[IMail Forum] Autoreply: [IMail_Forum DIGEST]
Please note, this email address is no longer active. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Continuous statistical filter updates?
In a dynamic environment, you need dynamic rules to react on changing threats... I started to feedall received mailsback into the antispamseeder, thus updating the statistic engine and url filters with the true mailtraffic formy IMail server on a daily base. All IMAIL- SPAM tagged mail serves as bad example, all untagged mail is treated as good sample. The incoming good/bad mail ratio on our server is about 1:10 (1 hamper10 spam). So far, the feedback method has been "self-healing" as slipped-thru spam is either reported by users or is tagged later by dnsbl. In both cases, it is fed in again as bad sample. Pro: Living statistic filters,latest url-filters Con: Server load Does anyone else uses a similar approach? Marius
Re: [IMail Forum] Continuous statistical filter updates?
I started to feed all received mails back into the antispamseeder, thus updating the statistic engine and url filters with the true mailtraffic for my IMail server on a daily base. All IMAIL- SPAM tagged mail serves as bad example, all untagged mail is treated as good sample. That's a very bad idea. People tried this a while back by forwarding all E-mail that their anti-spam software caught as spam to Spamcop. Doing so means If an E-mail looks like spam, it is spam. If an E-mail looks legitimate, it is legitimate. Imagine this: you have a nice picture. You take a photocopy of it. It looks OK. You want more copies of it. What do you do? You take more photocopies of the original picture, right? That way, you end up with lots of copies that look OK. But, imagine that you instead take a photocopy of the photocopy. Each time a copy comes out of the machine, you take it and photocopy it. Each time you do this, the picture gets a lower and lower quality. Any defects that appear in any of the copies get onto all further copies. It's similar with what you are doing. In a perfect world, it would work fine -- but that is only if 100% of spam gets caught, and 0% of legitimate mail gets caught. In your case, you want to be protected against future threats. But the first time one of those comes in, it doesn't get caught (if it gets caught, you don't have to worry about this whole procedure you are going through). But now you have told the statistical engine that this is a good E-mail. So the next one is even more likely to be treated as a good E-mail. It also has the same problem with legitimate mail. If a legitimate E-mail is caught, it is more likely to get caught the next time as well. The incoming good/bad mail ratio on our server is about 1:10 (1 ham per 10 spam). So far, the feedback method has been self-healing as slipped-thru spam is either reported by users or is tagged later by dnsbl. In both cases, it is fed in again as bad sample. The problem is that [1] in most cases, not all false positives and false negatives will be reported, and [2] Feeding in an E-mail both into the good pile and bad pile doesn't necessarily even things out. Pro: Living statistic filters, latest url-filters Con: Server load And an even bigger con: Bayesian filtering is based loosely on statistical theory. Bayesian filtering is also called naive Bayesian filtering because it doesn't use true statistics. However, in general, the further you move away from real statistics, the worse the performance will be. If you do continue this, I do hope that you have it set up on a per-user or per-domain basis -- the smaller the group of people sharing the same statistics, the better the filtering. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Connection problems with webmail
Hello, Most of our users have no problems with webmail. Some of our users have problems to connect our webmail (w2k server, Imail server 8.05, kwm 4, https). These users have Internet Explorer 6 installed. They can download (visit) the logon page, enter their email address and password. And then the connection breaks down. Here are some snippets from the imail webserver log, w.x.y.z symbolizes the ip address of the remote gateway: *** 20040203 113614 Socket Error - w.x.y.z Error while writing sockect due to error 10054 or malicious connection type. *** 20040203 091613 Info - w.x.y.z Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) GET / HTTP/1.1. 20040203 091615 Info - w.x.y.z Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) https://mail1.mpil.de GET /LanguagePacks/English.js HTTP/1.1. 20040203 091615 Info - w.x.y.z Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) https://mail1.mpil.de GET /LanguagePacks/English.js HTTP/1.1. 20040203 091615 Info - w.x.y.z Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.0) https://mail1.mpil.de GET /mpil.gif HTTP/1.1. *** 20040203 091708 Web Error (0e14) w.x.y.z - 149.217.72.48 receive error 20010. *** 20040203 105207 Web Error (0e70) w.x.y.z - 149.217.72.48 receive error 20010. *** 20040203 105541 Web Error (047c) w.x.y.z - 149.217.72.48 receive error 20010. *** can anybody explain the meanings of these errors? Do we have a (configuration problem) on the server site, or can the problem be located on the client site? What to do that these users can use webmail? Thanks! Roland -- Dr. Roland Braun Max Planck Institute for Comparative Public Law and International Law Im Neuenheimer Feld 535; D-69120 Heidelberg Phone: +49 6221 482 608; Fax: +49 6221 482 278 To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] copy all
I have been asked by executives to copy all email that goes in and out of our Imail 8.03 server which is also running Declude Virus and Junkmail. I have the Copy All Mail option enabled in the SMTP Security tab and entered a local email address. Every 6 to 8 weeks, Ive been renaming the main.mbx file and moving it to the NAS and using Mail Navigator to sort and filter the emails as needed. However, over the past month, the main.mbx file exceeded 1gb, no doubt due to spam and virus messages that entered my server thanks to Novarg and MyDoom. I tried to open the main.mbx with Mail Navigator, but it choked on my pc, so I tried it on a dual 2.66ghz Xeon with 2gb RAM; it loaded about 75% of the mbx before it choked. I have two questions 1) Is there a better way to copy all users email that enters and leaves the server, including NOT copying spam and virus messages? 2) What other apps are good for retrieving archived email in this scenario? Thanks! Scott
RE: [IMail Forum] copy all
Maybe write a script that renames the file each hour? I do that for my smtp logs renaming it sysmmddyy-hr.txt It makes it much easier to open. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Huber Sent: Wednesday, February 04, 2004 9:02 AM To: 'iMail Forum' Subject: [IMail Forum] copy all I have been asked by executives to copy all email that goes in and out of our Imail 8.03 server which is also running Declude Virus and Junkmail. I have the Copy All Mail option enabled in the SMTP Security tab and entered a local email address. Every 6 to 8 weeks, Ive been renaming the main.mbx file and moving it to the NAS and using Mail Navigator to sort and filter the emails as needed. However, over the past month, the main.mbx file exceeded 1gb, no doubt due to spam and virus messages that entered my server thanks to Novarg and MyDoom. I tried to open the main.mbx with Mail Navigator, but it choked on my pc, so I tried it on a dual 2.66ghz Xeon with 2gb RAM; it loaded about 75% of the mbx before it choked. I have two questions 1) Is there a better way to copy all users email that enters and leaves the server, including NOT copying spam and virus messages? 2) What other apps are good for retrieving archived email in this scenario? Thanks! Scott
RE: [IMail Forum] copy all
Please share your script, if you're allowed? :) -Original Message-From: KathyJ [mailto:[EMAIL PROTECTED]Sent: Wednesday, February 04, 2004 9:09 AMTo: [EMAIL PROTECTED]Subject: RE: [IMail Forum] copy all Maybe write a script that renames the file each hour? I do that for my smtp logs renaming it sysmmddyy-hr.txt It makes it much easier to open. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott HuberSent: Wednesday, February 04, 2004 9:02 AMTo: 'iMail Forum'Subject: [IMail Forum] copy all I have been asked by executives to copy all email that goes in and out of our Imail 8.03 server which is also running Declude Virus and Junkmail. I have the Copy All Mail option enabled in the SMTP Security tab and entered a local email address. Every 6 to 8 weeks, Ive been renaming the main.mbx file and moving it to the NAS and using Mail Navigator to sort and filter the emails as needed. However, over the past month, the main.mbx file exceeded 1gb, no doubt due to spam and virus messages that entered my server thanks to Novarg and MyDoom. I tried to open the main.mbx with Mail Navigator, but it choked on my pc, so I tried it on a dual 2.66ghz Xeon with 2gb RAM; it loaded about 75% of the mbx before it choked. I have two questions 1) Is there a better way to copy all users email that enters and leaves the server, including NOT copying spam and virus messages? 2) What other apps are good for retrieving archived email in this scenario? Thanks! Scott
Re: [IMail Forum] copy all
entered a local email address. Every 6 to 8 weeks, I've been renaming the main.mbx file and moving it to the NAS You're causing your own problem. Without changing anything else, rotate the file more frequently. Len _ http://MenAndMice.com/DNS-training : Chicago; Wash DC; Atlanta http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Re: [IMail Forum] Continuous statistical filter updates?
Scott, Thank you for your feedback. I agree that false negatives are weakening the effectivity. However, I think you misunderstood my point. Technically, I collect all mails un-altered using the copy all mail function of IMail. This way, the only disortion is the X-Header, which is ignored by antispamseeder (along with the rest of the mail headers). Policywise, we never delete any mail, but insert the X-Headers and let the customer decide on how to process the tagged mails. There are some that forward them to a dedicated spambox, some sort them out on the client, others redirect them to NUL. All of our users agree with this policy and decide for themselves. Theoretically, any static filter list (statistic, url, phrase, black- or whitelist, virus patterns, os updates...) degrades into uselessness if it is not updated regularily. Common statistic antispam solutions base on regular database updates, either by self-collected data (e.g. ASSP) or by centralized updates from the provider (Brightmail, Clearswift, just to name some). This fails in many cases because they provide very generic filterlists. The same is true with the Ipswitch standard antispam files. They are useless for european countries. Therefore, we have to build *and maintain* our own filters. The naive baynesian filter approach does not calculate with absolute numbers (e.g. 0% false and 100% true), but it relies on probabilities. The effort to reach absolute perfection would be infinite. I do not have unlimited time to maintain my antispam filters, but I want to get the optimal value out of the built-in capabilities of the IMail product. This is what drove you to develop some add-on software. And, by the way, I use your antivirus add-on, too. Practically, what is your suggestion to get the most out of the IMail software while minimizing the administrative overhead? Marius I started to feed all received mails back into the antispamseeder, thus updating the statistic engine and url filters with the true mailtraffic for my IMail server on a daily base. All IMAIL- SPAM tagged mail serves as bad example, all untagged mail is treated as good sample. That's a very bad idea. People tried this a while back by forwarding all E-mail that their anti-spam software caught as spam to Spamcop. Doing so means If an E-mail looks like spam, it is spam. If an E-mail looks legitimate, it is legitimate. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Determine where a message came from
Is there a way to tell where a message originated from? I've noticed some emails being sent out through our server between 12 and 7 this morning, and the person that supposedly sent them has no record of them in her sent items folder. I'm thinking it's probably a spammer or a virus, but I'd like to see if I can tell where the message originated from (if it came from within our network or from somewhere else). I have our relay settings set to relay for IP addresses, and the ip addresses set to the subnet range of our LAN. Scott Smith - IT Manager Westside Detroit Reprographics 248.489.1999 (Office) 248.467.0452 (Cell) [EMAIL PROTECTED] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Dutch Police get in on the action
http://www.eweek.com/article2/0,4149,1484534,00.asp Read the part where a Swiss Professor lost almost 1/2 mil to these folks. --- [This E-mail scanned for viruses by Declude/F-Prot AV] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] copy all
Scott, I use the same functionality , but I sort the messages at the target mailbox depending on the content. This is file rules.ima, located in the directory of the copy all target mailbox, separating the spam mails into a separate mailboxfile: H~X-IMAIL-SPAM:SPAMBOX Then, the messages are processed and removed from the server on a daily schedule. Infected mails are quarantined by Declude Antivirus directly on the server. I keep the quarantined mails for one week, then delete them automatically. The week of mydoom was worth about 10Gigabytes of infected mails. Marius -Original Message- From: Scott Huber [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 3:02 PM To: 'iMail Forum' Subject: [IMail Forum] copy all I have been asked by executives to copy all email that goes in and out of our Imail 8.03 server which is also running Declude Virus and Junkmail. I have the Copy All Mail option enabled in the SMTP Security tab and entered a local email address. Every 6 to 8 weeks, I've been renaming the main.mbx file and moving it to the NAS and using Mail Navigator to sort and filter the emails as needed. However, over the past month, the main.mbx file exceeded 1gb, no doubt due to spam and virus messages that entered my server - thanks to Novarg and MyDoom. I tried to open the main.mbx with Mail Navigator, but it choked on my pc, so I tried it on a dual 2.66ghz Xeon with 2gb RAM; it loaded about 75% of the mbx before it choked. I have two questions. 1) Is there a better way to copy all users' email that enters and leaves the server, including NOT copying spam and virus messages? 2) What other apps are good for retrieving archived email in this scenario? Thanks! Scott To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
SV: [IMail Forum] Determine where a message came from
The mail header should contain the info you need. i.e, this mail: Received: from wsrepro.com [12.148.54.126] by list.ipswitch.com with ESMTP (SMTPD32-8.05) id A06F43500F6; Wed, 04 Feb 2004 09:23:43 -0500 Received: from adminscott [10.0.0.135] by wsrepro.com (SMTPD32-8.05) id AFEDE390088; Wed, 04 Feb 2004 09:21:33 -0500 Probably just a mydoom-spoofed sender address. - Eric -Opprinnelig melding- Fra: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] vegne av Scott Smith Sendt: 4. februar 2004 15:22 Til: [EMAIL PROTECTED] Emne: [IMail Forum] Determine where a message came from Is there a way to tell where a message originated from? I've noticed some emails being sent out through our server between 12 and 7 this morning, and the person that supposedly sent them has no record of them in her sent items folder. I'm thinking it's probably a spammer or a virus, but I'd like to see if I can tell where the message originated from (if it came from within our network or from somewhere else). I have our relay settings set to relay for IP addresses, and the ip addresses set to the subnet range of our LAN. Scott Smith - IT Manager Westside Detroit Reprographics 248.489.1999 (Office) 248.467.0452 (Cell) [EMAIL PROTECTED] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] copy all
Not trying to barge in on someone else's thread but I'm doing the same thing. Here is one I use to change the name every day at 11:59pm. It just sets it to that days date 02032004.mbx You could also add a line at the end of it to automatically move it over to your NAS. Move %TODAY%.mbx \\NAS\Mail\storage or something like that. Yes I'm aware that I COULD end up with a file in use problem trying to re-name it while its writing to the file, that hasn't happened yet. But if it does I'll just let it keep going and run the next day with two days of mail in it. :: BEGIN TODAY.BAT-- @ECHO OFF FOR /F TOKENS=2-4 DELIMS=/ %%A IN ('DATE /T') DO (SET TODAY=%%A%%B%%C) rename main.mbx %TODAY%.mbx :: END TODAY.BAT-- Michael Pierce -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Len Conrad Sent: Wednesday, February 04, 2004 9:16 AM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] copy all entered a local email address. Every 6 to 8 weeks, I've been renaming the main.mbx file and moving it to the NAS You're causing your own problem. Without changing anything else, rotate the file more frequently. Len _ http://MenAndMice.com/DNS-training : Chicago; Wash DC; Atlanta http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] Dutch Police get in on the action
I appreciate that infoit's nice to see somebody cracking down on them! Dennis T. Kemp II (Tom) Program Manager MCSE/CNA/A+ Control Concepts, Inc. [EMAIL PROTECTED] ICQ#: 157741210 For additional contact information, click below: https://www.cardscan.net/v/?id=98303ssF0Qrf3FdboKaCbijB7g= 703-876-6418 Fax#: 703-876-6416 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Chris Hunt Sent: Wednesday, February 04, 2004 9:30 AM To: [EMAIL PROTECTED] Subject: [IMail Forum] Dutch Police get in on the action http://www.eweek.com/article2/0,4149,1484534,00.asp Read the part where a Swiss Professor lost almost 1/2 mil to these folks. --- [This E-mail scanned for viruses by Declude/F-Prot AV] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Re: [IMail Forum] Continuous statistical filter updates?
Thank you for your feedback. I agree that false negatives are weakening the effectivity. However, I think you misunderstood my point. Technically, I collect all mails un-altered using the copy all mail function of IMail. This way, the only disortion is the X-Header, which is ignored by antispamseeder (along with the rest of the mail headers). I think you misunderstood. A false negative (a spam that is not caught) will get fed to the list of good E-mails. So if the spam says Buy SuperDuperProduct now!, SuperDuperProduct becomes a good word. Buy, which is probably now more spammy than legitimate, becomes closer to a legitimate word. The next time that spam comes in, it's more likely not to get caught, because you've told the statistical filter (incorrectly) that it is a good E-mail. This fails in many cases because they provide very generic filterlists. Correct. That's why for statistical filtering to be effective, you need to have very small groups that receive similar E-mails. Ideally, each user will have their own statistical database. If not, per-domain can sometimes be acceptable. Server-wide statistical databases fare worse. That's why we never implemented statistical filtering into Declude JunkMail -- we found that in most cases it just doesn't work well enough on a server-wide basis, and individual users tend not to want to keep updating the statistical database. The naive baynesian filter approach does not calculate with absolute numbers (e.g. 0% false and 100% true), but it relies on probabilities. Yes, I know. :) I actually did work on Bayesian anti-spam algorithms (both true and naive) several years before Paul Graham invented the idea. The effort to reach absolute perfection would be infinite. Correct. On the one hand, the more work you put into it, the better the results. But on the other hand, you can never achieve 100%. The is especially true as spammers try to bypass Bayesian filters. I do not have unlimited time to maintain my antispam filters, but I want to get the optimal value out of the built-in capabilities of the IMail product. This is what drove you to develop some add-on software. And, by the way, I use your antivirus add-on, too. While automatically feeding the statistical database sounds like a good idea, I do believe that it will cause problems. Practically, what is your suggestion to get the most out of the IMail software while minimizing the administrative overhead? Unfortunately, I can't offer much advice there, as I have spent little time working with IMail v8's anti-spam. I'm sure that others on this list can offer suggestions, however. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] Dutch Police get in on the action
Only reaffirms that greed can blind the eye of common sense. -Original Message- From: Tom Kemp [mailto:[EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 9:47 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] Dutch Police get in on the action Importance: High I appreciate that infoit's nice to see somebody cracking down on them! Dennis T. Kemp II (Tom) Program Manager MCSE/CNA/A+ Control Concepts, Inc. [EMAIL PROTECTED] ICQ#: 157741210 For additional contact information, click below: https://www.cardscan.net/v/?id=98303ssF0Qrf3FdboKaCbijB7g= 703-876-6418 Fax#: 703-876-6416 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Chris Hunt Sent: Wednesday, February 04, 2004 9:30 AM To: [EMAIL PROTECTED] Subject: [IMail Forum] Dutch Police get in on the action http://www.eweek.com/article2/0,4149,1484534,00.asp Read the part where a Swiss Professor lost almost 1/2 mil to these folks. --- [This E-mail scanned for viruses by Declude/F-Prot AV] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Re: [IMail Forum] Dutch Police get in on the action
http://www.eweek.com/article2/0,4149,1484534,00.asp Read the part where a Swiss Professor lost almost 1/2 mil to these folks. It is very sad that people fall for the Nigerian 419 scams. A month or so ago, I read an article (which unfortunately I can't find anymore!) about a guy in Florida who fell for it. After the authorities let him know what happened, when the newspaper article was written (weeks/months later?), he still believed it! He kept blaming the Nigerian government, who he was sure really caused all the problems that prevented him from getting his millions of dollars (because the scammers -- who he called his friends(!) -- said so). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Re: [IMail Forum] Continuous statistical filter updates?
Correct. On the one hand, the more work you put into it, the better the results. But on the other hand, you can never achieve 100%. The is especially true as spammers try to bypass Bayesian filters. FWIW, the first E-mail I received after posting this contained: --- Zachievements headline ineducable casework turk mesquite canyon dew parallax coronet guaranteeing zan mantic backbone sundown stableman cordon bedfellow avast council barhopped diaper charlemagne appliqued airline bulge statistician delano amorously amplification throughout complainant aria denounce suicidal beanbag jovanovich convect grimace bio abridge handymen encephalitis foot cochineal aeronautic deer worksheet majesty antonym elaine calorimeter educate phantasy nne basted ashtray bassi backing bedizening amalgamations blinds they'd antipathy beefburgers dyer nectar optoelectronic anuses stucco deter caustic wave olympic half gelable assyriology budweiser frontier washbasin asymmetrical desultory tyndall descendent antioxidants thor huck nab adrift paranoia temperature uruguay rabbi adenoma bourbon lilt bicycler neptune bethesda orient employed hemingway barn hook avocados arrogated ahmedabad testimony furrow mario sagacious molasses abeam bergamot sunk mineral television lectern college neapolitan stahl excitation wheat coincidental abacus appalled defensive leprosy lsi cavalcade confuse !Aadult onlooking altered bloodstocks they're aptness valid extemporaneous redound stonehenge scare uhf blazoned bandstand astrophysical nippon potash baste guile anodic halo chicanery tarnish skip kiev mcgregor gsa baboon lens confederacy mother bronchitis corp amenability bayesian sneeze inflammatory androgen decant amylases backsliders sail arraigning amoebae art achier additive associations schoolhouse administrate pinxter bankruptcy babbles freewheel slaughter endicott filter ukraine irrepressible wingman trigonometry authentication pit arturo bewilder airships accuse cassette mccarthy adjustable pitchblende roughshod inveterate aping hexagon rafferty ass bedim chess clomp averaged wildfire minneapolis sip dervish visible charybdis eveready rectory arithmetical exacter garrett harmony oracular modulo lifeboat ponder flagellate bankroll zip noxious asseveration logjam fumigant discern brought slovenia suspensor malnutrition angry wrongdo ma pelican aligned nigh shoelace biotic wearied insoluble bloodlessly biochemist nguyen extrovert doorkeeper nominal ephemeral pent maximum crewman laotian altair captious gymnasium oriental extraditable lair igor hebe balaclavas bakhtiari gang fortune centennial soprano finance filamentary officemate immaterial combustible ising armory bedimmed babyish chant programmed blasters yogi solar prefabricate ani revolt ludwig backslide crispin digestible millionaire affectionate verb petit sherbet hollowware quizzical demiscible airbrushes adsorptive munson demonstrate erupt palliate shale annal abortive bicentenary highlight hanson efficient thymine amuses baleens aniline luzon : bookkeeper 91V --- That's all it contained (aside from a link to a .GIF, which my mail client doesn't show). So if this E-mail was caught by your anti-spam software, you now have words like bourbon, bicycler and rectory more likely to be treated as spammy words. If it was not caught by your anti-spam software, words like millionaire and bankrupcy and fortune will now be more likely to be treated as legitimate words. However, this E-mail came from an IP failing the SORBS-DUHL test, and was sent via spamware (as detected by SMTP commands), and was sent through a spam-like route. It also was sent using a Yahoo address but not sent from a Yahoo mailserver. Because of those problems, it got caught here as spam, without making it more likely that future spam will get through. You may want to consider using IP-based spam tests such as SORBS-DUHL in IMail v8's anti-spam. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] copy all
Michael, Thanks for the input. I tested your batch file on my pc (created a blank main.mbx file and ran the batch), but it only renamed the file to .mbx The date was not added. Any thoughts? Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Pierce Sent: Wednesday, February 04, 2004 9:38 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] copy all Not trying to barge in on someone else's thread but I'm doing the same thing. Here is one I use to change the name every day at 11:59pm. It just sets it to that days date 02032004.mbx You could also add a line at the end of it to automatically move it over to your NAS. Move %TODAY%.mbx \\NAS\Mail\storage or something like that. Yes I'm aware that I COULD end up with a file in use problem trying to re-name it while its writing to the file, that hasn't happened yet. But if it does I'll just let it keep going and run the next day with two days of mail in it. :: BEGIN TODAY.BAT-- @ECHO OFF FOR /F TOKENS=2-4 DELIMS=/ %%A IN ('DATE /T') DO (SET TODAY=%%A%%B%%C) rename main.mbx %TODAY%.mbx :: END TODAY.BAT-- Michael Pierce -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Len Conrad Sent: Wednesday, February 04, 2004 9:16 AM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] copy all entered a local email address. Every 6 to 8 weeks, I've been renaming the main.mbx file and moving it to the NAS You're causing your own problem. Without changing anything else, rotate the file more frequently. Len _ http://MenAndMice.com/DNS-training : Chicago; Wash DC; Atlanta http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude Virus on the Orion Medical Management IMail server] --- [This E-mail scanned for viruses by Declude Virus on the Orion Medical Management IMail server] -- This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential and privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of the communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank you, Orion Medical Management Inc., Radiology Associates of Tampa. This message has been scanned for viruses by Declude Virus on the Orion Medical Management Imail Server. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Email Server taken Off Line Need Data
Does anyone have a means to take all emails including attachments from any email account and extracting the data for use? The Account has multiple directories and is quite large. It seems from Imail Client you can see the emails, but not the attachments. The domain name has been transferred to another administrator and different email system/server. Thanks, Greg Shepherd Catalyst Mfg. Services application/ms-tnef
Re: [IMail Forum] Dutch Police get in on the action
And this guy is teaching? Mike - Original Message - From: Chris Hunt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 9:29 AM Subject: [IMail Forum] Dutch Police get in on the action http://www.eweek.com/article2/0,4149,1484534,00.asp Read the part where a Swiss Professor lost almost 1/2 mil to these folks. --- [This E-mail scanned for viruses by Declude/F-Prot AV] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] copy all
Right now I do the same copyall thing, and dump it all into a copy of Outlook. Maybe not the best method but it works for me. I archive the email in daily folders into a PST file that I archive each month. It gets up to about 1.5gb total each month, knock it down to 1/3 that with WinRAR. As for writing a script to rename the file at set intervals, I never really considered that, but it would be easy enough to do if you want. As for the line of code that creates a date variable in a batch, this is what I use: for /F tokens=1-4 delims=/- %%A in ('date/T') do set DATE=%%B%%C%%D D is year, B is month, C is day. Just put the variable %DATE% wherever you want the date to be placed, file name, folder name, etc... Sam -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Huber Sent: Wednesday, February 04, 2004 10:25 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] copy all Michael, Thanks for the input. I tested your batch file on my pc (created a blank main.mbx file and ran the batch), but it only renamed the file to .mbx The date was not added. Any thoughts? Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Pierce Sent: Wednesday, February 04, 2004 9:38 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] copy all Not trying to barge in on someone else's thread but I'm doing the same thing. Here is one I use to change the name every day at 11:59pm. It just sets it to that days date 02032004.mbx You could also add a line at the end of it to automatically move it over to your NAS. Move %TODAY%.mbx \\NAS\Mail\storage or something like that. Yes I'm aware that I COULD end up with a file in use problem trying to re-name it while its writing to the file, that hasn't happened yet. But if it does I'll just let it keep going and run the next day with two days of mail in it. :: BEGIN TODAY.BAT-- @ECHO OFF FOR /F TOKENS=2-4 DELIMS=/ %%A IN ('DATE /T') DO (SET TODAY=%%A%%B%%C) rename main.mbx %TODAY%.mbx :: END TODAY.BAT-- Michael Pierce -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Len Conrad Sent: Wednesday, February 04, 2004 9:16 AM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] copy all entered a local email address. Every 6 to 8 weeks, I've been renaming the main.mbx file and moving it to the NAS You're causing your own problem. Without changing anything else, rotate the file more frequently. Len _ http://MenAndMice.com/DNS-training : Chicago; Wash DC; Atlanta http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude Virus on the Orion Medical Management IMail server] --- [This E-mail scanned for viruses by Declude Virus on the Orion Medical Management IMail server] -- This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential and privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of the communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank you, Orion Medical Management Inc., Radiology Associates of Tampa. This message has been scanned for viruses by Declude Virus on the Orion Medical Management Imail Server. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] Email Server taken Off Line Need Data
Title: RE: Email Server taken Off Line Need Data You could transfer the files/messages in question to another MBX file via the Imail Client. Attachments should go with it, then just check the MBX in the web client, etc Sam -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Greg Shepherd Sent: Wednesday, February 04, 2004 10:47 AM To: '[EMAIL PROTECTED]' Subject: Email Server taken Off Line Need Data Does anyone have a means to take all emails including attachments from any email account and extracting the data for use? The Account has multiple directories and is quite large. It seems from Imail Client you can see the emails, but not the attachments. The domain name has been transferred to another administrator and different email system/server. Thanks, Greg Shepherd Catalyst Mfg. Services
RE: [IMail Forum] Continuous statistical filter updates?
Not to jump in on this thread here.. but ASSP auto whitelist people that we have emailed, such as this list. Doing so will allow mail to come through. Here is the headers of 'this message' and as you can see the X-Assp-Spam-Prob: 0.0 shows that it wasn't even considered for testing. If the email had contained any predefined words via Imail's rules.ima then it does still get caught as spam (false negative). Forwarding the spam to the [EMAIL PROTECTED] will add it to the assp greylist for future filtering. I think it's worth mentioning that it is helpful to have multiple 'tools' to detect and handle spam and viruses. Declude products are the best in my opinion and worth any investment. The small amount of money that we have spent with them is easily saved in labor and wasted bandwidth.. Let alone the labor hours exhausted if a virus should ever contaminate one of our servers. ~Rick Received: from ict-famhost.email.system [127.0.0.1] by JaRay.net with ESMTP (SMTPD32-8.05) id AE8064A0240; Wed, 04 Feb 2004 09:23:44 -0600 Received: from 156.21.1.21 ([156.21.1.21] helo=list.ipswitch.com) by ict-famhost.email.system ; 4 Feb 04 15:23:44 - Received: from declude.com [24.107.232.14] by list.ipswitch.com with ESMTP (SMTPD32-8.05) id AEBFD5400EE; Wed, 04 Feb 2004 10:24:47 -0500 Received: from panda.declude.com [192.168.0.4] by declude.com with ESMTP (SMTPD32-7.06) id AE3173910304; Wed, 04 Feb 2004 10:22:25 -0500 Message-Id: [EMAIL PROTECTED] X-Sender: [EMAIL PROTECTED] X-Mailer: QUALCOMM Windows Eudora Version 5.1 Date: Wed, 04 Feb 2004 10:22:09 -0500 To: [EMAIL PROTECTED] From: R. Scott Perry [EMAIL PROTECTED] Subject: Re: [IMail Forum] Continuous statistical filter updates? In-Reply-To: [EMAIL PROTECTED] References: [EMAIL PROTECTED] Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii; format=flowed X-Note: This E-mail was scanned for viruses by Declude Virus (www.declude.com) Organization: Computerized Horizons Precedence: bulk Sender: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] X-Assp-Spam-Prob: 0.0 X-IMAIL-SPAM-VALHELO: (105513536) X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 375492599 Correct. On the one hand, the more work you put into it, the better the results. But on the other hand, you can never achieve 100%. The is especially true as spammers try to bypass Bayesian filters. FWIW, the first E-mail I received after posting this contained: --- Zachievements headline ineducable casework turk mesquite canyon dew parallax coronet guaranteeing zan mantic backbone sundown snip That's all it contained (aside from a link to a .GIF, which my mail client doesn't show). So if this E-mail was caught by your anti-spam software, you now have words like bourbon, bicycler and rectory more likely to be treated as spammy words. If it was not caught by your anti-spam software, words like millionaire and bankrupcy and fortune will now be more likely to be treated as legitimate words. However, this E-mail came from an IP failing the SORBS-DUHL test, and was sent via spamware (as detected by SMTP commands), and was sent through a spam-like route. It also was sent using a Yahoo address but not sent from a Yahoo mailserver. Because of those problems, it got caught here as spam, without making it more likely that future spam will get through. You may want to consider using IP-based spam tests such as SORBS-DUHL in IMail v8's anti-spam. ___ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum]
Does Imail 7.15 have a default maximum attachment size that it will accept? If so is there any way to increase the maximum size? Thanks. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum]
I don't think so.. I believe it's limited to the size of the mailbox. ~Rick Does Imail 7.15 have a default maximum attachment size that it will accept? If so is there any way to increase the maximum size? Thanks. ___ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Synchronizing outlook with IMail
Title: Message Is there any way to perform contact synchronization between Outlook, or any other mail clients for that matter, with an IMail server? Also is it possible to run a script on the local machine to push contacts up to the IMail server on a scheduled basis if there is no product or plug-in that will perform the desired task? I have been unable to find any information on this topic in the kb and or the archives so any help would be appreciated. Adam Lukasiewicz _ On Garde!'s innovative approach to IT security monitoring provides a 360 degree view of your security posture to include abuse detection, attack characterization, vulnerabilities, resource utilization and availability all within our Security Information Monitoring Portal. 856.541.2600 x111
RE: [IMail Forum] copy all
Nevermind... when I copied the text from your post, the carriage return between SET and Today was copied as well. Chalk that one up as S.U.E. Now I'll just set this up to run around midnight. Thanks Michael! Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Huber Sent: Wednesday, February 04, 2004 10:25 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] copy all Michael, Thanks for the input. I tested your batch file on my pc (created a blank main.mbx file and ran the batch), but it only renamed the file to .mbx The date was not added. Any thoughts? Scott -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Pierce Sent: Wednesday, February 04, 2004 9:38 AM To: [EMAIL PROTECTED] Subject: RE: [IMail Forum] copy all Not trying to barge in on someone else's thread but I'm doing the same thing. Here is one I use to change the name every day at 11:59pm. It just sets it to that days date 02032004.mbx You could also add a line at the end of it to automatically move it over to your NAS. Move %TODAY%.mbx \\NAS\Mail\storage or something like that. Yes I'm aware that I COULD end up with a file in use problem trying to re-name it while its writing to the file, that hasn't happened yet. But if it does I'll just let it keep going and run the next day with two days of mail in it. :: BEGIN TODAY.BAT-- @ECHO OFF FOR /F TOKENS=2-4 DELIMS=/ %%A IN ('DATE /T') DO (SET TODAY=%%A%%B%%C) rename main.mbx %TODAY%.mbx :: END TODAY.BAT-- Michael Pierce -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Len Conrad Sent: Wednesday, February 04, 2004 9:16 AM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] copy all entered a local email address. Every 6 to 8 weeks, I've been renaming the main.mbx file and moving it to the NAS You're causing your own problem. Without changing anything else, rotate the file more frequently. Len _ http://MenAndMice.com/DNS-training : Chicago; Wash DC; Atlanta http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude Virus on the Orion Medical Management IMail server] --- [This E-mail scanned for viruses by Declude Virus on the Orion Medical Management IMail server] -- This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential and privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of the communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank you, Orion Medical Management Inc., Radiology Associates of Tampa. This message has been scanned for viruses by Declude Virus on the Orion Medical Management Imail Server. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude Virus on the Orion Medical Management IMail server] --- [This E-mail scanned for viruses by Declude Virus on the Orion Medical Management IMail server] -- This message is intended for the use of the individual or entity to which it is addressed and may contain information that is confidential and privileged and exempt from disclosure under applicable law. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution, or copying of the communication is strictly prohibited. If you have received this communication in error, please contact the sender immediately and delete it from your system. Thank you, Orion Medical Management Inc., Radiology Associates of Tampa. This message has been scanned for viruses by Declude Virus on the Orion Medical Management Imail Server. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Upgrading 6.0.4 to 8.0.5
Hello... I'm getting ready to upgrade from 6.0.4 to 8.0.5. Are there any issues I need to be aware of? It's a WinNT4sp6a machine with 4 small domains ( less than 250 users ) over two partitions. One nic. Fairly vanilla setup. Any suggestions? Thx, D. PS: I waited so long because 604 was such a stable platform for us, we decided not to fix what's not broken, but I think it's finally time. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Re: [IMail Forum] Synchronizing outlook with IMail
Is there any way to perform contact synchronization between Outlook, or any other mail clients for that matter, with an IMail server? There certainly is no way to perform _bi-directional_ replication of contacts. Also is it possible to run a script on the local machine to push contacts up to the IMail server on a scheduled basis if there is no product or plug-in that will perform the desired task? Absolutely. You just have to perform a limited export of the fields to match the ALIASES.TXT format, and of course each user needs network file share access to their mail directory. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Distribution List
If I have a group alias and put in 2000 contacts there, will Imail treat this as 1 email recipient even if I have the number of email recipients locked down to 500? Thanks To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Re: [IMail Forum] Distribution List
If I have a group alias and put in 2000 contacts there Don't do that, set up a list. Len _ http://MenAndMice.com/DNS-training : Chicago; Wash DC; Atlanta http://IMGate.MEIway.com : free anti-spam gateway, runs on 1000's of sites To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Re: [IMail Forum] Distribution List
If I have a group alias and put in 2000 contacts there, will Imail treat this as 1 email recipient even if I have the number of email recipients locked down to 500? Yes. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] POSSIBLE OT: TLS Error
Would any one be able to explain this error to me? This is not happening on my Imail server, but googling suggested it might be a generic e-mail problem. When connecting to a certain email sever, I get a message back 04-02-04 13:05:14 0012: TLS/SLS Problem: Unable to establish a TLS connection with host [162] Any help is greatly appreciated Tom Welch Manager, Distributed Systems American Academy of Orthopaedic Surgeons To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Setting Up ASSP and Imail
I have chaged the SMTP port to 125 within Imail. Do I need to change anything else within Imail - or will Imail always attempt to send mail out on Port 25 ? Jeff
Re: [IMail Forum] POSSIBLE OT: TLS Error
Would any one be able to explain this error to me? This is not happening on my Imail server, but googling suggested it might be a generic e-mail problem. When connecting to a certain email sever, I get a message back 04-02-04 13:05:14 0012: TLS/SLS Problem: Unable to establish a TLS connection with host [162] It sounds like they require a TLS connection. In reality, that means that they are only willing to accept E-mail from a very small portion of the Internet. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Re: [IMail Forum] Setting Up ASSP and Imail
Thats it, you've changed everything you need to change. When you sent using the client port 25 will be answered by ASSP. When you send using web mail, imail sends directly out using imail on port 25 I think. At leasts thats the way I understood it, and have mine running as such - Original Message - From: Jeff Pereira [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 1:13 PM Subject: [IMail Forum] Setting Up ASSP and Imail I have chaged the SMTP port to 125 within Imail. Do I need to change anything else within Imail - or will Imail always attempt to send mail out on Port 25 ? Jeff To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] Setting Up ASSP and Imail
Jeff, That should be all that you need to do within iMail. Just make sure that ASSP is listening on port 25. You will probably want to stop and restart the service as well. BTW, if you have iMail ver. 8.0+, be sure to diable all of the DNS-based blacklist checks, as they will no longer work. No sense wasting the bandwidth. William Van Hefner -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Pereira Sent: Wednesday, February 04, 2004 11:13 AM To: [EMAIL PROTECTED] Subject: [IMail Forum] Setting Up ASSP and Imail I have chaged the SMTP port to 125 within Imail. Do I need to change anything else within Imail - or will Imail always attempt to send mail out on Port 25 ? Jeff --- [This E-mail scanned for viruses by Declude Virus] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] January 2004 Spam Statistics
Each month, we go through our spamtraps (E-mail addresses designed to collect spam), to find out which spam tests were most effective at catching spam. The results this month are based on over 230,000 spams that were received, all in January 2004. This is nearly identical to the amount of spam received last month. In January 2004 we received over 11 times as much spam as in January, 2003. The bad news is that despite the United States CAN Spam act taking effect on January 1st, there was *no* reduction in spam in January. While the spam flow was slower in the first week than it was in December, the increased spam the rest of the month made the total number of spams received in January slightly higher than December. The following is a list of tests that we run against the E-mails arriving at the spamtraps, and what percentage of the spam they caught (it may be easier to read if you use a fixed-width font): WEIGHT1098.91% NOLEGITCONTENT 97.22% WEIGHT2096.16% SNIFFER 95.76% SPAMCHK 93.82% IPNOTINMX 88.99% SPAMCOP 83.35% MAILDEFLECTOR 75.00% CMDSPACE67.40% DSBLALL 63.34% DSBL63.25% CBL 55.60% BLARSBL 53.24% SORBS-DUHL 44.61% FIVETENSRC 43.16% NOABUSE 38.67% NOPOSTMASTER32.89% BADHEADERS 30.53% FREEMAIL26.51% AHBL26.50% REVDNS 23.04% NJABLPROXIES22.65% HELO20.47% SPAMHAUS18.39% SORBS-SOCKS 18.30% ROUTING 17.61% SORBS-HTTP 16.19% IPWHOIS 12.85% DSN 12.14% NJABLSOURCES11.78% SORBS-SPAM 11.00% SPAMHEADERS 10.86% BASE647.00% NJABLDUL 6.70% RSL 6.26% BLITZEDALL5.58% COMMENTS 4.93% LNGSDUL 4.20% FABELSOURCES 3.56% MAILFROM 3.20% FIVETENIGNORE 2.88% SPAMBAG 1.87% BADWHOIS 1.63% NJABL 1.60% SORBS-MISC1.38% ORDB 1.18% INTERSIL 1.00% SORBS-SMTP0.92% JIPPG-DUL 0.86% NONENGLISH0.56% ORBZIN0.54% ORBZOUT 0.54% DNSRBL-DUN0.52% FIVETENOPTIN 0.47% PIGS 0.42% SPFFAIL 0.38% SORBS-WEB 0.26% KUNDENSERVER 0.26% DSBLMULTI 0.19% SORBS-ZOMBIE 0.19% KITHRUP 0.19% LNGSBLOCK 0.12% DNSRBL-SPAM 0.09% FIVETENOTHER 0.07% FIVETENMULTI 0.03% DEVNULL 0.03% DNSMAILLIST 0.02% JIPPG-DULJP 0.01% NJABLFORMMAIL 0.00% FIVETENWEBFORM0.00% The WEIGHT10 and WEIGHT20 tests are part of a weighting system that assigns a weight to each E-mail, based on the spam tests that fail, so they don't really count as spam tests by themselves (but, they show that you can catch well over 95% of spam with extremely few false positives, and without relying on a single spam test). It is also important to note that different tests are more likely to produce false positives, which is what makes the weighting system so useful (E-mail will only be marked as spam if it fails a combination of tests). The NOLEGITCONTENT and IPNOTINMX tests were designed to help identify legitimate E-mail (rather than spam), which accounts for their high percentages. What is really interesting this month is the addition of the CMDSPACE test, which is designed to detect spamware that doesn't follow the RFCs exactly. Over 2/3rds of all spam can be caught with this one test (with only about 1 in 1,000 legitimate E-mails failing it). Also, over 30% of the spam this month could safely be caught by the BADHEADERS test (since no RFC-compliant mail client will send out E-mail that fails the BADHEADERS test). That's a lot of spam that can be caught safely. More information on most of the spam tests shown above can be found at http://www.declude.com/junkmail/support/ip4r.htm . You can look up an IP address using the Spam Database Lookup tool at http://www.DNSstuff.com to see what spam databases it is listed in. The most recent 20 spams in our spamtraps, and the tests they failed, can be found at http://www.declude.com/spamtrap.htm . -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Upgrading 6.0.4 to 8.0.5
Hi...If anyone replied, could I have that reply resent. My filters trashed any replies. With apologies. Here's the original... Hello... I'm getting ready to upgrade from 6.0.4 to 8.0.5. Are there any issues I need to be aware of? It's a WinNT4sp6a machine with 4 small domains ( less than 250 users ) over two partitions. One nic. Fairly vanilla setup. Any suggestions? Thx, D. PS: I waited so long because 604 was such a stable platform for us, we decided not to fix what's not broken, but I think it's finally time. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Moving folders
Is it possible to move whole folders in the web client? I have a user who has something like this: Dogs Cats Fish They want to be able to create a new folder (Animals) and move all the existing folders within the new one to look like this: Animals Dogs Cats Fish Is this possible? Eric To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Re: [IMail Forum]
set the max message size Eric S - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, February 04, 2004 11:06 AM Subject: [IMail Forum] Does Imail 7.15 have a default maximum attachment size that it will accept? If so is there any way to increase the maximum size? Thanks. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] HTML Content
Just wondering if anyone else here blocks on HTML content? I would like to stop all emails that contain more than 50% HTML content. Imail 8.05, Imgate, declude and F-Prot setup Michael Ryan To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] HTML Content
I realize that most SPAM contains much (if not all) HMTL content... However, many of our clients like (love, live for, can't do without, would find another provider if they couldn't) send messages in HTML format with corporate logos, wallpaper, neat fonts and the like. And they demand that they be allowed to receive those same types of cool looking messages. As much as I dislike them, they seem to be a part of popular internet culture and we must therefore comply if we want to stay in business. Anyone else have experience with their own customers?? Todd Holt Xidix Technologies, Inc Las Vegas, NV USA 702.319.4349 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Ryan Sent: Wednesday, February 04, 2004 3:55 PM To: [EMAIL PROTECTED] Subject: [IMail Forum] HTML Content Just wondering if anyone else here blocks on HTML content? I would like to stop all emails that contain more than 50% HTML content. Imail 8.05, Imgate, declude and F-Prot setup Michael Ryan To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] Log Reports
What application(s) do you all use to view your log files to query for reports? Crystal Reports? To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
[IMail Forum] MX connect fail
Hi, all We are using Imail7. It works smoothly but there is a problem. We can send the mails to almost all of the address which we want except one- www.virtualalert.com. Each mail which sent to [EMAIL PROTECTED] will be bounce back after 20 times delivery failure. I noticed that there is a line MX connect fail 63.119.134.240 in log file when deliver that mail. I read the article of this issue in KB: http://support.ipswitch.com/kb/IM-19981110-DD02.htm but that cant help me. Is it the problem of our DNS server? Why we only cant send email to that company and others are ok? Thanks.
Re: [IMail Forum] MX connect fail
Hodgen He wrote: Hi, all We are using Imail7. It works smoothly but there is a problem. We can send the mails to almost all of the address which we want except one- www.virtualalert.com http://www.virtualalert.com/. Each mail which sent to [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] will be bounce back after 20 times delivery failure. I noticed that there is a line MX connect fail 63.119.134.240 in log file when deliver that mail. When I do: telnet 207.183.234.17 25 from a command prompt, I also do not get a connection. I read the article of this issue in KB: http://support.ipswitch.com/kb/IM-19981110-DD02.htm but that cant help me. Is it the problem of our DNS server? Why we only cant send email to that company and others are ok? Thanks. Why do you think it's your DNS server? What have you checked? I went to www.dnsstuff.com and did a DNS lookup for virtualalert.com MX and got the following: (sorry, the spacing will probably get munged) DomainTypeClassTTLAnswer virtualalert.com.MXIN604800host01.virtualalert.com. [Preference = 5] virtualalert.com.MXIN3600207.183.234.17. [Preference = 10] host01.virtualalert.com.AIN360063.119.134.240 Now when I: telnet 207.183.234.17 25 I get: 220 virtualalert.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.0 ready at Wed, 4 Feb 2004 22:27:17 -0800 helo test 250 virtualalert.com Hello [216.78.105.187] mail from: 250 2.1.0 Sender OK rcpt to:[EMAIL PROTECTED] 250 2.1.5 [EMAIL PROTECTED] quit 221 2.0.0 virtualalert.com Service closing transmission channel So the questions are- why does virtualalert.com have this A record defined with a different address, and more importantly- why is your IMail using this incorrect A record instead of the MX? IIRC, IMail version 7 sometimes wants to use this wrong A record instead of the MX. A workaround is to update your hosts file with the correct IP address. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] MX connect fail
I think there server is down.. Or non existent: http://www.dnsstuff.com/tools/lookup.ch?name=www.virtualalert.comtype=MX ~Rick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hodgen He Sent: Wednesday, February 04, 2004 11:47 PM To: [EMAIL PROTECTED] Subject: [IMail Forum] MX connect fail Hi, all We are using Imail7. It works smoothly but there is a problem. We can send the mails to almost all of the address which we want except one- www.virtualalert.com. Each mail which sent to [EMAIL PROTECTED] will be bounce back after 20 times delivery failure. I noticed that there is a line MX connect fail 63.119.134.240 in log file when deliver that mail. I read the article of this issue in KB: http://support.ipswitch.com/kb/IM-19981110-DD02.htm but that can't help me. Is it the problem of our DNS server? Why we only can't send email to that company and others are ok? Thanks. ___ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
RE: [IMail Forum] MX connect fail
Thanks. You mean add a line 207.183.234.17 www.virtualalert.com in hosts file, is it? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gerry Massat Sent: Thursday, February 05, 2004 2:40 PM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] MX connect fail Hodgen He wrote: Hi, all We are using Imail7. It works smoothly but there is a problem. We can send the mails to almost all of the address which we want except one- www.virtualalert.com http://www.virtualalert.com/. Each mail which sent to [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] will be bounce back after 20 times delivery failure. I noticed that there is a line MX connect fail 63.119.134.240 in log file when deliver that mail. When I do: telnet 207.183.234.17 25 from a command prompt, I also do not get a connection. I read the article of this issue in KB: http://support.ipswitch.com/kb/IM-19981110-DD02.htm but that cant help me. Is it the problem of our DNS server? Why we only cant send email to that company and others are ok? Thanks. Why do you think it's your DNS server? What have you checked? I went to www.dnsstuff.com and did a DNS lookup for virtualalert.com MX and got the following: (sorry, the spacing will probably get munged) DomainTypeClassTTLAnswer virtualalert.com.MXIN604800host01.virtualalert.com. [Preference = 5] virtualalert.com.MXIN3600207.183.234.17. [Preference = 10] host01.virtualalert.com.AIN360063.119.134.240 Now when I: telnet 207.183.234.17 25 I get: 220 virtualalert.com Microsoft ESMTP MAIL Service, Version: 6.0.3790.0 ready at Wed, 4 Feb 2004 22:27:17 -0800 helo test 250 virtualalert.com Hello [216.78.105.187] mail from: 250 2.1.0 Sender OK rcpt to:[EMAIL PROTECTED] 250 2.1.5 [EMAIL PROTECTED] quit 221 2.0.0 virtualalert.com Service closing transmission channel So the questions are- why does virtualalert.com have this A record defined with a different address, and more importantly- why is your IMail using this incorrect A record instead of the MX? IIRC, IMail version 7 sometimes wants to use this wrong A record instead of the MX. A workaround is to update your hosts file with the correct IP address. To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/