the text for the custom subject
message go, and what is the syntax, as in, does it get quotes,
brackets,etc.
Thanks in advance!
Sharyn Schmidt
Network Specialist
Florida Distillers Company
(863) 956-1116 x221
We are the worldwide producer and marketer of the award winning Cruzan
Single
! Another GREAT product! Can't wait to see what I can do
with this after I'm done testing and tweaking!
Sharyn Schmidt
Network Specialist
Florida Distillers Company
(863) 956-1116 x221
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best
someone's email has been quarantined.)
At the moment, I am manually checking every so often to make sure
nothing legit has been put in the spam folder, but it would be nice if I
received an email telling me that something had been sent there.
Thanks in advance,
Sharyn Schmidt
Network Specialist
I purchased the Pro version, and aside from entering my code, I left
config files as-is. What is the recommended strategy to start using the
product effectively?
I've been using JunkMail for about a week now. What I discovered was the
weight20 caught a ton of spam and no legit email.
So, the
the email with weight 20 and up, just the ones
with weight 16 to 19. I can't really think of a logical way to do this,
since, by default, anything failing weight16 is going to also fail
weight20, but perhaps you junkmail guru's out there have figured out a
way to do this.
Thanks in advance,
Sharyn
One possibility might be to use the ROUTETO action in the latest beta
for
the WEIGHT20 test (all the spam would end up getting sent to a mailbox
file), while the WEIGHT16 test could use the HOLD action. That way, all
the held E-mail would be the E-mail failing the WEIGHT16 test.
Any idea when the latest beta becomes official? :)
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships, and the
artisan tequilas of Porfidio 100% Agave Tequilas,
Morning,
In my global config file, I added a weight16 test.
In my $default$.junkmail file, for the entire domain, I set the weight16
test to have a HOLD action.
I have some test users that have their own user.junkmail file that I
have been experimenting with.
I never added the weight16 HOLD
I am testing the attach function using the default spamattach.eml.
Can I customize this? For example, in the tests failed line, I would
like a bit more information than what is given.
When I was using the SUBJECT action, I had the following variables
included so I could see exactly what was
Can I put this same line [%WEIGHT%-%TESTSFAILED%-%QUEUENAME%]in the
spamattach.eml on the tests failed line?
Yes, that would work fine.
-Scott
Without the brackets, I'm assuming, looking at the syntax of the
default.
Right?
Sharyn
We are the worldwide producer and
Morning everyone,
Because all is going so well, I decided I'd screw with things a bit more
:)
I have just downloaded Tom's Image FX kill list and I'm looking through
it.
What I don't understand is, what is the difference between these 2
entries:
@example.com and .example.com
(obviously the
Good morning :)
One of my users is receiving some really disgusting porn email.
The logs show that the sender is actually using HER address as the
return address. Here is a snip from the IMAIL log:
09:23 23:13 SMTPD(29B2013E) [200.231.59.131] HELO aleph.inbrac.com.br
09:23 23:13
Tom,
Your kill file is worth its weight in gold!
Thanks!
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) htmla
Do you have the PRO Version of Junkmail? You can use filters to deal
with IP's, MAILFROM, etc if you do.
Yep, thanks, working on it now!
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco
question on this filtering..
If I add the following line in myfilter.txt..
Body 0 Contains anal
This will cause any email with the word analysis in it to receive
whatever action I've given the test. Correct?
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Analytically correct
George
grin
Thanks again everyone! You all are great!
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships. For
more information, please
Morning,
I'm contemplating upgrading my IMAIL installation from 6.05 to 7.13
Anything special need to be done with Declude before or after the
upgrade?(I'm running Junkmail and Virus)
TIA,
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged
Good morning and tgif!
I have made a custom filter that I've named pornfilter. In my global
config, it looks like this:
PORNFILTER FILTER D:\IMAIL\Declude\filterlist.txt x 1 0
In the filterlist.txt file, I only have one entry:
BODY 0 CONTAINS F * C K (no spaces, no *, pardon the french)
The
Statistically it should not happen often,
but it can happen occasionally. The longer the string you search on,
the
less likely it will happen.
-Scott
Thanks, Scott. This is the very first time something like this has
happened so I'm not going to worry about
.
Why would running the -diag trigger that message? I just ran the -diag
again to confirm and sure enough, here is the message again.
The diag information itself, looks fine.
Thanks in advance!
Sharyn Schmidt
Network Administrator
Florida Distillers Company
(863) 956-1116 x221
We
That is why it is important to change to the directory where declude.exe
is, \imail, before running that to get a true accurate check.
OK,
I need a new mail server then.
My server forgot to tell me I was running the diags from the declude
directory, NOT the IMAIL directory.
Sheesh
Dumb
The next version will (finally!) display a warning if the diagnostics
are
run from the wrong directory.
-Scott
Whew!
Then I don't have to get a new server after all.
Thanks!
Sharyn :)
We are the worldwide producer and marketer of the award winning Cruzan
Single
Hi,
I'm trying to see if a certain IP address is listed in any of the
Orbz-like spam databases.
What, in everyone's opinion, is the most common one used?
TIA
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the
I don't know about popularity, but I'd use the SPAM database lookup tool
at
http://www.dnsstuff.com/
That's perfect..that's exactly what I was looking for!
Thanks!
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at
When the next official release comes out, and this whitelist.txt file
isn't beta anymore, does this mean the old way of doing it won't work
anymore?
In other words, am I going to have to take all my whitelisted addresses
and create a whitelist.txt file?
TIA,
Sharyn
We are the worldwide
Scott,
I'm sorry if this has been addressed before but perhaps you can tell me
quickly what this means in the junkmail log?
WARNING: DNS server 24.73.160.163 (this is my dns server) returned a
SERVER FAILURE error for MX or A for ancosmtp.
Thanks,
Sharyn
We are the worldwide producer and
WARNING: DNS server 24.73.160.163 (this is my dns server) returned a
SERVER FAILURE error for MX or A for ancosmtp.
If you check the archives from yesterday, you'll find out. :)
-Scott
Sorry..didn't realize this was from yesterday :)
I did just look at the
Title: Best practice for new config file
Good morning,
Up until now, when a new release of Declude comes out, I have just been upgrading the .exe file and not downloading the config file, due to lack of time to devote to the re-configuration.
Lately, my old settings aren't working as well
Title: Log message
I am seeing these in my logs
Msg failed OSRELAY (Please stop using relays.osirusoft.com)
Should I comment out that test?
Sharyn
Sharyn, I am a little surprised. You usually keep up on things.
Guess you have not seen any of the posts regarding OSRelay in the last 2
weeks?
No, sorry everyone.
I have been SWAMPED here with projects other than mail administration
and most of the time I am lucky if I read mail that
Title: JM log analyzer
Good morning,
I know a lot of you use some of the JM log analyzer tools that are listed on the Declude site.
I am unsure which one is best suited to our needs.
I am looking for something which will parse the JM logs, tell me how many emails have been processed
Have you checked to see if the W2K DNS is passing both tests?
Yeah, it is now, I stopped and restarted the DNS service.
Love it when things just quit working for no reason..job security.
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged
Not to feed the spammers again by asking this, but is there a repository
of blacklists out there somewhere? Anyone willing to share?
I use the pre-made blacklist file (Kill List) from ImageFx as I don't
have a lot of spare time to do my own configurations. Good job, guys, by
the way! :)
Yes, a test will still count towards the weight even if there is no
action
defined for it.
-Scott
Great..thanks!
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at
Title: A little irony here
Just thought I'd share with you all a little Wednesday morning irony.
This spam email, for spam software, got held, as spam.
Somewhere there is a statement to be made.
09/24/2003 08:01:35 Q87911a9e00da3ef2 SPAMCOP:7 BADHEADERS:8 SPAMHEADERS:3 URLfilter:3 .
Title: ImageFX Kill List
Morning,
I know this was sorta mentioned briefly a few weeks ago but I don't think we ever heard from Tom.
Is this file not being updated anymore?
Thanks,
Sharyn
Title: Message
I have
just recently started using a URL filter list which I update every morning when
I see what has made it past uncaught.
This
is working great!
This
one, however, I'm stumped because I don't see any sort of URL to even add to the
list.
I am unsure what the best way to
Title: Message
LOL
thanks...I am getting some help offlist
Duh
Didnt
even think that posting it here would be pretty much like sharing secrets with
the entire world!
Sharyn
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of Pete
Is there any reason why you can't filter on common virus extensions.
This will cutdown on many viruses. It is common practice not to accept
exe, com, bat, pif, scr, and the list goes on...
I am nabbing the actual attachment that is the virus at the firewall
level, however the email itself is
Well, my answer was that Declude can, but the risks of accidentally
deleting good mail outweighed the convenience of not having to hit
delete. She went over my head and got the bosses on her side. Now I've
gotta have a meeting with them and come up with a solution. Any
suggestions?
I have
Title: Filter question
Good morning,
For the spam that doesnt contain a URL that I can block in my URL filter, I have taken to trying to find phrases that I can block in my BODY filter.
My question is
Should I be blocking these phrases using the text in the email that I can see, or
This is a perfect example of my body filter not working..
In my BODY filter, I have the following line:
BODY 0 CONTAINS Bachelors and other higher education available in your
fields
I have the attach action set to this entire filter, yet the email below
came through, unattached.
For those of
Ok, that was weird.
My filter nabbed my email to the declude list, but didn't catch the
original email.
I have checked the per user configs and the attach action is set to both
my account and the original account that the email was sent to.
Sharyn
We are the worldwide producer and marketer of
Im using the latest release.
In this last example that everyone's filter probably caught, the
original email came through unflagged, but when I forwarded it to the
list, the filter caught it.
I have double checked the per user configs to ensure both my personal
email account (where the forwarded
Remember that failing a test and flagging (or any other action) are very
different. In this case, the original question made it seem as though
the
E-mail wasn't failing the test, whereas it may be that the E-mail did
fail
the test but an action other than the one you wanted was used.
The
Those do look the same. Did you cut and paste it from what you were
viewing in the E-mail, or from the source?
I cut and pasted it from what I was viewing in the email, NOT from the
source, hence my original question. I did go back and run the -diag and
I am definitely running JM 1.75
Sharyn
So now I would ask what the source of the E-mail shows?
This particular one, came in plain text, I just realized. That is
probably why I didn't use the source to begin with.
When I right click on it, view source is greyed out.
I would be happy to forward the email to the list but I did that
Title: Redirect Spam to another folder
Good morning,
Sorry in advance if this has been covered.
Is there a way to either:
1. Move the Spam folder that receives the hold emails out of the Imail\spool directory
OR
2. Have emails with a hold action be placed in another folder
Title: Odd Imail behavior?
One of our business partners attempted to send us a MS word doc. We are using IMAIL 7.15
When trying to open it, the error message, from MS Word was:
The document name or path is not valid. Try these suggestions.
*check the file permissions for the document
Neither Declude JunkMail nor Declude Virus will alter any attachments,
nor
will IMail (as far as I know). Given that it is only a problem in Word
format and not .ZIP, I would suggest looking to see if you have a
firewall
that may be interfering.
What's even odder is that this doesn't affect
Scott? Do you have an estimated timeframe for the newest official
release?
I'm seeing lots of betas go by with some cool features but I prefer to
wait until they are all packaged into one.
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged
Title: Message
Sorry,
folks, to attach spam to an email but this is driving me
NUTS.
No
matter what I do, I can't seem to block this!
Is
anyone else successfully blocking this one?
Thanks,
~Sharyn~
Network Administrator
Todhunter Information
Systems "Helping You Meet Our Customers'
Try:
BODY ## CONTAINS www.madedcd.com
Thanks. That line only works for this particular email. The URLs
contained in the body change, almost by the hour. I have dozens of URLs
in my filter for this same message.
Sharyn
We are the worldwide producer and marketer of the award winning
Title: Message
up to now i block this one with the following to
filterlines
ANYWHERE 30 CONTAINS .com/v9.gif ANYWHERE 30 CONTAINS .com/z7.gif
Whatis the latest version of Declude that supports
ANYWHERE?
Although this would probably work as BODY30 CONTAINS
etc..
Thanks! I'll
Title: Message
BODY 45 CONTAINS .listrc.comBODY 45
CONTAINS .madedcd.com
Thanks. Same deal as before.Filtering on URLS doesn't work
as the URLs are constantly changing, even though that [EMAIL PROTECTED] pic of the pharmacist on cloud 9remains
the same.
Sharyn
Title: Message
Here are a few more to add to the
list:
BODY
30 CONTAINS pharmacourt.bizBODY 30 CONTAINS thatrxstore.bizBODY 30
CONTAINS pharmashoppe.bizBODY 30 CONTAINS pharmawarehouse.bizBODY 30
CONTAINS fastactingpills.comBODY 30 CONTAINS
gomedz.biz
Bill
Thanks!
Title: Message
Were getting the same thing endlessly, but none of the links match what you
have except the v*9.gif. Im trying to see if blocking only on the graphic name
will work.
I'm trying that too (thanks to a
post from earlier!). Blocking on URLS is
useless.
Let me
Title: Message
http://www.declude.com/junkmail/support/ip4r.htm
Would be well
worth your time. I'm finding that these are very
effective:
XBL
DSBL
NJABL
SORBS
And more
generally:
FIVETENSRC
SPAMCOP
I'm using whatever was included by default in the
http://www.snort.org/
Thanks!
Checking it out as we speak.
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) htmla
Title: **OT** Intrusion Detection Software
I have been asked to research Intrusion Detection Software.
I have done a Google search, but most of what I see is an actual appliance.
All I am looking for is software that will notify me when something suspicious attempts to hit our network.
Title: Message
I can also recommend
snort. There is a full windows version put out by
Engagesecurity.com The product is called EagleX and is a single
install of all needed components for Snort to operate on a Windows
platform.
For those of you running Snort, please give me what
Hmmm...looks like a reference to the 7th Crusade which lasted from
1248-1254. Like all of the other crusades, it was launched in the hopes of
finding the Golden Windows or, as some call it today, the Holy Grail.
We see the clear reference to Windows, or Grail, but some Latin and/or
Spanish
Title: Message
Good
morning,
I
received this email this morning, supposedly from ATT. It was sent to the
email address I use to test my spam settings.
Anyone
want to comment as to whom this is really from, or what the link really takes
you to?
This
was a little scary to me as we deal
Title: Message
Thanks
Folks.
Appreciate the input.
I
decided against taking the survey although if it was legit, I would've liked to
have REALLY told them how I feel!
Sharyn
Title: Sort of OT - Desktop anti spam software
We are looking for a desktop solution to be used as an added defense against spam.
This would be used in addition to Declude Junkmail.
It would reside on the users' desktop, and would be managed by the user, as opposed to the mail admin
Title: OT- Anyone know about this latest attack reported by CNN?
Here is what CNN says:
http://www.cnn.com/2004/TECH/internet/06/24/internet.attack.ap/index.html
Sharyn
Title: Maybe OT - Virtual domains and SPF
If I have a virtual domain that is configured on my mail server, and I am looking at setting up an SPF record, is there somewhere that the virutual domain has to be specified?
I am looking at the pobox.com SPF wizard and don't really see anything
Another question on this..
Although I run my mail server here, we do lease our IP address block from
our ISP. We don't, however, have our outgoing smtp settings configured for
our ISP's mailserver.
Does this have to be reflected in the set up as well?
Thanks for everyone's help.
Sharyn
We
Im running the latest release version (I think).
What version supports this?
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships. For
more information, please click
Thanks!
We are patched.
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) htmla
Adding an SPF record for the domain works the same no matter how the domain
is handled by IMail. So if you have a virtual domain example.com, you
would set up the SPF record exactly the same as you would if you had a
real domain of example.com.
If I set up an spf record for my primary
Title: Declude and SPF records
We receive a lot of spam that looks like it's coming from our own domain (which it really isn't).
If I set up an SPF record for my own domain ( todhunter.com) and upgrade to the latest Declude beta, enable the SPF test, etc, will Declude nab spam that is sent
Title: Global configs
I'm looking over the Global.cfg file from my current version, 1.75 and comparing it to the Global.cfg of the 1.79 beta.
Are all those Sorbs tests still active?
Are they worth adding into my old cfg?
Thanks,
Sharyn
Title: Message
Yesterday's summary:
Title: $default$.junkmail file questions
I have 2 domains on my mailserver:
Todhunter.com (my primary domain)
Cruzanltd.com (my virtual domain)
I have a $default$.junkmail file for the todhunter.com domain, and separate user.junkmail files, for my outside salespeople, who are to receive
Just a single per-domain config file
(\IMail\Declude\cruzanltd.com\$default$.JunkMail) should be all that is
needed in this case.
This is what I was looking for. I was unsure Declude would check a folder
marked cruzanltd.com for a default file or it would automatically use the
It gets complicated with aliases and forwarding, but if cruzanltd.com only
appears as a forwarding address, Declude JunkMail won't try to use it.
Ok...now I'm confused. I do actually have a cruzanltd.com domain set up on
the imail server, with mx records in dns and everything. People will
What I would do in this case is simply create a
\IMail\Declude\cruzanltd.com\$default$.JunkMail file, and not change
anything else. That way, E-mail to [EMAIL PROTECTED] will use the
\IMail\Declude\cruzanltd.com\$default$.JunkMail file, and E-mail to anyone
else will use whatever settings
Title: RE: Syntax for spf
---
To use the new SPF test, you can add lines such as:
SPFPASS spf pass x -5 0
SPFFAIL spf fail x 8 0
to your global.cfg file. SPF returns PASS for E-mail that passes SPF (that comes from an IP that is acceptable to the owner of the domani that it claims to
sigh
This is legit, coming from my own mailserver, and it failed the SPF test.
Obviously something is not correct here.
Any suggestions?
I have used the wizard on the pobox site and pasted the text string into a
text record in my DNS.
I've had to disable the test for now as all my legit mail
The problem is that your SPF record (v=spf1 a mx ptr -all) doesn't list
IPs that your users may be connecting to your mailserver from.
The problem may also be that ID 10 T error and I never listed the IP of my
firewall, which uses an SMTP proxy. (Len is laughing if he is reading this)
In
Ok..
Does this mean things are working now?
I just ran the test on Scott's website...
SPF lookup of sender [EMAIL PROTECTED] from IP 24.73.160.162:
SPF string used: v=spf1 ip4:24.73.160.162 a mx ptr -all.
Processing SPF string: v=spf1 ip4:24.73.160.162 a mx ptr -all.
Testing
I lowered the weight of the spf fail weight to 1 (warn in headers) to test
this internally.
My internal IPs are still failing the spf test.
How do I go about whitelisting 5 subnets of internal IP addresses with IMAIL
7.15?
It's probably not a bad idea anyway, if it's possible, as everything
Chances are that you need to IPBYPASS the firewall's IP in your
global.cfg and then whitelist your LAN by it's IP space.
Do I have to list each individual address separately (will put it at over
200 addresses so this won't work) or can I use a /24 notation for each
subnet block?
Sharyn
We
Thanks for everyone's help yesterday and the day before with all my SPF
questions and issues.
The bottom line is, the email I have attached, failed the tests it was
supposed to fail, including the spf test, as this particular email did NOT
come from my mail server or my domain.
Matter of fact,
Title: Message
Declude is not a simple thing to implement and configure.
Those of us running it are more than capable of adding a line to our config
files and deciding how to weight it/configure it/otherwise implement it. We
don't NEED a "click OK to install" GUI that does something to our
If nothing else, we catch a good bit of spam and viruses that forge our
email addresses by using SPF.
I have found, that so, far, the BEST usage for SPF, as stated above, is that
it's catching spam that has spoofed my own domain's address.
Sharyn
We are the worldwide producer and marketer of
Title: OT: Hello?
I haven't rec'd anything from either of these lists today?
Sharyn
Title: Five ten blacklist
Can someone give me a readers digest version of the reliability of the five ten blacklist?
Thanks,
Sharyn
Title: Second mail server
Scott,
Am I to assume that if I configure a backup mailserver I will need to purchase another full license for the Declude products?
Thanks,
Sharyn
Title: I G R E E T I N G S (from Kate)
Hi,
Forgive me for posting to all 3 lists, Im a bit brain dead this week.
Sometime this week someone mentioned they had received an email to download some greeting card.
Some one downloaded it on a test machine, and one of the anti virus scanners
Title: Declude and Smartermail
Does anyone actually have a production Smarter Mail/Declude server in use?
Thoughts, comments, feedback?
Thanks,
Sharyn
Can I ask... (if you can't say it's ok)... does it hook in directly to
SmarterMail and can do all the actions just like with IMail? Or is it an
exe that runs when mail comes in and all it can do is delete mail? I'm
using a scanner now that does ClamAV + SpamAssassin but all that can do
really
I moved from 1.81 to 1.82 this morning and I am not seeing any extra cpu
load, so it doesn't seem to be universal.
I moved from the last full release..1.75? To 1.82 this morning and things
seem fine here.
Sharyn
We are the worldwide producer and marketer of the award winning Cruzan
After 4 years of hard work and little sleep Scott Perry has decided to move
away from customer facing activities with Declude and will be spending more
of his time working with the Red Cross.
Scott continues his commitment to Declude in an advisory role.
LOL! Now, folks, is this a BIG SHOCKER
It's called Manage Hosts in Network Solution's system, but is only on your
account menu if you've previously created one.
By the way, thanks to everyone that recommended godaddy.com as a registrar.
I have gotten 5 domains registered and set up with my own nameservers in
about 5 mins per domain
Title: Possible official host name change
Declude folks
If I change the official host name on my mailserver, I am going to need a new activation key for junkmail and virus (I'm assuming).
How do I go about getting this?
Thanks,
Sharyn
Title: Message
Thanks.
Sharyn
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
On Behalf Of David Franco-RochaSent: Friday, March 18, 2005
8:53 AMTo: Declude.JunkMail@declude.comSubject: Re:
[Declude.JunkMail] Possible official host name change
Title: Old OHN, now alias, does anythingelse need to be changed?
Hi
Thanks for the help here (David) and in the IMAIL list.
Everything seems to be working, however, I had one last question concerning the JunkMail setup.
I had a folder for todhunter.com where I had my individual user
Title: WAY WAY OT: Senior Developer needed
Folks,
We are currently seeking a candidate for employment in the Central Florida Area (Polk County). The candidate must be local, no relocation costs will be paid.
Please contact me offlist if you know of anyone that might be able to fill this
1 - 100 of 173 matches
Mail list logo
