I think Michael meant that if you use WinZIP and you open a passworded ZIP
file (which has the same ZIP extension as normal ZIP files) you can see the
encrypted files INSIDE the zip archive marked as filename.ext+
Markus
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL
If you use McAfee AV detection for the password protected ZIP
is included within the 4330 DAT file.
Lyndon,
What happens if a pwd protected zip file is detected? I don't believe Mcafee
can open pwd protected zip files without the password. So it can't know if
there is a malicious file inside
Can't find any bagle.F containing archive password, password: or pass:
in my virus hold folder.
Following the info on nai's website it looks like Mcafee has patterns to
catch this special passworded zip file containing the bagle.f virus.
Markus
-Original Message-
From: [EMAIL
http://www.sysinternals.com/ntw2k/source/tcpview.shtml
Since I have mentioned this before here, I figured I'd
indicate this update was available...
Some years ago I tried this localy and it worked fine. After installing it
on a server I had to go by car to the datacenter and reboot and
I asked Ipswitch repeatedly to implement international (which
means essentially european) characters in their product. Most
european countries have some weird characters in their set.
Switzerland with its 4 (!) official languages has quite a
bunch of them... While my focus was antispam,
That's one of the reasons Declude Virus is popular. :)
Well, I think this is reason nr.683 ;-)
Markus
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ:
I can not remember that I have to enter a serial number
during the installation - and the Server still works.
Imail Demo's exe is not the same as the purchased (from cd or online
downloaded) installation file. We all have never entered any serial and it
works here now for over 3 years.
:-)
What kind of FTP server is it? Providing you haven't wiped it
yet you may be able to recover the accounts. For example,
serv-u stores it's passwords in an INI file, when you
upgrade, you just make backup of the old dir and copy the INI
file into the new dir and presto! it works.
Thias
Rebuilding is simple.. Wipe the drives and start from scratch..
Also with installed rootkit changed admin password and so on?
The previuos admin of this server is not more disponible. The person who
contacted me has nearly no knowledge what was running on this machine. Not
to talk about
Thanks for alle answers,
I've found CainAbel very usefull.
http://www.oxid.it/cain.html
It can do a lot of things I need in this days.
Markus
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Hi
I have to rebuild a
compromised server (was not under my control before :-)
There are out
several webcams all with their own ftp logins connecting to this
server.
I have no
information about the preliminarily existing logins
(username/password)
The only thing I
immagine I can do
expire
date in the next days.
regards
Markus Gufler
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
Can anyone advise on how to change the date format for the
summary page of the webmail interface - version 8?
No.
As I know the mm/dd/yy date format is hardcoded in the web messaging
service.
Markus
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
After spending time playing 20 questions I
find she puts her email address on just about every web page
she goes to! The end result was I gave her a new email
address and a few instructions on what not to do with it.
Congratulations, now you have a great new spamtrap address. ;-)
Markus
Thanks for the script.
Maybe you can use also our free tool ICTCleaner
www.zcom.it/decludeupdater/ictcleaner.zip
You can specify in a ini-file a list of folders and which file extensions
should be deleted after xx days.
Markus
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
Hallo Martin,
spam problems
I can strongly consider www.declude.com
It resolves spam/virus problems and can also help if your Imail queue is too
long.
performance problems
What type of problems?
How much messages/day? How much domains? How you've configured your
There was some questions about Imrtg and why it will return only 0 as
result.
Note that Imrtg per default expects as log-source the SYSMMDD.txt files.
This can be changed using the /O switch.
See also: imrtg.exe /?
Parameter for iMRTG:
imrtg [path] [/{R,L,P,F,R,C,O}] [/H:hostip]
I had to use MRTG version 2.9.17 (I believe) to get IMRTG to
work. Using the latest versions would pull the same results
that you are experiencing.
We've had other problems with MRTG versions above 2.9.17 and so we've never
updated. I can confirm that IMrtg works fine with MRTG ver 2.9.17
Is it possible with IMail 7.xx to do ETRN for a customer who
does not have a static IP address. If not, are there any
other store--forward alternatives that would be usable with
a customer using Exchange behind a dynamic IP address?
Theoretically it should be possible if you write a
the scenario
would be;
IMail server: Domain all users
Exchange server: domain, all users, and pullmail set to run
by batch file
DNS: IMail as MX
Correct.
Keep in mind that if you run the batch file to often it can happen that the
second instance begin the download of messages that the
Title: VetoMail message from [EMAIL PROTECTED]
Hi Kempt,
5 problems:
Vetomail itself is listed in a spam blacklist
(FIVETEN-SPAMSUP)
The MTA sending out the vetomail confirmation
requests has no valid MAX or A records
The MTA sending out
the vetomail confirmation
It may be that the client side is indeed issuing the close
command, because it is overwhelmed.
Have you tried running a packet sniffer on the server when
doing this, to prove or disprove whether or not the remote
side is closing the connection?
Not yet.
But making a ping test as
There is a language file having around 1000 lines in the form
Variablename1=english text
Variablename2=other english text
Now you can translate this file (disponible in english, spanisch, german,
...) in whatever language you want.
Maybe you can ask IPSwitch for a good price if you provide them
Yeah the trouble is finding someone who can do the
translation. There must be someone out there who can provide
me with Swedish KillerWebmail pages.
I think best translations can made someone with Swedish as his mothers
language.
I also need Spanish and German! :-(
They are already
what is all this send error 10054 mean?
10054 means that the remote mailserver disconnected. They
are connecting and then quickly disconnecting.
Scott,
As I've seen this is one posibility. But it's also the case when the Imail
server only means that the remote mailserver disconnected
IMRTG Works very well for us!
If you want I can send you off list some examples how IMRTG-Diagrams looks
like.
They are very usefull to see what's going on on your server. Local delivered
SMTP messages. Relayed Messages, successfull POP3-Connections,
POP3-failures. All this in the familiar MRTG
Any ideea about changing an TCP/IP timeouts to put a bigger
value somewhere and to solve the problem... Some special
registry values for slow (bad quality) connections ...
Hi Dan
I've similar problems if the client connects over a relative slow dialup
line (64k) that is under heavy trffic
We have just released a couple of patches that are available
on our patches and upgrades page:
...
IMail Server 7.15 Hotfix 3
Fixes ...
Wow! - A patch for an old Imail version.
I have installed it 10 hours ago. Until now no problems.
Thanks
Markus
To Unsubscribe:
Some users reported us, that certain file attachments can not be
downloaded, simply because there is no link below the message body.
I've isolated such a message to one of our test accounts and can see a
!--[if.IMAIL gte mso 10] on the top of the site but no link below
the message. In the inbox
10:03 08:54 SMTPD(0BB40074) send error 10054
10:03 08:54 SMTPD(0BB40074) send error 10054
There are tons of these entries in my log. The owner of that
IP just called me to complain.
Can you test if the delay time between your server and this IP is
abnormal long?
I have the same
First thing I look at is the NIC
configuration and drivers..Make sure all power management for
the NIC(s) is disabled. Make sure you are running a Server
class NIC..
Our current NIC is a onboard Intel Pro 100 VE chip but we've also tried
other network cards.
I've read the KB articles
The procedure is for (HKSI-) KillerWebMail. I do not know
whether this has changed in the latest version. For the
calendar, look for the file called TopMenu.html. The order of
the date format is given by the arrangement of three select-
elements (day, month, year). This order can be
I've also tried to find a solution to this problem. It would
appear we're marginalised on this topic. The only way I can
see how to do this would be to implement JavaScript in the
templates but my JS is not good. A simple entry in the config
would be really useful - Ipswitch please add
The AV notification actions are
worse than the original infection.
I'm very happy with the solution that Declude.Virus provide.
It's not only possible to mark certain virus/worm names as forging the
sender address, but it's also possible to prevent notifications for
certain virus/worm names.
Oops: hit [ctrl]+[enter] ;-)
The AV notification actions are
worse than the original infection.
I'm very happy with the solution that Declude.Virus provides. It's not
only possible to mark certain virus/worm names as forging the sender
address, but it's also possible to prevent notifications
We use the declude anti-virus system but I can't find
instructions on how to do as you suggested in the config
file. Could you point me in the right direction on where to
find the information on turning off the notifications message
as well as how to not send if the viruses are
Win2k, latest SP, Imail 7.15.
Markus Gufler
20030806 081248 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
http://www.comput.info/index.asp POST /login.cgi HTTP/1.1.
20030806 081249 Info - ip.ad.dr.es Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
http
Maybe it's not a complete replacement for the entire fetchmail
functionality but pullmail.exe probably it's what you search.
http://www.swsoft.co.uk/index.asp?page=freesoftware
There are also other commercial Pop-Connector solutions.
Markus
-Original Message-
From: [EMAIL
Just in case anyone is contemplating purchasing IPSwitch
product through
CDW, let me detail what I have been going through with them:
Scott,
thank you for this information!
Can I use your success story when I contact the first time CDW to ask
if they can ship to Italy? ;-)
Even if you
H have a customer that wants so set up a rule to delete the
word sex, but not have Middlesex deleted...
Suggestions
Mike,
First of all I'll suggest to never take any action (delete, hold,
routeto or whatelse) based on a single test, rule or keyword.
Declude.Junkmails weighting system
In the Exhange System Manager you can see under SERVER servername
Protocol SMTP standard virtual SMTP server queue the different
message queues. Unfortunately Exchange is very very unflexible and not
admin-friendly in this things. I've had a lot of trouble in the last
days with messages
WEIGHT10 99.63% [FP:~1%]
WEIGHT20 98.48% [FP:~5%]
SPAMCHK 95.50% [FP:~50%]
SNIFFER 94.98% [FP:~2%]
CYBERSITTER 94.06% [FP:~5%]
...
(for example, the false positive rates for SPAMCHK, SNIFFER, and
CYBERSITTER are
Hi Andrey,
we've implemented such a test in SpamChk, an external Test for Declude
Junkmail. There are two different test for less and more then 10 spaces.
Some spaces can occur sometime in real messages, but spammers try to hide a
ID at the end of the subject line so if there are (a lot) more
I've 2 questions about imail settings to reduce problems with repeatedly
retransmitted large mails:
(we use Imail v7.13 on w2k server)
1.) What changes to the default value of queue timer and nr of tries are
recommended? At the moment we use 30 minutes and 100 tries as described
in the Imail KB
On IMGate, I run 2 hours max queue lifetime, with a delivery delay
warning at 1 hour. I also truncate the returned message to 5 Kb.
Your right, our 48hour+setting is 2 years old. I followed only
Ipswitch's considerations.
But before we reduce the max queue lifetime we have to change our last
I'm not sure if this is per-user-self-config-frontend is really needed
for declude.
Our users are very happy when we try to find a good and reliable
configuration and keep them up to date. (spammers don't sleep)
None of our clients know what are DNS-Tests, Open-Relay-Databases and so
on. Wich
in the log files, look for the SMTPD lines, and
09:30 02:39 SMTPD(D61A0146) [10.0.0.109] connect 64.83.222.35
port 41626
your ip remote ip
remote port
That's clear, but what if my Log file has a lot of this lines (~ 500 msg
/ hour)
There
I've seen this, an Exchange server in London would could to
an IMGate in
LA, 3000 times/hour, but never send any mail.
No, the 500 msg/hour are a normal value for this daytime.
hmm, the envelope info you are looking for should be
logged before the
DATA of the body is received. So
tail -f filename
will allow to follow the end of the sysMMYY.txt log file in real
time. Leave a big command window open, with smallist font,
OK, done. It seems very useful, BUT:
tailing my declude log files I can see in real-time what happens.
The same command on the imail log files shows
101 - 149 of 149 matches
Mail list logo
