Re: [IMail Forum] OT: Windows DNS and how to Limit (not remove) recursion

2006-03-16 Thread R. Scott Perry
The bind 9 windows port is the only one of interest since it's not obsolete. But if BIND 9 is seriously broken, and ISC says that BIND 4 and BIND 8 are still being supported, you try BIND 4 and BIND 8. Although less feature-rich and more prone to security issues, you would think they would

Re: [IMail Forum] OT: Windows DNS and how to Limit (not remove) recursion

2006-03-16 Thread R. Scott Perry
A year or so ago, I tried the then-current release versions of BIND 4 has been obsolete, dead for years As of less than a year ago, it was being offered by ISC as a release version. , BIND 8 same http://www.isc.org/ shows BIND 8.4.7 as being a release version. Talk to them about it

Re: [IMail Forum] OT: Windows DNS and how to Limit (not remove) recursion

2006-03-15 Thread R. Scott Perry
All these limitations of Win DNS are why BIND 9.3.2 is a better DNS product. BIND is great for Unix, but isn't ready for Windows yet. If faced with the choice, I would choose Microsoft DNS over BIND (in reality, my choice is paying for a good DNS program). A year or so ago, I tried the

Re: [IMail Forum] OT: dnsstuff.com down?

2006-01-14 Thread R. Scott Perry
I'm traveling but I tried getting to DNSStuff.com and all I get is the about page. Anyone know what's up? That was due to an odd combination of three related issues -- [1] our primary site was down for about 1-2 minutes, which [2] triggered our DNS failover to switch to the backup site, which

Re: [IMail Forum] Plugin to approve incoming mail

2005-12-19 Thread R. Scott Perry
There are some email servers (which I don't know) that automatically can send back an email to the sender, asking the sender to authenticate himself by clicking on a link in the message or by simply replying to the message. Ah, it sounds like someone wanted me to post again! :) Top 10

Re: [IMail Forum] SORBS Blacklist

2005-11-02 Thread R. Scott Perry
We were listed at SORBS many months ago, for some completely unexpected and unknown reason (we don't send spam). FYI, there is no one SORBS spam databases -- they have a number of different spam databases. That doesn't matter much, but can be helpful information in some cases. Numerous

Re: [IMail Forum] Imail forum posting problem

2005-08-03 Thread R. Scott Perry
I sent an almost empty message the other day and it posts here and I receive it thru the forum fine. Trying to post a longer message with the real issue I wanted to post and it never appears. Am using an Imail server to send to the forum and it reports the message was sent and accepted by

Re: [IMail Forum] Suspicious Domain

2005-07-19 Thread R. Scott Perry
* **ms-smtp-03.rdc-kc.rr.com* [24.94.166.129] Does anyone have any info on this domain ? rr.com is RoadRunner, a very popular ISP (cable) in the United States. A good trick when you don't know about a domain is to go to the website. In this case, the main domain is rr.com (if you aren't sure

Re: [IMail Forum] Declude - the way to go?

2005-07-13 Thread R. Scott Perry
We have used the Declude SPAM and Virus products with Imail for many years and are very happy with it. Their support has been excellent as well (especially when Scott was still around). It is well worth the money. I haven't disappeared completely. :) -Scott

Re: [IMail Forum] Spam black lists not available

2005-07-08 Thread R. Scott Perry
Do you really expect http://mail.google.com to go to the Google website? No. What I expect is a legitimate service be somehow available for confirmation and correction. Yes. But again, you're saying that you should be able to E-mail [EMAIL PROTECTED] or go to the website mail.google.com.

Re: [IMail Forum] worldnic dns failures?

2005-07-08 Thread R. Scott Perry
Is anyone else bouncing email because the worldnic dns servers aren't responding? They are FUBAR, and have been for several days. FYI, Worldnic was apparently bought out by Network Solutions. Their DNS servers for the past 4 days or so have apparently been acting in a way similar to lame

Re: [IMail Forum] Spam black lists not available

2005-07-07 Thread R. Scott Perry
I cannot get to ybl.megacity.org megacity.org is a blog spammers.v6net.org appears to be a spam site, or it has been hijacked. None of those are websites of spam databases. I think you're confusing the base zone of a spam database (the piece of information that your anti-spam software

Re: [IMail Forum] Spam black lists not available

2005-07-07 Thread R. Scott Perry
None of those are websites of spam databases. ... You may want to check out http://www.declude.com/junkmail/support/ip4r.htm which lists the websites for the spam databases. Thank you for your reply. But you did not read it!!! Please re-read it. Do you really expect http://mail.google.com

Re: [IMail Forum] WAY OT: Declude lists

2005-07-06 Thread R. Scott Perry
Scott - this is all I am seeing, the outbound message, in all of my logs for that day. What is troubling is they are telling me they are getting an undeliverable when trying to e-mail me. I even checked my SMTP control access list to see if somehow I blocked them by mistake. Why would they

Re: [IMail Forum] WAY OT: Declude lists

2005-07-05 Thread R. Scott Perry
I see my post in the mail archive, but I never got it. Have you checked your mailserver to see if there were connection attempts from 63.246.13.90 (the IP that the Declude.JunkMail list comes from) on June 30 (the day that you posted to the list)? That list has been very quiet for the past

Re: [IMail Forum] OT: mx record is there, yet isn't

2005-07-01 Thread R. Scott Perry
However, the thing that keeps bothering me now is why DNS Report only expects a root MX record, and not a named MX record. If this is just a matter of convention, as I always believed, then they should be able to handle it both ways. If, however, I'm just ignorant and the root record is

Re: [IMail Forum] Changing the HELO name

2005-06-29 Thread R. Scott Perry
I am using Imail 6.06 220 X1 Go ahead send the message How do I fix this? I see nothing in the Imail Administrator that allows one to change the HELO name or greeting. Unfortunately, IMail v6.06 doesn't have an option to send RFC-compliant greetings. I believe that issue was fixed in v7.

Re: [IMail Forum] How to deal with error message Error scanning file, treated as infected, Return code = 14 ?

2005-06-25 Thread R. Scott Perry
I know this mail had been deleted; I’m worrying about wrong deletion. How can I remain the error scanned files so that I could recheck? I'm guessing the Redirect box would let you send the E-mails to a special account (virus@ perhaps). But YOU MUST DISABLE THE 'REPAIR INFECTED FILES'

Re: [IMail Forum] New hardware firewall - are my settings OK?

2005-05-28 Thread R. Scott Perry
I just put our imail server behind a hardware firewall - Firebox. Is that the Watchguard Firebox? If so, make sure not to enable the DNS Proxy. It's has a serious flaw in it, that they won't bother to fix -- if you use it, it will occasionally drop DNS packets. Fortunately, though, if

Re: [IMail Forum] test

2005-05-26 Thread R. Scott Perry
ping pong. :) -Scott To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/

Re: [IMail Forum] SPF Settings and Questions

2005-05-24 Thread R. Scott Perry
2) Also, scenerio: John Doe from Widget.Com is a vendor we deal with. During the day, he sends his email from work at widget.com. At night, he also conducts business from his house using his widget.com from address, but must authenticate through his ISP's server rather than widget.com. Will

Re: [IMail Forum] Expiring AV - Mandatory upgrade to ICS

2005-05-10 Thread R. Scott Perry
So you just admitted on an open publicly available forum that you are violating the License agreement? Symantec expects and should be paid for providing updated definitions. To give him the benefit of the doubt he didn't mention the state of his Symantec licensing. My understanding had

Re: [IMail Forum] How to check for no PTR

2005-05-05 Thread R. Scott Perry
IMail (8.15) appears not to put the PTR results in the normal place. The two examples below show a Recieved header from a sender with valid DNS entries and another with totally bogus information. I can't tell them apart except by running a dig -x on each. Does IMail do ANYTHING with PTR? How can

Re: [IMail Forum] disconcerting spam header info

2005-04-10 Thread R. Scott Perry
I got some spam yesterday and what bothers me is that it looks like our own server sent it? Received: from 43.Red-83-43-13.pooles.rima-tde.net [83.43.13.43] by PINE.MATROSITY.COM (SMTPD32-8.14) id A93E19B400A4; Sat, 09 Apr 2005 17:29:34 -0400 Received: from (65.112.155.254) (port=9021

Re: [IMail Forum] disconcerting spam header info

2005-04-10 Thread R. Scott Perry
I'm reasonably sure that the server is ok because I reviewed the logs and there is no abnormal traffic outbound. I was wondering if one of our customers' computers could be a bot and that was what was sending out the email? No. The IP they claimed the spam was received from was the IP of your

Re: [IMail Forum] Chinese list spam

2005-03-29 Thread Scott Perry
Is anyone else getting these? Yes. I believe the reason is: From: =?Big5?B?sN+kQKSjp3SovrtHvq8=?= johnson For many years, an occasional spam would make it to the IMail Forum because it was sent with a line From: administrator (with no @). My guess is that when IMail checks to see if someone

Re: [IMail Forum] probability

2005-03-29 Thread Scott Perry
Can someone give me a quick lesson on how to adjust the good/spam numbers in the probability test? I know HOW to adjust the numbers, but I'm fuzzy on what to adjust them to. I've been using a ratio of 1:2 for okay words and upwards to 1:9 for undesired words. You shouldn't. The whole idea

Re: [IMail Forum] probability

2005-03-29 Thread Scott Perry
1. A few months ago, several good messages were being tagged with the STATISTIC flag. Many three-letter words (such as 'and' 'the' 'nor' 'but') had a high 'spam' number (eg 0,57). That's normal, actually. It just means that an E-mail with the word and has 57% chance of being spam (all other

RE: [IMail Forum] probability

2005-03-29 Thread Scott Perry
| Without being fed data for individual users, Bayesian filtering becomes | less effective (how much less effective depends on how similar your users | are; a small business will see better server-wide results than an ISP, for | example), and that is most likely just a limitation you would need

RE: [IMail Forum] reverse DNS

2005-03-24 Thread Scott Perry
Yes, it is possible to have a legitimate mail server set up on an ADSL line with a subscriber network RDNS. It is also theoretically possible to host a legitimate mail server on a dial-up connection, on an open proxy, on a server with an open relay or on an IP range in China that has been

Re: [IMail Forum] reverse DNS

2005-03-24 Thread Scott Perry
Is there an RFC declaring what type of connection sending hosts should communicate via SMTP? I'm sure there is open proxy/zombie using a SDSL or T1 line somewhere on the internet. Indeed, even computers at the pentagon have been infected. I think the biggest problem is that a very good spam

Re: [IMail Forum] OT: DNS question...

2005-03-24 Thread Scott Perry
I've noticed that some email servers are having a hard time looking up our reverse dns pointers, so i started looking into why this is. When i used dnsstuff.com, its output shows the following for one of the ip addresses on one of my email servers: How I am searching: Asking

RE: [IMail Forum] reverse DNS

2005-03-24 Thread Scott Perry
In the end, you get what you pay for. Those running ADSL will have to expect that some of their mail will get blocked, just as they have to expect that support will likely not be as good as they would get with a more reliable circuit. And anyone that has a mailserver outside of a datacenter has

RE: [IMail Forum] reverse DNS

2005-03-24 Thread Scott Perry
I never recommended wholesale blocking of all DSL lines. In fact, I even stated that I myself used an SDSL line! See Mike K's well written response to your post. He hit the nail on the head. You are putting words in my mouth that I never used, nor would I use. This is about RDNS/IP issues, not

RE: [IMail Forum] reverse DNS

2005-03-24 Thread Scott Perry
If you use the DSL providers SMTP service (free with any decent DSL connection) for outgoing mail isn't the problem solved? The problem is what you and the 2 others aren't saying: you're avoiding saying I do not want to receive E-mail from low cost business class Internet connections. JUST

Re: [IMail Forum] reverse DNS

2005-03-23 Thread Scott Perry
A message from one of my users was rejected. The 550 reply included a link. The page gives this as the explanation: Possible bogus mail. The IP address of the server that connected directly to our mail server had a reverse DNS lookup that resolved to a dialup or DSL network. Legitimate mail

Re: [IMail Forum] reverse DNS

2005-03-23 Thread Scott Perry
They are confused. They are saying that the reverse DNS of your IP resolves to a dialup or DSL network -- but they almost certainly can't know that. Of course, they can. Stop the FUD and lies when your bogus ideology isn't adhered to. I was afraid I was going to have to keep the FUD, lies,

Re: [IMail Forum] reverse DNS

2005-03-23 Thread Scott Perry
65.81.91.10 is the outbound address. .11 is inbound. Also, these are static. Should static addresses be an exception? We aren't acting shifty like dynamic addresses. That's exactly the problem. :) Any spam database that claims to block dynamic IPs (which is what this one is apparently

Re: [IMail Forum] OT: Need a Recommendation on a Really Good Firewall

2005-03-23 Thread Scott Perry
I'd look into the Watchguard products, the X class, not the V class products. FYI, as several people have mentioned the Watchguard, do not even *THINK* about using their DNS Proxy capability. It is seriously flawed (dropping DNS packets), and the Watchguard people aren't interested in fixing

Re: [IMail Forum] PTR problems again

2005-03-18 Thread Scott Perry
I have a customer who swears we have our reverse DNS set up wrong.at dnsstuff.com we pass every test...except the DNS timing test. If you put our customers domain (aclc.org) into the box and select PTR it says our DNS server reports no PTR records (even though it is authoritive for our

Re: [IMail Forum] Have I been owned?

2005-03-17 Thread Scott Perry
I recently received an abuse complaint, concerning a message sent from one of our iMail servers. This is very strange... One question: Was there a Received: header added by the complainer's mailserver (or another mailserver they trust), that has your IP as the source of the E-mail? If not,

RE: [IMail Forum] Imail seems to pick the wrong IP address?

2005-03-09 Thread Scott Perry
So it's definitely because the other provider has screwed up their DNS, then? mr burnsEcellent/mr burns. Correct. I thought about dropping an entry into the hosts file, but I would decline to fiddle around with that sort of thing just because somme company's DNS admin can't be bothered to

Re: [IMail Forum] Unexpected spam filtering

2005-02-26 Thread Scott Perry
The Message-ID: header was not RFC-compliant. Message-Id: [EMAIL PROTECTED] ABNF extracted from RFC 2822 Internet Message Format: Actually, RFC822 is still the official standard (per http://www.rfc-editor.org/rfcxx00.html). RFC822 has: msg-id = addr-spec ; Unique

Re: [IMail Forum] Windows TCP/IP Filtering

2005-02-25 Thread Scott Perry
I believe you need to open the ports above 1025 to initiate the outgoing connections. I am sure someone will correct me if I am wrong :-). This is a fairly common misconception. You *NEVER* need to (or should!) specify in a firewall (hardware or software) that ports above 1025 need to be open.

Re: [IMail Forum] Unexpected spam filtering

2005-02-25 Thread Scott Perry
X-Spam-Tests-Failed: BADHEADERS, ROUTING, WEIGHT5, WEIGHT5r [5] Is there more detail in the Declude logs as to which BADHEADERS its complaining about? I didn't see anything strange. The Message-ID: header was not RFC-compliant. What does ROUTING mean, is it a complaint about the localhost

Re: [IMail Forum] SPF records

2005-02-17 Thread R. Scott Perry
My understanding of SPF is, you could use it as part of your spam filtering process under the following conditions... please correct me if I'm wrong: 1. You have to have the software to support it (iMail does not have the ability to check SPF records for inbound mail) To publish an SPF record,

Re: [IMail Forum] OT: DNS Question

2005-02-16 Thread R. Scott Perry
Thank you Scott, let me run this by you just to make sure I understand what you saidis the following correct? Boral.com MX needs to be changed to gateway.boral.com gateway.boral.com host record needs to point to 207.100.51.6 (mail frontier external IP) mail.boral.com host record needs to

RE: [IMail Forum] Recommended DNS Blacklists

2005-02-16 Thread R. Scott Perry
We are already using Declude Junkmail, but we were going to also use the I-mail AntiSpam along with it. Any reason why not to use the DNS Blacklist feature on the I-mail Server? Have you seen a lot of problems with it? Since you already have Declude JunkMail, I would urge you not to use DNS

Re: [IMail Forum] OT: DNS Question

2005-02-15 Thread R. Scott Perry
When a recipient server does a reverse lookup, will it look at all entries, or does it only take the first one? The real question here is why do you have multiple reverse DNS entries? The answer to your question, though, is that most anti-spam programs (and most *any* programs that look at

Re: [IMail Forum] OT: DNS Question

2005-02-15 Thread R. Scott Perry
Thanks for the clarification, here's the setup, forgive me if this is convoluted. Inbound mail to mail.boral.com comes into 207.100.51.6 (mailfrontier gateway - no outbound capabilities). It then passes to an internal Exchange server. Outbound mail comes from Exchange, to IMail

Re: [IMail Forum] MyMail server is listed on spam list!!!

2005-02-14 Thread R. Scott Perry
I did some digging and found some info for you. Check out the evidence file near the bottom of this link: http://dnsbl.net.au/lookup/?213.154.55.109 Received: from mycommail.com (mail.mycommail.com [213.154.55.109]) by mx1.reynolds.net.au (8.12.11/8.12.11) with ESMTP id j14MbMtf017528

Re: [IMail Forum] Imail MX fail to connect with AV

2005-02-11 Thread R. Scott Perry
Running Imail 8.05 on Windows 2003 with no problems. Trying to test Network Associates Anti Virus V8.0i What exactly is that program? From the error you get, it sounds like a desktop virus scanner (one that intercepts POP3 and/or SMTP to scan personal E-mails). You should make sure that you

Re: [IMail Forum] Block email with specific country content

2005-02-10 Thread R. Scott Perry
I'm running Imail server with active spam filter. Since a couple of days, we receice eMails with russian language from different sources. How can I (if possible) block emails where the language is russian or asian? So far the emails pass the spam filter. If you are using Declude JunkMail, you

RE: [IMail Forum] SPAM list problems caused by Imail

2005-02-06 Thread R. Scott Perry
I had some issues with my Imail using an old string in it's HELO message. Rather than bother with finding the correct spot in the registry or wherever, I just put the string I wanted into the IMail Admin, SMTP, Advanced page. So, if you telnet to mail.visioncomm.net, mail.kitepilot.net,

Re: [IMail Forum] SPAM list problems caused by Imail

2005-02-04 Thread R. Scott Perry
Received the following explanation from the admins of cbl.abuseat.org. IPSwitch Imail and WorkGroupMail servers, for example, attempts to simulate being different mail servers, one for each customer domain. In doing so, it copies the domain name through as the HELO domain. On the other

RE: [IMail Forum] port-map running as a service

2005-02-03 Thread R. Scott Perry
Very nice post, but But what? :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out

Re: [IMail Forum] Security experts are predicting email meltdown

2005-02-03 Thread R. Scott Perry
Security experts are predicting email meltdown now that spammers have developed a way of sending junk mail via an ISP's own mail server. They've been predicting for years that spammers will cause people to stop using E-mail. It hasn't happened yet, nor will it. E-mail is just too important to

RE: [IMail Forum] port-map running as a service

2005-02-03 Thread R. Scott Perry
Of R. Scott Perry Sent: Thursday, February 03, 2005 7:00 AM To: IMail_Forum@list.ipswitch.com Subject: RE: [IMail Forum] port-map running as a service Very nice post, but But what? :) -Scott --- Declude JunkMail

Re: [IMail Forum] cbl.abuseat.org listing

2005-02-02 Thread R. Scott Perry
192.168.0.2 isn't telling anybody anything. That's an unroutable IP, like 172.0.0.0/12 and 10.0.0.0/8. I understand this. Most other lists I'm on (qmail, sendmail, etc.) use internal IPs for example purposes. Also, I don't know if anyone knows, but the uses of the domain name

Re: [IMail Forum] Store and forward

2005-02-02 Thread R. Scott Perry
I'm trying to test store and forward in accordance with the KB articles. BUT... It wont work right! Anyone have any ideas? On 66.221.63.85, I setup the host file with: 69.93.89.101mail.frumchat.com Here, I believe you'll want: 69.93.89.101frumchat.com IMail will look at the domain that

Re: [IMail Forum] conMMDD.log files

2005-02-01 Thread R. Scott Perry
I have log files called conMMDD.log that are showing up in my Imail\Spool folder. I'm not sure where these are coming from and I cannot find anywhere that tells to send this log file to the Spool folder. Those are from our Declude Confirm product. I'm assuming these log files are generated by

RE: [IMail Forum] conMMDD.log files

2005-02-01 Thread R. Scott Perry
I have log files called conMMDD.log that are showing up in my Imail\Spool folder. I'm not sure where these are coming from and I cannot find anywhere that tells to send this log file to the Spool folder. Those are from our Declude Confirm product. So are those log files associated with Declude

RE: [IMail Forum] Blank e-mails

2005-01-28 Thread R. Scott Perry
What I do not understand is that I have our IMail server set to do a reverse lookup. If there are no from, to, or subject fields, what is the IMail server using for a reverse lookup? Reverse DNS works by turning an IP address into a hostname. Every E-mail will always have an IP address

Re: [IMail Forum] Orphaned files in spool directory

2005-01-27 Thread R. Scott Perry
Since a few months, IMail keeps orphaning mails in the spool directory and sending mails to the postmaster: Delivery Failure - Orphaned files in spool directory This means that mails are dropped without the user being notified, involving the postmaster to take corrective actions. An orphaned

Re: [IMail Forum] Null Headers, Null senders, Null bodies.

2005-01-27 Thread R. Scott Perry
Null Headers, Null senders, Null bodies, or just entire blank messages. How can I stop them from getting through Imail? In most cases, these are due to AV programs being run improperly on the IMail server. If you have an on-access virus scanner running on the IMail server, it must be set not

RE: [IMail Forum] SpamCannibal (was another topic)

2005-01-27 Thread R. Scott Perry
The only time that any legitimate traffic should flow through our secondary MX is when the primary is down completely. never, ever ??? not very humble, you IMHO In practice, simply not true, so don't bet any money on it. You are correct -- it the *remote* mailserver has a temporary problem with

RE: [IMail Forum] SpamCannibal (was another topic)

2005-01-27 Thread R. Scott Perry
You are correct -- it the *remote* mailserver has a temporary problem with their Internet connection, the connection to the primary may fail, and the mailserver will contact the backup. So legitimate traffic definitely can go to the backup. Exactly. That is why I am putting this on a server

RE: [IMail Forum] SpamCannibal (was another topic)

2005-01-27 Thread R. Scott Perry
If that temporary problem lasts a few extra seconds, the attempt to the 2nd mailserver can fail too, causing the remote mailserver to hit the 3rd mailserver. If I had two different servers at two different locations (and feeds) both tank simultaneously, I'd probably have more problems to

RE: [IMail Forum] SpamCannibal (was another topic)

2005-01-27 Thread R. Scott Perry
FWIW, I managed to write one rule in the past year that backfired on me by deleting anything with Cialis in the Subject: line. As it turns out, one of our subscribers receives a newsletter aimed at soCIALISts. I wonder how many of you will get this message trapped? :-) ... and specialist, which

Re: [IMail Forum] Files in the Spool directory

2005-01-26 Thread R. Scott Perry
If the MTA determines that its garbage it can send a 5xx status code to reject it. But can you do that from a delivery application? I've searched the docs if there are any additional parameters you can use when calling SMTP32.exe. IMail doesn't allow third party programs to intercept the

Re: [IMail Forum] 503 Bad Sequence errors

2005-01-26 Thread R. Scott Perry
I got a report of a 503 Bad Sequence bounce today from a customer and then searched my logs and found many others in there as well. I'm not sure what exactly is going on. It appears that all or most of them occur immediately after the MAIL FROM is issued by my server, and the receiving

Re: [IMail Forum] SPAM List Problem

2005-01-25 Thread R. Scott Perry
I disagree. if the sender's isp or company is blacklisted then they should be rejected. we do delete the email since it's 99.999% a bad address anyway. if we don't do this then people wont have a strong reason to not be on a blacklist. FWIW, just this morning I received an E-mail from an AOL

Re: [IMail Forum] SPAM List Problem

2005-01-24 Thread R. Scott Perry
I too had a nasty surprise - all mail deleted! A hurried look at the logs told me why; v6net. That's why almost 5 years ago I came up with the weighting system for Declude JunkMail. A problem such as a spam test dying in such a poor manner can cause problems, but it certainly shouldn't cause

Re: [IMail Forum] SPAM List Problem

2005-01-24 Thread R. Scott Perry
In other words, in my opinion, no E-mail should ever be deleted based on the results of a single spam test. I haven't yet seen a spam test with a low enough false positive rate that E-mail should be deleted based on it. Let me also add: be *VERY* careful in trusting people to delete your

Re: [IMail Forum] Blocking SMTP Connections on DNS Name

2005-01-21 Thread R. Scott Perry
Is it possible to have IMail v8.14 block incoming SMTP connections based on a DNS name instead of an IP address? I have a list of DNS names from other internet providers that should not be running SMTP servers. I currently have this list in one of our other servers and is refused a ton

Re: [IMail Forum] Blocking SMTP Connections on DNS Name

2005-01-21 Thread R. Scott Perry
Is it possible to have IMail v8.14 block incoming SMTP connections based on a DNS name instead of an IP address? That can't be done with IMail alone -- you would need a third-party addon (such as our Declude JunkMail Pro) to do that. I'm assuming Declude adds into IMail as a delivery

RE: [IMail Forum] New virus??

2005-01-20 Thread R. Scott Perry
Save the sales pitch. Been there, done them, but that's not what I asked. I'm just checking on a possible undiscovered virus/variant. I have submitted the email to Clam and McAfee with no luck yet of identifying it. It isn't a sales pitch. Your AV software is broken (in other words, it can

RE: [IMail Forum] New virus??

2005-01-20 Thread R. Scott Perry
This may have been a wild goose chase going after a broken virus. It is almost certainly not a broken virus. Specifically, you know that it is an encrypted .ZIP file -- and virtually anything that would show you that it is an encrypted .ZIP file would also show you that the .ZIP file was

Re: [IMail Forum] Blocking Email by Application (kinda OT)

2005-01-20 Thread R. Scott Perry
We have a customer that ... doesn't want to purchase a CRM app because he was told that mail servers can block emails sent from app... He said he was also told there is some list out there that lists applications known to be used by spammers so people can block mail from these apps I just

Re: [IMail Forum] Blocking IPs with SMTP Control Access

2005-01-20 Thread R. Scott Perry
I've got a number of IP address ranges blocked in my SMTP control access list. I will be putting an email gateway in place soon that will be the first place email arrives, and it will then pass email along to my Imail server. If I do that, will the SMTP control access list still work, or

Re: [IMail Forum] Blocking IPs with SMTP Control Access

2005-01-20 Thread R. Scott Perry
What third party tools out there might let me do this? The software I'm setting up on the gateway will not let me block IP ranges, only domains and email addresses (which is somewhat useless to me). Being able to block whole IP ranges has proven rather useful in reducing spam in our domain.

Re: [IMail Forum] OT - DNS hosting providers

2005-01-13 Thread R. Scott Perry
Has anybody used DNSMadeEasy.com? We have all of our corporate stuff hosted through UltraDNS - and love them. But they are a little higher in cost. I have some personal stuff with DNSMadeEasy.com and it seems fine. The DNS for www.dnsstuff.com is hosted through dnsmadeeasy.com. I've used

RE: [IMail Forum] OT - DNS hosting providers

2005-01-12 Thread R. Scott Perry
Has anybody used DNSMadeEasy.com? We have all of our corporate stuff hosted through UltraDNS - and love them. But they are a little higher in cost. I have some personal stuff with DNSMadeEasy.com and it seems fine. The DNS for www.dnsstuff.com is hosted through dnsmadeeasy.com. UltraDNS is as

Re: [IMail Forum] Spam, Ham, Politics Lingere

2005-01-11 Thread R. Scott Perry
I am just curious if anyone else has noticed this, what I should make of it, and if anything can/should be done in regards to a rather curious trend I have noticed recently. I haven't noticed it, but haven't been looking for it either. I've noticed that a growing number of mailing lists are

Re: [IMail Forum] Personal note to R. Scott Perry

2005-01-08 Thread R. Scott Perry
I don't have your email address but since [at least] 6AM EST Jan 8, 2005, http:www.dnsreport.com has been serving [ERROR: Timed out getting NS data from parent server] instead of DNS Reports. Thanks for pointing that out -- it's working now. BIND hangs ever once in a while, and the site re-sets

Re: [IMail Forum] f-prot locks mail boxes

2005-01-07 Thread R. Scott Perry
I use f-prot on my server with iMAIL. f-prot works well but the realtime scanner sometimes locks mail boxes on occasion. When this happens the email client cannot get mail. And the web messaging can't retrieve mail either. You must disable F-Prot's RealTime Protector. It isn't designed to be

RE: [IMail Forum] Bounce Email Solution

2005-01-05 Thread R. Scott Perry
What is it called when a receiving mail server verifies the sender by checking the MAIL FROM account ... There isn't a standardized name for that type of test. ... are there issues with submailboxes? There shouldn't be. All they are going to check is to see whether or not the address exists --

RE: [IMail Forum] SonicWall NAT for port 587 to IMail

2004-12-30 Thread R. Scott Perry
While I don't have a SonicWall, it seems to me that any stateful inspection firewall would automatically remap the port outbound for the same connection, thereby maintaining the state of the connection. Correct. In fact, it *must* automatically re-map the port outbound. Why? Let's take a look

RE: [IMail Forum] Mail delivery problem

2004-12-29 Thread R. Scott Perry
Do you have virus scanning on the spool folder??? If you do maby your virus scanner is deleting the message before it can be delivered. But it s possible only when there is any virus. But it s not a virus. It s a genuine mail. That implies that you are using some sort of virus scanner that

Re: [IMail Forum] CN and KR Netblocks

2004-12-27 Thread R. Scott Perry
Does anyone have in the control smtp access file all of Korea and Chinese netblocks? If you're using Declude JunkMail Pro, and you have the geolocation set up, you can create a filter that will block all Korean and Chinese netblocks (with two lines, COUNTRIES 0 CONTAINS kr and COUNTRIES 0

Re: [IMail Forum] Services like SpamLion

2004-12-22 Thread R. Scott Perry
Below is the response that I sent him as to why a service like that is a bad idea. What say you other Mail Admins? Your response is good. Mine is a bit simpler: Top 10 reasons why challenge/response (C/R) is bad: [1] You end up being a spammer (the majority of spam sent to you will result in

Re: [IMail Forum] [MailServer Notification]To recipient: Message matched eManager setting and action was taken.

2004-12-22 Thread R. Scott Perry
Recipient, Trend Micro Anti-spam has detected a sensitive e-mail. They really should change this to Recipient, please remember that when it comes time to choose anti-spam software, Trend Micro has a very, very poor option for you to choose. Let's see: [1] The From: address is broken (From:

Re: [IMail Forum] spamcop.net rbl

2004-12-21 Thread R. Scott Perry
The spam log, for example, shows: BLACKLIST: xx.xx.xxx.xx was found on blacklist spamcopy: *:bl.spamcop.net - Blocked - see http://www.spamcop.net/bl.shtml?xx.xx.xxx.xx failed 1 lf 14 checks - deleting. Why is it not actually deleting? Thanks! Is that *exactly* what it said? The grammar there

Re: [IMail Forum] fprot vs. clam

2004-12-18 Thread R. Scott Perry
Those hits need to be qualified as to exactly what they are. I'm really comparing system overhead here. Clam takes a big chunk out of the processor when it runs while f-prot barely even registers. Send out a 10K user newsletter and this becomes a problem. Interesting -- you started the thread

Re: [IMail Forum] new install of Declude of JunkMail

2004-12-17 Thread R. Scott Perry
We just installed Declude JunkMail. I am curious how much tweaking do I need to do the package? Currently we are using f-prot with it. FYI, Declude JunkMail and Declude Virus are two separate products (one detects spam, the other detects viruses). So if you are using F-Prot, you are using it

Re: [IMail Forum] fprot vs. clam

2004-12-17 Thread R. Scott Perry
Most of the additional positives are _probably_ phishing attempts. Clam is fairly aggressive at detecting phishing attempts, but FProt doesn't even try. ... because F-Prot is a virus scanner, not anti-spam. If that really is why ClamAV appeared to detect more viruses, this would definitely

RE: [IMail Forum] Anti-Spam

2004-12-16 Thread R. Scott Perry
Our company has been looking into purchasing a Spam Firewall (Email Gateway). I have researched Meridius, ProofPoint, and Vircom Modus Gate. I tried to get a sales person with barracuda networks to contact me for three weeks before giving up on them If that's the kind of company you want to

Re: [IMail Forum] PTR record for web servers

2004-12-16 Thread R. Scott Perry
In MS DNS we appear to have a pointer record for our web servers but when I do a lookup on them it says that we don't. Obviously we're missing something here and would appreciate your help. MS DNS is *HORRIBLE* when it comes to reverse DNS entries. It says it has the reverse DNS entries, even

Re: [IMail Forum] Anti-Spam (was:[MailServer Notification]To recipient: ...)

2004-12-16 Thread R. Scott Perry
The following mail was blocked since it contains sensitive content. Rule/Policy: Trend Micro Anti-spam Well, we definitely know of one program to rule out in this thread. :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail

RE: [IMail Forum] Imail running away with processor... whats up ?

2004-12-16 Thread R. Scott Perry
Thanks for all the quick responses... So here goes my best shot at answering all the questions in one whack. I noticed that Declude is running around 20-50% of CPU during peaks, but generally it is steady at 5% or so when it is being used. POPD32, and SMTPd32 both sit

  1   2   3   4   5   6   7   8   9   10   >