[Declude.JunkMail] Declude v1.35 virus not banning files

2002-01-29 Thread Todd Holt

I have updated to Declude 1.35 and my virus.cfg file contains the following
lines:

BANEXT  scr
BANEXT  pif
BANEXT  com
BANEXT  exe
BANEXT  vbs

However, when I send a message (from an outside account) containing a .exe
attachment.  The attachment is scanned, then sent to me normally.

Why is it not banned?

Todd

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] MISSING_REVERSE_DNS:Reverse DNS

2002-01-29 Thread R. Scott Perry


>Maybe I have a mistake in my configuratio, but every email that we scan
>contains this:
>
>X-RBL-Warning: This E-mail was sent from a mail server [No Reverse DNS] with
>no Reverse DNS Entry
>
>Am I missing something?

That would indicate a DNS problem, and likely will mean that none of the 
DNS-based spam tests are being run.

You should check to make sure that the first DNS server listed in the IMail 
SMTP settings is correct, and pointing to a valid DNS server.  Or, you can 
override the setting by adding a line "DNS 127.0.0.1" (replacing the 
127.0.0.1 with the IP of your DNS server) to force Declude JunkMail to use 
a different DNS server.
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] MISSING_REVERSE_DNS:Reverse DNS

2002-01-29 Thread Ed McNichols

Maybe I have a mistake in my configuratio, but every email that we scan
contains this:

X-RBL-Warning: This E-mail was sent from a mail server [No Reverse DNS] with
no Reverse DNS Entry

Am I missing something?

E


---
[This E-mail scanned for viruses by IAS, an Archiventure Company]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] Declude v1.35 released

2002-01-29 Thread R. Scott Perry

We have just released Declude v1.35.  It is a released version, and 
includes the following changes:

Declude Virus:  Extra check to make sure that only HTML files get pre-scanned,
Declude JunkMail:  Makes sure that "<>" can't fail the MAILFROM test,
Declude JunkMail:  Now lets you use variables with the SUBJECT action,
Declude JunkMail:  New %TESTSFAILED% variable shows which tests failed.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



DSN:Re: [Declude.JunkMail] ETRN

2002-01-29 Thread smb

Scott,

You have been looking at way too many e-mail headers :)

Stu


At 04:42 PM 01/29/2002 -0500, you wrote:
>
>>Date: Tue, 11 Dec 2001 15:54:09 -0500
>>
>>Do I need to subscribe to MAPS to get the Junkmail to work properly?
>
>Umm... if you didn't send this back in December, you may want to change the 
>clock on your desktop.
>  -Scott
>
>---
>[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
>
>---
>
>This E-mail came from the Declude.JunkMail mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail".  You can E-mail
>[EMAIL PROTECTED] for assistance.  You can visit our web
>site at http://www.declude.com .
>
>
-
CSOnline Technical Support hours - Monday thru Saturday 7am - 1am 
CSOnline Technical Support Numbers Seneca814-677-2447 
   Clarion   814-227-3638  
   Meadville 814-425-1696
   Parker724-399-1158   
http://www.csonline.net  http://www.cshowcase.com  http://www.learncenter.com  
-

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] ETRN

2002-01-29 Thread R. Scott Perry


>Date: Tue, 11 Dec 2001 15:54:09 -0500
>
>Do I need to subscribe to MAPS to get the Junkmail to work properly?

Umm... if you didn't send this back in December, you may want to change the 
clock on your desktop.
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] Spam Review Program

2002-01-29 Thread Grant Griffith

Love the program, how about a button that might delete all the files that
were moved to the Deleted folder?  I would say you would want to always have
to confirm this option, but it would save some time having to go out and
delete them.

Sincerely,
Grant Griffith, Vice President
EI8HT LEGS Web Management Co., Inc.
http://www.getafreewebsite.com
877-483-3393

||-Original Message-
||From: [EMAIL PROTECTED]
||[mailto:[EMAIL PROTECTED]]On Behalf Of Tom Schwarz
||Sent: Saturday, January 26, 2002 5:03 PM
||To: [EMAIL PROTECTED]
||Subject: RE: [Declude.JunkMail] Spam Review Program
||
||
||
||Yes  http://www.slsoft.com/spamreview.htm
||
||
||-Original Message-
||From: [EMAIL PROTECTED]
||[mailto:[EMAIL PROTECTED]]On Behalf Of andyb@thumpernet
||Sent: Saturday, January 26, 2002 4:00 PM
||To: Tom Schwarz
||Subject: Re: [Declude.JunkMail] Spam Review Program
||
||
||Hi,
||
||Has it been posted anywhere yet?
||
||Thanks,
||Andy Baldwin
||
||[EMAIL PROTECTED]
||http://www.thumpernet.com
||315-282-0020
||
||Saturday, January 26, 2002, 11:28:46 AM, you wrote:
||
||TS> I have received several replies.  If it's ok with Declude, I will post
||the
||TS> download address on this list.  If someone from Declude would reply to
||me I
||TS> would appreciate it.
||
||TS> This program will be Freeware (I hate spam) and will only be supported
||to
||TS> the extent that I have time to support it (I have a real job).  I will
||be
||TS> using it on a daily basis so I will be adding features and fixing bugs
||when
||TS> needed.  I will provide the source code to those that want
||it.  Test it
||TS> carefully yourself.  I will not be responsible for problems that may
||occur.
||
||
||TS> Program Notes:
||
||TS> This program is written in VB6.0.  You give it the path to your IMail
||spool
||TS> folder and it locates the spam email that is in hold by looking in the
||spam
||TS> folder under the spool folder.  ex.  "c:\imail\spool\spam".
||
||TS> A list of all the files in the spam hold folder come up in a list box.
||It
||TS> includes the name of the file, date, from address, to address.
||
||TS> Selecting an email in the list displays information in three
||boxes.  The
||TS> header, the declude warnings, and the body of the message.  You can
||click on
||TS> View HTML and view the body in a browser format.
||
||TS> You can click on "Move To Deleted" and the selected email is
||moved to a
||TS> deleted folder under the spam folder.  The selected email is removed
||from
||TS> the spam hold folder.
||
||TS> You can click on "Return To Que" and the email will be moved
||back to the
||TS> spool folder.  The selected email is removed from the spam
||hold folder.
||
||TS> A Refresh button let's you refresh the list.
||
||TS> Tom
||
||TS> ---
||TS> [This E-mail was scanned for viruses by Declude Virus
||(http://www.declude.com)]
||
||TS> ---
||
||TS> This E-mail came from the Declude.JunkMail mailing list.  To
||TS> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
||TS> type "unsubscribe Declude.JunkMail".  You can E-mail
||TS> [EMAIL PROTECTED] for assistance.  You can visit our web
||TS> site at http://www.declude.com .
||
||---
||[This E-mail was scanned for viruses by Declude Virus
||(http://www.declude.com)]
||
||---
||
||This E-mail came from the Declude.JunkMail mailing list.  To
||unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
||type "unsubscribe Declude.JunkMail".  You can E-mail
||[EMAIL PROTECTED] for assistance.  You can visit our web
||site at http://www.declude.com .
||
||---
||[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



DSN:Re: [Declude.JunkMail] ETRN

2002-01-29 Thread smb

Harvy,

No you don't need to subscribe to MAPS to get Declude Junk Mail to work.

The decision on using MAPS (pay) vs the Free blacklists and/or Declude's
built in testing, Badheaders Spamheaders and so forth, is a matter of
personal decision and results of your testing. I do not use MAPS and am very
satisfied with the very high level of junk mail caught. 

Stu





At 03:54 PM 12/11/2001 -0500, you wrote:
>Do I need to subscribe to MAPS to get the Junkmail to work properly?
>
>
>
>
>
>
>
>At 03:26 PM 1/29/2002 -0500, you wrote:
>
>>>The only configuration we have in the Imail server is the IP address and 
>>>hostname in the hosts file.
>>>
>>>The DNS points the MX record to our mail server.
>>>
>>>THE QUESTION:
>>>
>>>Does the mail that is sent to these servers run through the Declude program?
>>
>>Yes.
>>
>>Declude scans all E-mail that arrives via SMTP, so immediately after IMail 
>>receives the E-mail, it gets scanned by Declude.
>>  -Scott
>>
>>---
>>[This E-mail was scanned for viruses by Declude Virus 
>>(http://www.declude.com)]
>>
>>---
>>
>>This E-mail came from the Declude.JunkMail mailing list.  To
>>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>>type "unsubscribe Declude.JunkMail".  You can E-mail
>>[EMAIL PROTECTED] for assistance.  You can visit our web
>>site at http://www.declude.com .
>
>Harvey Rench
>Network Engineer
>Clayton Homes, Inc.
>865-380-3000
>Visit us at www.Clayton.net
>
>---
>[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
>
>---
>
>This E-mail came from the Declude.JunkMail mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail".  You can E-mail
>[EMAIL PROTECTED] for assistance.  You can visit our web
>site at http://www.declude.com .
>
>
-
CSOnline Technical Support hours - Monday thru Saturday 7am - 1am 
CSOnline Technical Support Numbers Seneca814-677-2447 
   Clarion   814-227-3638  
   Meadville 814-425-1696
   Parker724-399-1158   
http://www.csonline.net  http://www.cshowcase.com  http://www.learncenter.com  
-

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] ETRN

2002-01-29 Thread Harvey Rench

Do I need to subscribe to MAPS to get the Junkmail to work properly?







At 03:26 PM 1/29/2002 -0500, you wrote:

>>The only configuration we have in the Imail server is the IP address and 
>>hostname in the hosts file.
>>
>>The DNS points the MX record to our mail server.
>>
>>THE QUESTION:
>>
>>Does the mail that is sent to these servers run through the Declude program?
>
>Yes.
>
>Declude scans all E-mail that arrives via SMTP, so immediately after IMail 
>receives the E-mail, it gets scanned by Declude.
>  -Scott
>
>---
>[This E-mail was scanned for viruses by Declude Virus 
>(http://www.declude.com)]
>
>---
>
>This E-mail came from the Declude.JunkMail mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail".  You can E-mail
>[EMAIL PROTECTED] for assistance.  You can visit our web
>site at http://www.declude.com .

Harvey Rench
Network Engineer
Clayton Homes, Inc.
865-380-3000
Visit us at www.Clayton.net

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] ETRN

2002-01-29 Thread R. Scott Perry


>The only configuration we have in the Imail server is the IP address and 
>hostname in the hosts file.
>
>The DNS points the MX record to our mail server.
>
>THE QUESTION:
>
>Does the mail that is sent to these servers run through the Declude program?

Yes.

Declude scans all E-mail that arrives via SMTP, so immediately after IMail 
receives the E-mail, it gets scanned by Declude.
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] ETRN

2002-01-29 Thread Bob Bloise

Greetings,

I have many domains running on my server and a few that have their own email servers.  
On these customers with their own servers, we do a 'store and queue' for them.  They 
pick up the email with an ETRN command.

The only configuration we have in the Imail server is the IP address and hostname in 
the hosts file.

The DNS points the MX record to our mail server.

THE QUESTION:

Does the mail that is sent to these servers run through the Declude program?

Bob Bloise

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] Declude Virus and Junkmail

2002-01-29 Thread Webmaster Oilfield Directory

Hey i agree totally with him, we are a webhosting company for the oilfield
industry, it is a GREAT virus product, no hassle operation, easy virus
updates with f-prot!


- Original Message -
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, January 29, 2002 5:12 AM
Subject: Re: [Declude.JunkMail] Declude Virus and Junkmail


>
> >I have to say that in my 7 years running this ISP business, I have NEVER
> >found a product that works as well as your Virus and Junkmail software.
I
> >highly recommend your products to EVERYONE.  They have SURPASSED my
> >expectations.  I am glad I bought it at this price before you realize how
> >good it is and charge accordingly!
>
> Wow, thanks for the kind words!  :)
>   -Scott
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
>
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  You can E-mail
> [EMAIL PROTECTED] for assistance.  You can visit our web
> site at http://www.declude.com .
> ---
> [This E-mail scanned for viruses by our Stealth Virus Detector]
>
>

---
[This E-mail scanned for viruses by our Stealth Virus Detector]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] Any way to setup "weighting" on userdefined keywords?

2002-01-29 Thread R. Scott Perry


>Is there a way to develop my own weighting system using keywords
>I want to block?

No -- Declude JunkMail doesn't have any keyword filtering ability at this time.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] Any way to setup "weighting" on user defined keywords?

2002-01-29 Thread Wes Harper

Is there a way to develop my own weighting system using keywords 
I want to block?

We continue to have a problem with adult content messages.  I can 
put in an Imail filter that just deletes email that contains specific 
phrases, but there are some phrases that could actually occur in 
legitimate email; the company I work for is self-insured so there is a 
good chance some medical related emails could have words that 
appear to be adult content.

If there was a way to do my own "weighting", I could assign a 
number to each word or phrase and then only block the message 
when the weight is reached.

Wes Harper
Network Administrator
Pioneer Telephone Cooperative, Inc.

P.S.  I've tried using the undocumented "adult" test, but it's 
 obviously still being refined.  It does and excellent job
 on some emails, but then totally ignores others that
 without a doubt contain adult content.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] Declude Virus and Junkmail

2002-01-29 Thread R. Scott Perry


>I have to say that in my 7 years running this ISP business, I have NEVER 
>found a product that works as well as your Virus and Junkmail software.  I 
>highly recommend your products to EVERYONE.  They have SURPASSED my 
>expectations.  I am glad I bought it at this price before you realize how 
>good it is and charge accordingly!

Wow, thanks for the kind words!  :)
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] IPSwitch email failed SPAMCOP

2002-01-29 Thread R. Scott Perry


>Here is the fragment from the declude log file, but I think that someone
>else already pointed out that the problem is from the headers that other
>people put on the message.
>
>01/28/2002 11:31:30 Q8ade142 Msg failed SPAMCOP (Blocked - see
>http://spamcop.net/bl.shtml?156.21.1.8).

Ah -- that is Ipswitch.  Going to the URL shows that some bozos signed up 
for a free trial of WhatsUp Gold, and reported Ipswitch for sending them 
"spam" asking how the evaluation was going.  Since Ipswitch apparently 
sends bulk mailings from a special server, Spamcop couldn't take into 
account all the "good" E-mail that gets sent out.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



[Declude.JunkMail] Declude Virus and Junkmail

2002-01-29 Thread Bob Bloise

Scott,

Last week my mailbox was overflowing with SPAM, viruses and major complaints from 
customers that were fed up with the junk and viruses.

I installed the Declude Virus and Junkmail software and now this week my mailbox is 
STILL overflowing with mail, however, this time it is from customers THANKING me for 
ridding them of the junkmail.

I have to say that in my 7 years running this ISP business, I have NEVER found a 
product that works as well as your Virus and Junkmail software.  I highly recommend 
your products to EVERYONE.  They have SURPASSED my expectations.  I am glad I bought 
it at this price before you realize how good it is and charge accordingly!

Your technical support in assisting me was outstanding.  Other software companies 
should take a lesson from you in the support area.  

Keep up the good work and let me know if there is anything I can do to assist you!

I apologize to the group for sending this to everyone but I wanted to make sure that 
if a "lurker" was on line thinking about buying this product he/she should order it 
now.

Bob Bloise
System Administrator
Trellis Technologies, Inc.
(704) 849-7789


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .