concerned with (containing a virus) > > does > > > >show up in the c:\declude.log file but is not in the virus or hijack > > log > > > but > > > >is seen in this line in the JM log: > > > > > > > >12/03/2003 06:11:30 Qeedf08fb02486d2c Could not lock > > > >F:\Spool\Qeedf08fb02486d2c.SMD; timed out (j=2). > > > > > > This will happen if either the Q*.SMD file disappears, or is locked by > > > another program (presumably IMail). > > > > > > It looks like there are several issues with IMail v8. > > > > > > -Scott > > > --- > > > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers. > > > Declude Virus: Catches known viruses and is the leader in mailserver > > > vulnerability detection. > > > Find out what you've been missing: Ask about our free 30-day > evaluation. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > .com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
Bill, usort was not included in the files on the unixtools site you posted before, but I was able to find it here: http://www.profsoftware.com/unixdos/ud09.htm However, now when running the command, I am getting an error saying needed dll udbase.dll not found. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Bill Landry > Sent: Wednesday, December 03, 2003 1:47 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Declude does not see email > > John, a few weeks ago I sent you a copy of my 1st draft "UNIX Utilities > Reference Guide" I had put together, but heard no response back from you. > Had you reviewed it you probably would have been able to figure this out. > Anyway, here is what I found on one of my IMail servers: > > gawk "{print $3}" dec1202.log | usort | uniq | grep -c Q > 25624 > > gawk "{print $3}" vir1202.log | usort | uniq | grep -c Q > 25625 > > grep -c "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq | > grep -c Q > 25612 > > Hmmm, strange that the number listed in the declude.log file is actually > less then what's reported in the JunkMail and Virus log files. > > Bill > > - Original Message - > From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, December 03, 2003 12:34 PM > Subject: RE: [Declude.JunkMail] Declude does not see email > > > To help track this down, it would be helpful to do the following: > > Compare the number of messages logged in C:\declude.log to the number > logged > in the virus log in a 24 hour period. > > Any one know how to do that? > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > > -Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of R. Scott Perry > > Sent: Wednesday, December 03, 2003 10:01 AM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > >I am now seeing this also. This is disturbing as it is allowing viruses > > >through. > > > > > >The particular message that I am concerned with (containing a virus) > does > > >show up in the c:\declude.log file but is not in the virus or hijack > log > > but > > >is seen in this line in the JM log: > > > > > >12/03/2003 06:11:30 Qeedf08fb02486d2c Could not lock > > >F:\Spool\Qeedf08fb02486d2c.SMD; timed out (j=2). > > > > This will happen if either the Q*.SMD file disappears, or is locked by > > another program (presumably IMail). > > > > It looks like there are several issues with IMail v8. > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > > Declude Virus: Catches known viruses and is the leader in mailserver > > vulnerability detection. > > Find out what you've been missing: Ask about our free 30-day evaluation. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > .com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude does not see email
John, a few weeks ago I sent you a copy of my 1st draft "UNIX Utilities Reference Guide" I had put together, but heard no response back from you. Had you reviewed it you probably would have been able to figure this out. Anyway, here is what I found on one of my IMail servers: gawk "{print $3}" dec1202.log | usort | uniq | grep -c Q 25624 gawk "{print $3}" vir1202.log | usort | uniq | grep -c Q 25625 grep -c "12\/02\/2003" declude.log | gawk "{print $4}" | usort | uniq | grep -c Q 25612 Hmmm, strange that the number listed in the declude.log file is actually less then what's reported in the JunkMail and Virus log files. Bill - Original Message - From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, December 03, 2003 12:34 PM Subject: RE: [Declude.JunkMail] Declude does not see email To help track this down, it would be helpful to do the following: Compare the number of messages logged in C:\declude.log to the number logged in the virus log in a 24 hour period. Any one know how to do that? John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of R. Scott Perry > Sent: Wednesday, December 03, 2003 10:01 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Declude does not see email > > > >I am now seeing this also. This is disturbing as it is allowing viruses > >through. > > > >The particular message that I am concerned with (containing a virus) does > >show up in the c:\declude.log file but is not in the virus or hijack log > but > >is seen in this line in the JM log: > > > >12/03/2003 06:11:30 Qeedf08fb02486d2c Could not lock > >F:\Spool\Qeedf08fb02486d2c.SMD; timed out (j=2). > > This will happen if either the Q*.SMD file disappears, or is locked by > another program (presumably IMail). > > It looks like there are several issues with IMail v8. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. .com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
Also another interesting finding. It seems as when this is happening, the Imail Spam statistics header line does not appear either. Any one else confirm this? John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] > Sent: Wednesday, December 03, 2003 12:35 PM > To: '[EMAIL PROTECTED]' > Subject: RE: [Declude.JunkMail] Declude does not see email > > To help track this down, it would be helpful to do the following: > > Compare the number of messages logged in C:\declude.log to the number > logged in the virus log in a 24 hour period. > > Any one know how to do that? > > John Tolmachoff > Engineer/Consultant/Owner > eServices For You > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of R. Scott Perry > > Sent: Wednesday, December 03, 2003 10:01 AM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.JunkMail] Declude does not see email > > > > > > >I am now seeing this also. This is disturbing as it is allowing viruses > > >through. > > > > > >The particular message that I am concerned with (containing a virus) > does > > >show up in the c:\declude.log file but is not in the virus or hijack > log > > but > > >is seen in this line in the JM log: > > > > > >12/03/2003 06:11:30 Qeedf08fb02486d2c Could not lock > > >F:\Spool\Qeedf08fb02486d2c.SMD; timed out (j=2). > > > > This will happen if either the Q*.SMD file disappears, or is locked by > > another program (presumably IMail). > > > > It looks like there are several issues with IMail v8. > > > > -Scott > > --- > > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > > Declude Virus: Catches known viruses and is the leader in mailserver > > vulnerability detection. > > Find out what you've been missing: Ask about our free 30-day evaluation. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
To help track this down, it would be helpful to do the following: Compare the number of messages logged in C:\declude.log to the number logged in the virus log in a 24 hour period. Any one know how to do that? John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of R. Scott Perry > Sent: Wednesday, December 03, 2003 10:01 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Declude does not see email > > > >I am now seeing this also. This is disturbing as it is allowing viruses > >through. > > > >The particular message that I am concerned with (containing a virus) does > >show up in the c:\declude.log file but is not in the virus or hijack log > but > >is seen in this line in the JM log: > > > >12/03/2003 06:11:30 Qeedf08fb02486d2c Could not lock > >F:\Spool\Qeedf08fb02486d2c.SMD; timed out (j=2). > > This will happen if either the Q*.SMD file disappears, or is locked by > another program (presumably IMail). > > It looks like there are several issues with IMail v8. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
I am now seeing this also. This is disturbing as it is allowing viruses through. The particular message that I am concerned with (containing a virus) does show up in the c:\declude.log file but is not in the virus or hijack log but is seen in this line in the JM log: 12/03/2003 06:11:30 Qeedf08fb02486d2c Could not lock F:\Spool\Qeedf08fb02486d2c.SMD; timed out (j=2). This will happen if either the Q*.SMD file disappears, or is locked by another program (presumably IMail). It looks like there are several issues with IMail v8. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
I am now seeing this also. This is disturbing as it is allowing viruses through. The particular message that I am concerned with (containing a virus) does show up in the c:\declude.log file but is not in the virus or hijack log but is seen in this line in the JM log: 12/03/2003 06:11:30 Qeedf08fb02486d2c Could not lock F:\Spool\Qeedf08fb02486d2c.SMD; timed out (j=2). Imail 8.03 Declude 1.76i28 John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
I'm running IMail v8.02 on Windows 2000 Server SP4 etc, and am now running declude.exe 1.76i28; today I saw an HTML style spam come through with no declude headers. The log did have one line for this message: 11/27/2003 15:23:41 Q875e044a00daa57c Could not lock D:\IMail\spool\Q875e044a00daa57c.SMD; timed out (j=2). This will occur if either the D*.SMD file disappears when Declude is starting, or if a program is locking it for more than 30 seconds. This could happen, for example, if you are running an on-access virus scanner that deletes the D*.SMD file. But that can't be the case here, because the E-mail was delivered. More likely is that something locked the file for some reason. My query for Scott is: as of interim 28, declude.exe now always logs something if the message couldn't be handled, correct? So perhaps there is a grammar or pattern in the log we can use to find these error messages? No. The latest interim release just logs to C:\Declude.log for every E-mail that is processed. It does not record any information about processing the E-mail. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
Title: Message Some more grist for the mill, and a question or two for Scott... I've seen the same behaviour in our implementation: the inbound e-mail is received and doesn't look mangled, but has no declude headers. Until recently, there was no declude log lines, either. I'm running IMail v8.02 on Windows 2000 Server SP4 etc, and am now running declude.exe 1.76i28; today I saw an HTML style spam come through with no declude headers. The log did have one line for this message: 11/27/2003 15:23:41 Q875e044a00daa57c Could not lock D:\IMail\spool\Q875e044a00daa57c.SMD; timed out (j=2). My query for Scott is: as of interim 28, declude.exe now always logs something if the message couldn't be handled, correct? So perhaps there is a grammar or pattern in the log we can use to find these error messages? As for my server configuration, I also have no particular software that I think should have vied for a lock on the file; my antivirus software skips all of the files with IMail message extensions. The only things that could have tripped over the file are W2K itself, IMail, and declude.exe ... Andrew. -Original Message-From: Keith Johnson [mailto:[EMAIL PROTECTED] Sent: Monday, November 24, 2003 5:42 AMTo: [EMAIL PROTECTED]Subject: FW: [Declude.JunkMail] Declude does not see email Scott, This issue of Declude (1.76i and Imail 8.04) not seeing email has picked up tremendously in the past week or so. We are starting to see this a lot in our own email as well as our customers reporting it. It seems to be happening in both html and plain text formated emails. Is there anything I can do in my settings to aid this as I am fearful of viruses getting thru (more so than spam)? Thanks, Keith -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Fri 11/21/2003 12:10 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [Declude.JunkMail] Declude does not see email >I am curious to know if others are experiencing this as well.>>Daily I receive 3-4 spam that show no sign of Declude ever being ran.>>Searching the IMail log file shows the email arriving and the SPAM log>file for IMail shows an entry for the email but Declude does not show it.Are you running IMail v8? There seems to be a problem with IMail v8 whereit will occasionally "forget" to call Declude. We haven't been able toreproduce the problem, but from the log files that we have seen, it appearsthat Declude isn't even started. -Scott---Declude JunkMail: The advanced anti-spam solution for IMail mailservers.Declude Virus: Catches known viruses and is the leader in mailservervulnerability detection.Find out what you've been missing: Ask about our free 30-day evaluation.---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
Title: Re: [Declude.JunkMail] Declude does not see email Yes Keith.. With us I think it happened after 8.04 update.. but I am not sure what has caused it. We also reduced the TCP/IP timeout per previous discussions - but I can't think of any reason that reducing that would do anything.. per the following KB. http://support.ipswitch.com/kb/IM-20030828-DM01.htm Regards, Kami From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith JohnsonSent: Monday, November 24, 2003 10:31 AMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Declude does not see email Kami, That is exactly what I am seeing, no record of it. It scares me that email is getting through our system for our customers, yet it is unscanned. We handle total of about 150K emails each day across two servers and we are seeing it on both. It seems like it just happened right after the 8.03 update, but got worse after the 8.04 update. Thanks, Keith From: Kami Razvan [mailto:[EMAIL PROTECTED] Sent: Monday, November 24, 2003 9:03 AMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Declude does not see email Keith: Have you checked the virus logs? In our case no record of the email is seen in JM or Virus logs. It seems like when IMail gets done with it simply forgets Declude and delivers the email. So we are not scanning the email for virus ... Regards, Kami From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith JohnsonSent: Monday, November 24, 2003 8:42 AMTo: [EMAIL PROTECTED]Subject: FW: [Declude.JunkMail] Declude does not see email Scott, This issue of Declude (1.76i and Imail 8.04) not seeing email has picked up tremendously in the past week or so. We are starting to see this a lot in our own email as well as our customers reporting it. It seems to be happening in both html and plain text formated emails. Is there anything I can do in my settings to aid this as I am fearful of viruses getting thru (more so than spam)? Thanks, Keith -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Fri 11/21/2003 12:10 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [Declude.JunkMail] Declude does not see email >I am curious to know if others are experiencing this as well.>>Daily I receive 3-4 spam that show no sign of Declude ever being ran.>>Searching the IMail log file shows the email arriving and the SPAM log>file for IMail shows an entry for the email but Declude does not show it.Are you running IMail v8? There seems to be a problem with IMail v8 whereit will occasionally "forget" to call Declude. We haven't been able toreproduce the problem, but from the log files that we have seen, it appearsthat Declude isn't even started. -Scott---Declude JunkMail: The advanced anti-spam solution for IMail mailservers.Declude Virus: Catches known viruses and is the leader in mailservervulnerability detection.Find out what you've been missing: Ask about our free 30-day evaluation.---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
Title: Re: [Declude.JunkMail] Declude does not see email Kami, That is exactly what I am seeing, no record of it. It scares me that email is getting through our system for our customers, yet it is unscanned. We handle total of about 150K emails each day across two servers and we are seeing it on both. It seems like it just happened right after the 8.03 update, but got worse after the 8.04 update. Thanks, Keith From: Kami Razvan [mailto:[EMAIL PROTECTED] Sent: Monday, November 24, 2003 9:03 AMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Declude does not see email Keith: Have you checked the virus logs? In our case no record of the email is seen in JM or Virus logs. It seems like when IMail gets done with it simply forgets Declude and delivers the email. So we are not scanning the email for virus ... Regards, Kami From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith JohnsonSent: Monday, November 24, 2003 8:42 AMTo: [EMAIL PROTECTED]Subject: FW: [Declude.JunkMail] Declude does not see email Scott, This issue of Declude (1.76i and Imail 8.04) not seeing email has picked up tremendously in the past week or so. We are starting to see this a lot in our own email as well as our customers reporting it. It seems to be happening in both html and plain text formated emails. Is there anything I can do in my settings to aid this as I am fearful of viruses getting thru (more so than spam)? Thanks, Keith -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Fri 11/21/2003 12:10 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [Declude.JunkMail] Declude does not see email >I am curious to know if others are experiencing this as well.>>Daily I receive 3-4 spam that show no sign of Declude ever being ran.>>Searching the IMail log file shows the email arriving and the SPAM log>file for IMail shows an entry for the email but Declude does not show it.Are you running IMail v8? There seems to be a problem with IMail v8 whereit will occasionally "forget" to call Declude. We haven't been able toreproduce the problem, but from the log files that we have seen, it appearsthat Declude isn't even started. -Scott---Declude JunkMail: The advanced anti-spam solution for IMail mailservers.Declude Virus: Catches known viruses and is the leader in mailservervulnerability detection.Find out what you've been missing: Ask about our free 30-day evaluation.---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
Title: Re: [Declude.JunkMail] Declude does not see email Keith: Have you checked the virus logs? In our case no record of the email is seen in JM or Virus logs. It seems like when IMail gets done with it simply forgets Declude and delivers the email. So we are not scanning the email for virus ... Regards, Kami From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith JohnsonSent: Monday, November 24, 2003 8:42 AMTo: [EMAIL PROTECTED]Subject: FW: [Declude.JunkMail] Declude does not see email Scott, This issue of Declude (1.76i and Imail 8.04) not seeing email has picked up tremendously in the past week or so. We are starting to see this a lot in our own email as well as our customers reporting it. It seems to be happening in both html and plain text formated emails. Is there anything I can do in my settings to aid this as I am fearful of viruses getting thru (more so than spam)? Thanks, Keith -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Fri 11/21/2003 12:10 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [Declude.JunkMail] Declude does not see email >I am curious to know if others are experiencing this as well.>>Daily I receive 3-4 spam that show no sign of Declude ever being ran.>>Searching the IMail log file shows the email arriving and the SPAM log>file for IMail shows an entry for the email but Declude does not show it.Are you running IMail v8? There seems to be a problem with IMail v8 whereit will occasionally "forget" to call Declude. We haven't been able toreproduce the problem, but from the log files that we have seen, it appearsthat Declude isn't even started. -Scott---Declude JunkMail: The advanced anti-spam solution for IMail mailservers.Declude Virus: Catches known viruses and is the leader in mailservervulnerability detection.Find out what you've been missing: Ask about our free 30-day evaluation.---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
Title: Re: [Declude.JunkMail] Declude does not see email Keith I am glad it is happening to you :) at least I know we are not alone.. Regards, Kami From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith JohnsonSent: Monday, November 24, 2003 8:42 AMTo: [EMAIL PROTECTED]Subject: FW: [Declude.JunkMail] Declude does not see email Scott, This issue of Declude (1.76i and Imail 8.04) not seeing email has picked up tremendously in the past week or so. We are starting to see this a lot in our own email as well as our customers reporting it. It seems to be happening in both html and plain text formated emails. Is there anything I can do in my settings to aid this as I am fearful of viruses getting thru (more so than spam)? Thanks, Keith -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Fri 11/21/2003 12:10 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [Declude.JunkMail] Declude does not see email >I am curious to know if others are experiencing this as well.>>Daily I receive 3-4 spam that show no sign of Declude ever being ran.>>Searching the IMail log file shows the email arriving and the SPAM log>file for IMail shows an entry for the email but Declude does not show it.Are you running IMail v8? There seems to be a problem with IMail v8 whereit will occasionally "forget" to call Declude. We haven't been able toreproduce the problem, but from the log files that we have seen, it appearsthat Declude isn't even started. -Scott---Declude JunkMail: The advanced anti-spam solution for IMail mailservers.Declude Virus: Catches known viruses and is the leader in mailservervulnerability detection.Find out what you've been missing: Ask about our free 30-day evaluation.---[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude does not see email
Never, ever, ever with IMail 7.x and Declude. This is enough of a reason not to upgrade to IMail 8. I do hope they are aware of the problem (if it is theirs). Please keep us posted. Matt Kami Razvan wrote: :) Hi Scott:.. Yes you are probably referring to our log files. IMail: 8.04 Declude: Latest version as of this morning. We ran through this exercise a week ago - and since I keep seeing it happening I am now wondering if others are seeing this. It is indeed a strange behavior. Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, November 21, 2003 12:10 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude does not see email I am curious to know if others are experiencing this as well. Daily I receive 3-4 spam that show no sign of Declude ever being ran. Searching the IMail log file shows the email arriving and the SPAM log file for IMail shows an entry for the email but Declude does not show it. Are you running IMail v8? There seems to be a problem with IMail v8 where it will occasionally "forget" to call Declude. We haven't been able to reproduce the problem, but from the log files that we have seen, it appears that Declude isn't even started. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude does not see email
Hello, some of our clients here have reported this, but in all cases the email was in html format and finds this information. so the only way to view this was to view the source of the email... ken. Friday, November 21, 2003, 12:00:54 PM, you wrote: KR> Hi; KR> KR> I am curious to KR> know if others are experiencing this as well. KR> KR> Daily I receive KR> 3-4 spam that show no sign of Declude ever being ran. KR> KR> Searching the KR> IMail log file shows the email arriving and the SPAM log file for IMail shows an KR> entry for the email but Declude does not show it. KR> KR> The email arrives KR> without any weight from Declude. KR> KR> It is as if KR> Declude is just ignored. KR> KR> Has anyone seen KR> this behavior? KR> KR> Regards, KR> Kami -- Best regards, Administrationmailto:[EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
> >I am curious to know if others are experiencing this as well. > > > >Daily I receive 3-4 spam that show no sign of Declude ever being ran. > > > >Searching the IMail log file shows the email arriving and the SPAM log > >file for IMail shows an entry for the email but Declude does not show it. > > Are you running IMail v8? There seems to be a problem with IMail v8 where > it will occasionally "forget" to call Declude. We haven't been able to > reproduce the problem, but from the log files that we have seen, it > appears > that Declude isn't even started. I have seen the same thing, and it is a very small number, maybe 5 confirmed cases per day. (4500 per day on my server.) Ipswitch conspiracy? (Sorry, couldn't resist the temptation.) John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude does not see email
:) Hi Scott:.. Yes you are probably referring to our log files. IMail: 8.04 Declude: Latest version as of this morning. We ran through this exercise a week ago - and since I keep seeing it happening I am now wondering if others are seeing this. It is indeed a strange behavior. Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, November 21, 2003 12:10 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude does not see email >I am curious to know if others are experiencing this as well. > >Daily I receive 3-4 spam that show no sign of Declude ever being ran. > >Searching the IMail log file shows the email arriving and the SPAM log >file for IMail shows an entry for the email but Declude does not show it. Are you running IMail v8? There seems to be a problem with IMail v8 where it will occasionally "forget" to call Declude. We haven't been able to reproduce the problem, but from the log files that we have seen, it appears that Declude isn't even started. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude does not see email
I am curious to know if others are experiencing this as well. Daily I receive 3-4 spam that show no sign of Declude ever being ran. Searching the IMail log file shows the email arriving and the SPAM log file for IMail shows an entry for the email but Declude does not show it. Are you running IMail v8? There seems to be a problem with IMail v8 where it will occasionally "forget" to call Declude. We haven't been able to reproduce the problem, but from the log files that we have seen, it appears that Declude isn't even started. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.