We set up a mail account called 'spam' in which to send notifications from IMail
8.01's antispam engine, so that we could look at trapped messages to determine if they
are really spam. In the account set up, we set 'Max Mailbox Size' to zero, which
designates an unlimited size account.
Next,
I asked the group about this in the last week or so.
The initial problem was MX connect fail [x.x.x.x]
The suggestion was to try another network adapter. Well that was not the
problem, the problem is as follows;
Issue verified on Imail server 7.15 and 8.01 HF1
Problem description:
Andrew,
It's a text file so you can cut and paste your entries into the new file - organize
your entries so they are all together and it just takes a few seconds. That's what I
do for the phrase list.
Gary
-- Original Message --
From: Andrew Forbes
This is a Knowledge Base article for people who have not made changes their
Antispam-table. If you have 8.01, you can use the antispamseeder.exe found in the
IMail directory to merge the two tables. Note, you really shouldn't cut and paste
entries into the file because the different spam/good
Nothing odd about this...This is IMonitor checking the SMTP service. I can't
tell from the snippet you sent but I'll bet if you look at the whole log you
will see these connections at the same interval that IMonitor is checkking
the service
Eric S
- Original Message -
From: LHA MIS
Is there a limit on the domain for the max mailbox size? If tere is and you
set the user to 0 then it will iunherit the setting from the domain.
Eric S
- Original Message -
From: FastWave [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, August 01, 2003 2:20 AM
Subject: [IMail Forum]
I just re-read your original post. You original post said you wanted to update your
URL Black list file. You can edit that file directly with Notepad and cut and paste
your original file's contents into it. Te knowledge base article you referenced is
for the Antispam-table word list. This
What do you mean the disk is really the problem? This
is a brand new hard drive that has been installed and
running fine for a month, with no changes to the
system once 8.01 was installed.
I am unable to telnet to the server on port 25
remotely or setting in front of it and doing a telnet
Yes, the logs showed each being delivered. But this morning I got email from him,
saying that after
a long delay, the messages are arriving. I'm starting to think that either there's a
problem at his
end, or I'm not getting accurate information about the circumstances of the problem. I
may have
We are runnig declude and Imail8.01.
Declude runs great, on it own. However after adding a phrase list we
noticed more spam getting through.
We were wondering if anyone has experienced an increase of spam after
adding a phrase list?
For some reason, after adding Che's (Che Vilnonis) phrase
I am unable to telnet to the server on port 25
remotely or setting in front of it and doing a telnet
localhost 25 or telnet 127.0.0.1 25.
Are you running any 16-bit processes on the server? There is a known
problem with some servers where if they run too many 16-bit processes (as
is constantly
We are runnig declude and Imail8.01.
Declude runs great, on it own. However after adding a phrase list we
noticed more spam getting through.
We were wondering if anyone has experienced an increase of spam after
adding a phrase list?
The only way that should be possible is if you had a very
I have a question for this group . . .
What do you consider to be ON TIME for e-mail delivery?
Is it supposed to be instant messengering? It is almost as fast some times.
I have clients who are upset if e-mail takes more than a minute or two to be
delivered to someone. What's reasonable? Is
What do you mean the disk is really the problem?
if the disk i/o is congested, then STMPD is congested and can't dump the
inbound msgs to the queue.
I am unable to telnet to the server on port 25
remotely or setting in front of it and doing a telnet
localhost 25 or telnet 127.0.0.1 25.
then
Good morning J.J.
How bizarre is that?
I've never used Declude and I do not know how well my phrase-list
would work with it. There's nothing crazy in it...
I've had great results with my list using Imail v8.01. With this
list and using one DNS blacklist, I've cut 85% of my spam.
Are you sure
Do any of you see alot of service sweeps on your network? I get hundreds of
these a day. Usually ports 137 and 1434.
I would think our ISP would block this but then again it's probably better
that they don't filter.
UDP_Service_Sweep 2003-08-01 13:51:57
Source IP 148.221.102.24 Port N/A
Do any of you see alot of service sweeps on your network? I get hundreds of
these a day. Usually ports 137 and 1434.
I would think our ISP would block this but then again it's probably better
that they don't filter.
A Google search for port 137 and port 1434 should turn up a lot of
information.
What do you consider to be ON TIME for e-mail delivery?
There is no such thing. Email is insecure (like a postcard) and delivery at
any delay is not guaranteed, nor is delivery failure notification guaranteed.
ime, delivery from IMGate to remote MXs is typically under 20 seconds. but
that is
You really should be blocking inbound, at a minimum, the following Microsoft
services and NetBIOS ports at your boarder routers and/or firewalls:
netbios-ns137/tcpnbname#NETBIOS Name Service
netbios-ns137/udpnbname#NETBIOS Name Service
netbios-dgm
Great, thanks for the help Sean. I knew that some of the lists(text files)
were not supposed to be updated manually, so I was paranoid about doing
that. If it's all right to do with the URL Black list file though, I
certainly will. I find it much easier to do these things in Textpad than use
the
Hello All,
I've been having problems with my IIS 5 crashing about once daily. The log
files give errors pertaining to:
Out of process application '/LM/W3SVC/15/Root' terminated unexpectedly.
and
The server stop serving requests for application '/LM/W3SVC/17/Root'
because the number of Out of
When the SMTPD is not listening by stopping and
starting the process the server immediatly begins
listening on that port.
Okay to demonstrate my stupidity how can I concentrate
on the disk i/o..I mahve moved the entire contents of
the spool and start things and there is no problem for
a few hours
Hello,
Friday, August 1, 2003, 11:07:23 AM, you wrote:
GF I block all incoming traffic for most of my network. Those that are allowed
GF incoming trafific I do block the ports Bill listed below although I did miss
GF port 1512.
GF Thanks for the info Bill.
Anyone intrested in helping tracking
Tell them you offer no guarantee of delivery or delivery delays, since you
are only one part of non-guaranteeable, unreliable, uncontrollable,
invisible delivery chain. All you can do is make a best effort in the
links of the chain you control, and for the rest, que sera, sera.
Well put
Gary,
The 1434/udp is most likely the SQL Slammer Worm that's still very active.
George
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Gary.Ferguson
Sent: Friday, August 01, 2003 10:36 AM
To: [EMAIL PROTECTED]
Subject: [IMail Forum] OT Service
Hello,
I have a customer that runs SpamNet on their local computer. Apparently the
way this software works is it uses a DB of reported spam emails in it's
scanning process. With Declude, we add or append each incoming email with
a [This email scanned] notice that in effect changes the email
On Friday, August 1, 2003, 09:56:17, Keith Purtell wrote:
Yes, the logs showed each being delivered. But this morning I got email from him,
saying that after
a long delay, the messages are arriving. I'm starting to think that either there's a
problem at his
end, or I'm not getting accurate
My current disk queue length is 0 and did stay 0 for a
10 minute test on the performance monitor. The % Disk
time is very low as well so I am assuming by this that
the problem may not be disk related. As I have said
no one process will be using an enormous amount of
resources at any given time.
So I have a client that is asking that we remove the appending notice at the
bottom of each email. But my other clients will then not be able to
appreciate the efforts we have gone through to use Declude (the constant
reminder at the bottom has some merit). So my question is, does anyone know
of
A nice, easy method of populating the URL Blacklist table, (which has been catching
some 60% of the spam for me) is to gather known spam in a mailbox and create a Bat
file that runs the antispamseeder. The command I use is:
antispamseeder.exe -lo -ed:\scripts\UrlBLExclude.txt -hmyhost
On Friday, August 1, 2003, 12:03:41, paul wrote:
The same people will ask Why can't I get my mail that has an 8MB attachment
over my dialup connection right away?
They're confusing e-mail with ftp.
It's like putting a stamp on a refrigerator an sitting it atop your
mailbox.
--
[EMAIL
Troy,
Yea, there must be something going on with this. I have it too every
few days. It started on, ohhh, Monday I believe.
Here is what I get:
Event Type: Warning
Event Source: W3SVC
Event Category: None
Event ID: 28
Date: 7/31/2003
Time: 6:38:50 PM
User:
Yup I get the exact same thing. I just installed IISState and am running it
now. Hopefully, MS can help figure out what's going on and provide a nice,
clean patch or something.
Good luck with yours. Let me know what you find.
Troy
-Original Message-
From: [EMAIL PROTECTED]
Each month, we go through our spamtraps (E-mail addresses designed to
collect spam), to find out which spam tests were most effective at catching
spam. The results this month are based on over 85,000 spams that were
received, all in July 2003. In July, our spamtraps received about 25% more
My current disk queue length is 0 and did stay 0 for a
10 minute test on the performance monitor. The % Disk
time is very low as well so I am assuming by this that
the problem may not be disk related.
ok, but we had to check anyway.
As I have said
no one process will be using an enormous
Does it make since to have the rules.ima sorted in Z to A order so that
Subject lines get checked before the Body lines?
Chris
---
[This E-mail scanned for viruses by Declude/F-Prot AV]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
Actually that is how I have been populating my URL Blacklist table, but I
hadn't gotten as far to make a batch file for it and schedule it, I should
get that figured out next. I'm really loving the URL Blacklist, it's a great
new feature. It's especially nice to get my Imail Daily Report and see
I manage a server running Imail 8.01 and it hosts about 6 or 7 domains.
The problem I am having now is that I add the domains into the whitelist
area of IMAIL and the messages are still being blocked. How can I
configure IMAIL to allow messages from abc.com to xyz.com to avoid any
filtering
I manage a server running Imail 8.01 and it hosts about 6 or 7 domains.
The problem I am having now is that I add the domains into the whitelist
area of IMAIL and the messages are still being blocked. How can I
configure IMAIL to allow messages from abc.com to xyz.com to avoid any
filtering
Hi!
If we are going to change settings on the server, like demanding SMTP AUTH,
is there a way to send an email to all users or at least all hostmasters?
// Pelle
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
Search the knowledgebase (http://support.ipswitch.com/kb) for mailall.
-HJ
- Original Message -
From: Stib [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, August 01, 2003 3:44 PM
Subject: [IMail Forum] bulkmail
Hi!
If we are going to change settings on the server, like
That's great to hear! Let me know if you need anything else.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Andrew Forbes
Sent: Friday, August 01, 2003 2:56 PM
To: [EMAIL PROTECTED]
Subject: RE: [IMail Forum] Antispam updates overwrite?
Actually that is
Hi Sean!
At 17:04 2003-07-31 -0400, [EMAIL PROTECTED] wrote:
spamblkm.txt located in the root of IMail, stores the master list of BLs
available to the Domains.
spamblks.txt located in the top directory of each domain, holds the black
lists the Domain will use to check against. Any domains
Remember, the white list only is for content filtering. Connection
filtering is handled via the trusted IPs.
Tom
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]; [EMAIL PROTECTED]
Sent: Friday, August 01, 2003 2:06 PM
Subject: [IMail Forum]
No. I was just explaining how you can do things programmatically without using the
GUI. Connection filtering is handled at the IP level. If you have some domains that
need different blacklists, and you have a couple of IP addresses on the mail server,
you can set different settings for each
Hi again Sean!
And if we only have one IP for the whole mailserver. How do we set up then
blacklist then?
And another question. We bought KillerWebMail some years ago, and yesterday
we bought Imail 8,01. The box says that KWM MultiLanguage template options.
Where do we find the new KWM files?
Thanks for the reply...that fixed it!
Kim
Is there a limit on the domain for the max mailbox size? If tere is and you set the
user to 0 then it will iunherit the setting from the domain.
Eric S
- Original Message -
From: FastWave [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday,
If you only have 1 IP address then you can only use one set of black lists. KWM is
owned by Ipswitch so you can contact sales to get an upgrade.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Stib
Sent: Friday, August 01, 2003 4:28 PM
To: [EMAIL
Okej, I understand that I only can use one set of black lists, but can I
use this set on every host on the mailserver, or only on the one with
specified IP? Or does every virtual host use the set of blacklists that the
master have?
I am aware that KWM is owned by ipswitch, but I wonder why the
ok thank you! I do however have many domains in the whitelisting areas
such as @retailwire.com and messages from them are still not being let
through. Not sure what do do.
Regards,
Mark Schaefer
Sr. Technical Analyst
Edwards Lifesciences LLC
949 250 3557 Phone
949-809-7354 FAX
949-203-9050
If you have 1 IP address then every domain will use that set of black lists. I've
never seen the box but it sounds like it's telling you they are available if you want
them. Here is the link for KWM.
http://www.ipswitch.com/Products/IMail_Server/killer_web.html
-Original Message-
I have had several clients contact me today with them receiving an email
from [EMAIL PROTECTED] stating that their email account was about to
expire.
The exact message follows
Hello there,
I would like to inform you about important information regarding your email
address. This email address
We have encountered this exact same thing today on a number of domains we
host and I was about to send a message to the list myself. At first I
assumed it was just a new spam/virus mutation that was being received by
many out there but as more have reported it, it has me concerned.
Ben
At
Beware! This is a worm. And a clever one at
that...
http://www.trendmicro.com/vinfo/virusencyclo/default5.asp?VName=WORM_MIMAIL.A
There is an HTML file within that zip file. If you
open that HTML file in an IE browser that hasn't
been fully patched you will be infected.
The worm installs a
Yes,
We have had lots of reports of this just today. We don't setup Admin
accounts and it seems to be most prevelent on our main ISP domains, rather
than just hosted domain's. Thus far, we have just banned the address admin@
on our Declude on our main domain's.
We are considering e-mailing
I have had several clients contact me today with them receiving an email
from [EMAIL PROTECTED] stating that their email account was about to
expire.
This appears to be a new virus that is spreading very fast, although full
details aren't clear yet (there seem to be signs that it is being spread
FWIW, I had an employee forward me a message from one of her friends at
another company... saying anything coming from 'admin' having an
attachment 'message.zip', the zip'd file contained a virus. Although
the original message said the subject line was random letters.
Curiously similar to your
For More info:
http://vil.nai.com/vil/content/v_100523.htm
---
[This E-mail scanned for viruses by Declude Virus]
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ:
It appears to be an HTML file that creates a file called FOO . EXE
and I guess runs it. It's probably a virus or something.
Regards,
Tom
Image`fx
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Rick Hogue
Sent: Friday, August 01, 2003 4:58 PM
To:
Don't think this link was posted to this list, so check this out for info.
http://securityresponse.symantec.com/avcenter/venc/data/[EMAIL PROTECTED]
It's trying to use the Exploit in IE.
Paul
We have encountered this exact same thing today on a number of domains we
host and I was about to
From what I have just been reading it is a worm that when opened it will
infect your system and cause your system to send out the same files. I was
told by one person that it only did that if your IE was not up to date but
there does not seem to be any information on that on the virus sites. A
We have a lot of domains utilizing the [EMAIL PROTECTED] address and it is not
very practical for us to remove them (at east not in a timely fashion). I
suppose we can add some checks to our Declude spam to get rid of these.
Does anyone know if there is anything we should be concerned with
Hi Sean!
If the antispam works per IP, how is it then with the AntiVirus? Does that
also work with IP adress, or can we let our virtual host users add antivirus?
Is the settings for AntiVirus per mailserver, per host or per user?
Regards Pelle
To Unsubscribe:
Hello,
Imail 7.14, Win 2k, Sql2000.
We are using External database for Imail users.
I see lastlogin date when I login from webmail, Does it log last login for POP3 user
logins?
How can I check POP3 user lastlogins?
Thank you
Balaji.
To Unsubscribe:
I am only looking for possible solutions other than
just replace the server. I mean is there an other
testing I can do to see if it actually my server
simply being over used? Would increasing the smtp
threads help or not?
Again I am looking for options to to fix this problem
and/or if I replace
Gregory ,
I have been reading the SMTP Issues for a while now ,
The only thing i can recommend , is that you install WinVnc :
http://www.realvnc.com
And put a password for remote access , I can connect and have a look at your
server.
I am free right now ,but not the next 2 days.
Some times my tech
If you post your iisstate log results to the IIS forum they will
analyse it for you and try to pinpoint the problem. The techs at MS,
if you pace a call, will want you to use adplus to capture the logs.
John
On Fri, 1 Aug 2003 14:34:26 -0400, Troy Hilton wrote:
Yup I get the exact same thing.
I appreciate the offer but unfortunetly at this time I
can not be infront of the computer and can not give
you free access to the machine, can you provide me
with a direct email where we could possibly corridnate
some thing, even a phone call from me to you to work
thru this.
Thank You
Greg
---
Is there a way to put a message in the header of trusted email address (such
as X-IMAIL-TRUSTED-DOMAIN:255.255.255.255) so that if one of your trusted
domains starts sending spam, you can easily spot how it got around the spam
filters?
To Unsubscribe:
In your example script, what does -d do? or is that supposed to be -md ?
The command I use is:
antispamseeder.exe -lo -ed:\scripts\UrlBLExclude.txt -hmyhost -d:\imail\m
yhost\users\spam\spam.mbx
It's a wonderful script and idea.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
Hi All,
Any body can tell me a way to convert .mbx files into .pst?
Thanks in Advance.
Regards,
Venkateswarlu Swarna
Systems Engineer
Intelligroup Asia Pvt. Ltd.
Hyderabad - 500063
Tel: +91-040-23297487
---
[This E-mail scanned for viruses by Declude Anti-Virus Tool]
71 matches
Mail list logo
