[Declude.JunkMail] Optional IP4r logging?

2004-06-29 Thread Markus Gufler
Would it be possible to have an optional parameter like IP4RLOGING ON

If enabled it will write a separate logfile containing only response times
from the different IP4r tests. So we can determine periodicaly what ip4r
tests has the longest response times or maybe are also timing out.

And all this without the wave of informations in the HIGH or DEBUG logging
level.

Markus



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Hung/zombie Declude Processes

2004-06-29 Thread R. Scott Perry

And if anyone has some ideas why Declude isn't returning I'd be very
interested.  The perl script and the executable version both exit 0
which is my understand as they should.  And they do run run from the
command line just fine.
The only reason this should happen is if your program doesn't end -- 
Declude JunkMail will wait up to an hour for it to end (although that is 
being changed to 5 minutes).

One thing that you can do is run Declude JunkMail in the debug mode 
(LOGLEVEL DEBUG).  If you search the log file, you should find a line 
External program started: followed by the name of your program.  The next 
log file entry should be either an error message or External program 
reports exit code of:.  If neither of those appear, Declude JunkMail is 
probably just sitting and waiting for your program to end.  If you see your 
program in Task Manager, that's definitely the case.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Optional IP4r logging?

2004-06-29 Thread R. Scott Perry

Would it be possible to have an optional parameter like IP4RLOGING ON
If enabled it will write a separate logfile containing only response times
from the different IP4r tests. So we can determine periodicaly what ip4r
tests has the longest response times or maybe are also timing out.
And all this without the wave of informations in the HIGH or DEBUG logging
level.
That's a good idea -- I'll see if we can do that.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Spam sent to list

2004-06-29 Thread TCOnline Internet Support
Title: Message



I was 
wondering if someone was posting this item to the list or if my e-mail address 
was harvest from somewhere.



Isaias HernandezTC 
Online InternetSupport979-775-6239[EMAIL PROTECTED]



Received: from 
declude.com [68.162.218.198] by mail.tconline.net with ESMTP 
(SMTPD32-7.15) id A3476F6F00C6; Mon, 28 Jun 2004 22:34:31 -0500Received: 
from pa198.miejsce-piastowe.sdi.tpnet.pl [217.99.175.198] by 
mail.declude.com (SMTPD32-8.05) id A2713530256; Mon, 28 Jun 2004 
23:30:57 -0400X-Message-Info: 
315jiTpiaLUO037Vdjitu5nmAEwdWCW857XHZ9feDvejY0Received: from dns014yahoo.com 
([24.117.232.112]) by lp52-nks49.yahoo.com with Microsoft 
SMTPSVC(5.0.2195.6824); Mon, 28 Jun 2004 17:24:57 +0100Received: 
from yahoo.com [127.0.0.1] by dnsyahoo.com 
(SMTPD32-7.12 ) id AWW909SH6; Mon, 28 Jun 2004 17:27:57 
+0100Subject: [Declude.Virus] SPAMWT40:Attn:Urgent Sales Verification!Act 
now!From: AdminTo: [EMAIL PROTECTED]Message-Id: 
[EMAIL PROTECTED]Content-Type: 
multipart/alternative;boundary="--105305717518494121"X-RBL-Warning: 
BLITZEDALL: "open proxy - see http://opm.blitzed.org/?ip=217.99.175.198"X-RBL-Warning: 
DSBL: "http://dsbl.org/listing?ip=217.99.175.198"X-RBL-Warning: 
DSBLALL: "http://dsbl.org/listing?ip=217.99.175.198"X-RBL-Warning: 
FIVETENSRC: 112.232.117.24.blackholes.five-ten-sg.com.X-RBL-Warning: 
MAILDEFLECTOR: "Mail from 217.99.175.198 refused by the postmaster at this 
domain. Please contact the postmaster for help. You may also link to 
http://www.maildeflector.net/whywasirefused.php 
for help"X-RBL-Warning: SORBS-HTTP: "HTTP Proxy See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=217.99.175.198"X-RBL-Warning: 
SORBS-SOCKS: "HTTP Proxy See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=217.99.175.198"X-RBL-Warning: 
SPAMCOP: "Blocked - see http://www.spamcop.net/bl.shtml?217.99.175.198"X-RBL-Warning: 
BADHEADERS: This E-mail was sent from a broken mail client 
[a020010d].X-RBL-Warning: SNIFFER: Message failed SNIFFER: 
50.X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 15.X-RBL-Warning: 
ROUTING: This E-mail was routed in a poor manner consistent with spam 
[a020010d].X-RBL-Warning: WEIGHT10: Weight of 58 reaches or exceeds the 
limit of 10.X-RBL-Warning: WEIGHT20: Weight of 58 reaches or exceeds the 
limit of 20.X-Note: This E-mail was scanned for viruses by Declude Virus (www.declude.com)X-NRecips: 
4X-Reverse-IP: pa198.miejsce-piastowe.sdi.tpnet.plX-Weight: 58 
(BLITZEDALL, DSBL, DSBLALL, FIVETENSRC, MAILDEFLECTOR, NJABLPROXIES, SORBS-HTTP, 
SORBS-SOCKS, SPAMCOP, SPFUNKNOWN, BADHEADERS, HEUR4, SNIFFER, SPAMCHK, ROUTING, 
IPNOTINMX, NOLEGITCONTENT, EXPER, CMDSPACE, WEIGHT10, WEIGHT20, 
WEIGHT40)X-Country-Chain: UNITED 
STATES-POLAND-destination.X-Declude-Sender: [EMAIL PROTECTED] 
[217.99.175.198]X-Declude-Spoolname: De27103530256df24.SMDPrecedence: 
bulkSender: [EMAIL PROTECTED]Reply-To: 
[EMAIL PROTECTED]Date: 
Mon, 28 Jun 2004 23:34:33 -0400X-Declude-Sender: [EMAIL PROTECTED] 
[68.162.218.198]X-Declude-Spoolname: De3476f6f00c6aec9.SMDX-Note: This 
E-mail was scanned by Declude JunkMail (www.declude.com) for 
spam.X-Spam-Tests-Failed: Whitelisted [0]X-Country-Chain: UNITED 
STATES-POLAND-UNITED STATES-destinationX-Note: This E-mail was 
sent from dpvc-68-162-218-198.bos.east.verizon.net 
([68.162.218.198]).X-Note: Total Spam weight of this E-mail is 
0.X-RCPT-TO: [EMAIL PROTECTED]Status: 
UX-UIDL: 385403722



  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On 
  Behalf Of AdminSent: Monday, June 28, 2004 10:35 
  PMTo: [EMAIL PROTECTED]Subject: 
  [Declude.Virus] SPAMWT40:Attn:Urgent Sales Verification!Act 
  now!
  
  BUY CHEAP DRUGS,OVERNIGHT DELIVERY  


RE: [Declude.JunkMail] Spam sent to list

2004-06-29 Thread Scott Powner
Title: Message









I got the same thing  How did it
make it through the spam filters??

Scott





-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of TCOnline Internet Support
Sent: Tuesday, June 29, 2004 9:19
AM
To: Declude.JunkMail
Subject: [Declude.JunkMail] Spam
sent to list





I was wondering if
someone was posting this item to the list or if my e-mail address was harvest
from somewhere.

















Isaias Hernandez
TC Online InternetSupport
979-775-6239
[EMAIL PROTECTED]







Received: from
declude.com [68.162.218.198] by mail.tconline.net with ESMTP
 (SMTPD32-7.15) id A3476F6F00C6; Mon, 28 Jun 2004 22:34:31 -0500
Received: from pa198.miejsce-piastowe.sdi.tpnet.pl [217.99.175.198] by
mail.declude.com
 (SMTPD32-8.05) id A2713530256; Mon, 28 Jun 2004 23:30:57 -0400
X-Message-Info: 315jiTpiaLUO037Vdjitu5nmAEwdWCW857XHZ9feDvejY0
Received: from dns014yahoo.com ([24.117.232.112]) by lp52-nks49.yahoo.com with
Microsoft SMTPSVC(5.0.2195.6824);
 Mon, 28 Jun 2004 17:24:57 +0100
Received: from yahoo.com [127.0.0.1] by dnsyahoo.com
 (SMTPD32-7.12 ) id AWW909SH6; Mon, 28 Jun 2004
17:27:57 +0100
Subject: [Declude.Virus] SPAMWT40:Attn:Urgent Sales Verification!Act now!
From: Admin
To: [EMAIL PROTECTED]
Message-Id: [EMAIL PROTECTED]
Content-Type: multipart/alternative;
boundary=--105305717518494121
X-RBL-Warning: BLITZEDALL: open proxy - see http://opm.blitzed.org/?ip=217.99.175.198
X-RBL-Warning: DSBL: http://dsbl.org/listing?ip=217.99.175.198
X-RBL-Warning: DSBLALL: http://dsbl.org/listing?ip=217.99.175.198
X-RBL-Warning: FIVETENSRC: 112.232.117.24.blackholes.five-ten-sg.com.
X-RBL-Warning: MAILDEFLECTOR: Mail from 217.99.175.198 refused by the
postmaster at this domain. Please contact the postmaster for help.
You may also link to http://www.maildeflector.net/whywasirefused.php
for help
X-RBL-Warning: SORBS-HTTP: HTTP Proxy See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=217.99.175.198
X-RBL-Warning: SORBS-SOCKS: HTTP Proxy See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=217.99.175.198
X-RBL-Warning: SPAMCOP: Blocked - see http://www.spamcop.net/bl.shtml?217.99.175.198
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client
[a020010d].
X-RBL-Warning: SNIFFER: Message failed SNIFFER: 50.
X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 15.
X-RBL-Warning: ROUTING: This E-mail was routed in a poor manner consistent with
spam [a020010d].
X-RBL-Warning: WEIGHT10: Weight of 58 reaches or exceeds the limit of 10.
X-RBL-Warning: WEIGHT20: Weight of 58 reaches or exceeds the limit of 20.
X-Note: This E-mail was scanned for viruses by Declude Virus (www.declude.com)
X-NRecips: 4
X-Reverse-IP: pa198.miejsce-piastowe.sdi.tpnet.pl
X-Weight: 58 (BLITZEDALL, DSBL, DSBLALL, FIVETENSRC, MAILDEFLECTOR,
NJABLPROXIES, SORBS-HTTP, SORBS-SOCKS, SPAMCOP, SPFUNKNOWN, BADHEADERS, HEUR4,
SNIFFER, SPAMCHK, ROUTING, IPNOTINMX, NOLEGITCONTENT, EXPER, CMDSPACE,
WEIGHT10, WEIGHT20, WEIGHT40)
X-Country-Chain: UNITED STATES-POLAND-destination.
X-Declude-Sender: [EMAIL PROTECTED]
[217.99.175.198]
X-Declude-Spoolname: De27103530256df24.SMD
Precedence: bulk
Sender: [EMAIL PROTECTED]
Reply-To: [EMAIL PROTECTED]
Date: Mon, 28 Jun 2004 23:34:33 -0400
X-Declude-Sender: [EMAIL PROTECTED]
[68.162.218.198]
X-Declude-Spoolname: De3476f6f00c6aec9.SMD
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam.
X-Spam-Tests-Failed: Whitelisted [0]
X-Country-Chain: UNITED STATES-POLAND-UNITED STATES-destination
X-Note: This E-mail was sent from dpvc-68-162-218-198.bos.east.verizon.net
([68.162.218.198]).
X-Note: Total Spam weight of this E-mail is 0.
X-RCPT-TO: [EMAIL PROTECTED]
Status: U
X-UIDL: 385403722











-Original
Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Admin
Sent: Monday, June 28, 2004 10:35
PM
To:
[EMAIL PROTECTED]
Subject: [Declude.Virus]
SPAMWT40:Attn:Urgent Sales Verification!Act now!






BUY CHEAP DRUGS,OVERNIGHT DELIVERY












RE: [Declude.JunkMail] Spam sent to list

2004-06-29 Thread Markus Gufler
Title: Message



As I know there is some problem if the mailfrom is "Admin". 
This is not a declude error but should relate to IMail. Scott should know more 
about.
As you can see in the headers such messages fail enough 
spamtests to be hold, but for some reason IMail will handle "Admin" mails a 
little bit different

Markus



  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of TCOnline 
  Internet SupportSent: Tuesday, June 29, 2004 3:19 PMTo: 
  Declude.JunkMailSubject: [Declude.JunkMail] Spam sent to 
  list
  
  I 
  was wondering if someone was posting this item to the list or if my e-mail 
  address was harvest from somewhere.
  
  
  
  Isaias 
  HernandezTC Online InternetSupport979-775-6239[EMAIL PROTECTED]
  
  
  
  Received: from 
  declude.com [68.162.218.198] by mail.tconline.net with ESMTP 
  (SMTPD32-7.15) id A3476F6F00C6; Mon, 28 Jun 2004 22:34:31 -0500Received: 
  from pa198.miejsce-piastowe.sdi.tpnet.pl [217.99.175.198] by 
  mail.declude.com (SMTPD32-8.05) id A2713530256; Mon, 28 Jun 2004 
  23:30:57 -0400X-Message-Info: 
  315jiTpiaLUO037Vdjitu5nmAEwdWCW857XHZ9feDvejY0Received: from 
  dns014yahoo.com ([24.117.232.112]) by lp52-nks49.yahoo.com with Microsoft 
  SMTPSVC(5.0.2195.6824); Mon, 28 Jun 2004 17:24:57 +0100Received: 
  from yahoo.com [127.0.0.1] by dnsyahoo.com 
  (SMTPD32-7.12 ) id AWW909SH6; Mon, 28 Jun 2004 
  17:27:57 +0100Subject: [Declude.Virus] SPAMWT40:Attn:Urgent Sales 
  Verification!Act now!From: AdminTo: [EMAIL PROTECTED]Message-Id: 
  [EMAIL PROTECTED]Content-Type: 
  multipart/alternative;boundary="--105305717518494121"X-RBL-Warning: 
  BLITZEDALL: "open proxy - see http://opm.blitzed.org/?ip=217.99.175.198"X-RBL-Warning: 
  DSBL: "http://dsbl.org/listing?ip=217.99.175.198"X-RBL-Warning: 
  DSBLALL: "http://dsbl.org/listing?ip=217.99.175.198"X-RBL-Warning: 
  FIVETENSRC: 112.232.117.24.blackholes.five-ten-sg.com.X-RBL-Warning: 
  MAILDEFLECTOR: "Mail from 217.99.175.198 refused by the postmaster at this 
  domain. Please contact the postmaster for help. You may also link 
  to http://www.maildeflector.net/whywasirefused.php 
  for help"X-RBL-Warning: SORBS-HTTP: "HTTP Proxy See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=217.99.175.198"X-RBL-Warning: 
  SORBS-SOCKS: "HTTP Proxy See: http://www.dnsbl.sorbs.net/cgi-bin/lookup?IP=217.99.175.198"X-RBL-Warning: 
  SPAMCOP: "Blocked - see http://www.spamcop.net/bl.shtml?217.99.175.198"X-RBL-Warning: 
  BADHEADERS: This E-mail was sent from a broken mail client 
  [a020010d].X-RBL-Warning: SNIFFER: Message failed SNIFFER: 
  50.X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 15.X-RBL-Warning: 
  ROUTING: This E-mail was routed in a poor manner consistent with spam 
  [a020010d].X-RBL-Warning: WEIGHT10: Weight of 58 reaches or exceeds the 
  limit of 10.X-RBL-Warning: WEIGHT20: Weight of 58 reaches or exceeds the 
  limit of 20.X-Note: This E-mail was scanned for viruses by Declude Virus 
  (www.declude.com)X-NRecips: 
  4X-Reverse-IP: pa198.miejsce-piastowe.sdi.tpnet.plX-Weight: 58 
  (BLITZEDALL, DSBL, DSBLALL, FIVETENSRC, MAILDEFLECTOR, NJABLPROXIES, 
  SORBS-HTTP, SORBS-SOCKS, SPAMCOP, SPFUNKNOWN, BADHEADERS, HEUR4, SNIFFER, 
  SPAMCHK, ROUTING, IPNOTINMX, NOLEGITCONTENT, EXPER, CMDSPACE, WEIGHT10, 
  WEIGHT20, WEIGHT40)X-Country-Chain: UNITED 
  STATES-POLAND-destination.X-Declude-Sender: [EMAIL PROTECTED] 
  [217.99.175.198]X-Declude-Spoolname: De27103530256df24.SMDPrecedence: 
  bulkSender: [EMAIL PROTECTED]Reply-To: 
  [EMAIL PROTECTED]Date: 
  Mon, 28 Jun 2004 23:34:33 -0400X-Declude-Sender: [EMAIL PROTECTED] 
  [68.162.218.198]X-Declude-Spoolname: De3476f6f00c6aec9.SMDX-Note: This 
  E-mail was scanned by Declude JunkMail (www.declude.com) for 
  spam.X-Spam-Tests-Failed: Whitelisted [0]X-Country-Chain: UNITED 
  STATES-POLAND-UNITED STATES-destinationX-Note: This E-mail was 
  sent from dpvc-68-162-218-198.bos.east.verizon.net 
  ([68.162.218.198]).X-Note: Total Spam weight of this E-mail is 
  0.X-RCPT-TO: [EMAIL PROTECTED]Status: 
  UX-UIDL: 385403722
  
  
  

-Original Message-From: 
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
On Behalf Of AdminSent: Monday, June 28, 2004 10:35 
PMTo: [EMAIL PROTECTED]Subject: 
[Declude.Virus] SPAMWT40:Attn:Urgent Sales Verification!Act 
now!

BUY CHEAP DRUGS,OVERNIGHT DELIVERY  


Re: [Declude.JunkMail] Spam sent to list

2004-06-29 Thread R. Scott Perry

I was wondering if someone was posting this item to the list or if my 
e-mail address was harvest from somewhere.
It was indeed posted to the list.  It's part of a nasty flaw in IMail's 
mailing list where it sees:

From: Admin
and then allows the E-mail through.
   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] OT: ORBD Question

2004-06-29 Thread Jose Gosende
Title: Message



ORDB has 
listed one of my mail servers as being an open relay. However, I have it set to 
"Relay for local users only"
(running 
iMail 6.06) so I'm not sure why it'sclaiming to be an open relay. Can 
someone shed some light?
TIA,

Jose


RE: [Declude.JunkMail] OT: ORBD Question

2004-06-29 Thread Troy D. Hilton
Title: Message



You are an open relay. The only real secure settings are 
"Relay for Addresses"  "No Relay". Do a search through the archives and 
you'll see plenty of articles on this.

Troy D. Hilton
SofWerks LLC.
[EMAIL PROTECTED]



From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Jose 
GosendeSent: Tuesday, June 29, 2004 8:43 AMTo: 
[EMAIL PROTECTED]Subject: [Declude.JunkMail] OT: ORBD 
Question

ORDB has 
listed one of my mail servers as being an open relay. However, I have it set to 
"Relay for local users only"
(running 
iMail 6.06) so I'm not sure why it'sclaiming to be an open relay. Can 
someone shed some light?
TIA,

Jose


Re: [Declude.JunkMail] OT: ORBD Question

2004-06-29 Thread R. Scott Perry

ORDB has listed one of my mail servers as being an open relay. However, I 
have it set to Relay for local users only
(running iMail 6.06) so I'm not sure why it's claiming to be an open 
relay. Can someone shed some light?
That's because spammers will often pretend to be a local user.
You need to use No mail relay or Relay for addresses in order to not be 
an open relay.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT: ORBD Question

2004-06-29 Thread John Tolmachoff \(Lists\)
Title: Message









Help me, I am too busy to search the
archives on the Imail list where this question is posted multiple times per
month and since my time is more valuable than yours you can search and answer
and I can do the work I have too do.





John Tolmachoff

Engineer/Consultant/Owner

eServices For You







-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Jose Gosende
Sent: Tuesday, June
 29, 2004 6:43 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] OT:
ORBD Question





ORDB has listed one of my mail servers as
being an open relay. However, I have it set to Relay for local users
only





(running iMail 6.06) so I'm not sure why
it'sclaiming to be an open relay. Can someone shed some light?






TIA,











Jose












[Declude.JunkMail] $default$.junkmail file questions

2004-06-29 Thread Sharyn Schmidt
Title: $default$.junkmail file questions






I have 2 domains on my mailserver:


Todhunter.com (my primary domain)

Cruzanltd.com (my virtual domain)


I have a $default$.junkmail file for the todhunter.com domain, and separate user.junkmail files, for my outside salespeople, who are to receive all email, including spam and everything else. In their user.junkmail files, all actions are set to either warn or ignore, no hold, attach or delete.

Recently, 3/4's of these same salespeople, now have all their todhunter.com mail forwarded to cruzanltd.com, which has become their new email address.

At the moment, I have no user.junkmail files for any of those salespeople.


I believe Scott advised awhile back that Declude would take the settings of the $default$.junkmail file, for a virtual domain, in this case, the cruzanltd.com domain.

Here is my question


I want those users that have cruzanltd.com email addresses, to have the same junkmail settings that their todhunter.com mail had. I'm trying to figure out the easiest way to do this. Since the only people who have these cruzanltd.com addresses, are those users that receive all their mail, including the spam, can I just create a junkmail file for the cruzanltd.com domain or do I have to set up individual user junkmail files like I did for the todhunter.com domain?

If all these users have all their todhunter.com email forwarded to the cruzanltd.com email address, does Declude apply the junkmail file settings before or after the mail is forwarded?

Thanks,

Sharyn








Re: [Declude.JunkMail] $default$.junkmail file questions

2004-06-29 Thread R. Scott Perry

I have 2 domains on my mailserver:
Todhunter.com (my primary domain)
Cruzanltd.com (my virtual domain)
I have a $default$.junkmail file for the todhunter.com domain, and 
separate user.junkmail files, for my outside salespeople, who are to 
receive all email, including spam and everything else. In their 
user.junkmail files, all actions are set to either warn or ignore, no 
hold, attach or delete.

Recently, 3/4's of these same salespeople, now have all their 
todhunter.com mail forwarded to cruzanltd.com, which has become their new 
email address.

At the moment, I have no user.junkmail files for any of those salespeople.
I believe Scott advised awhile back that Declude would take the settings 
of the $default$.junkmail file, for a virtual domain, in this case, the 
cruzanltd.com domain.
Actually, Declude JunkMail does not know whether the domain is virtual, 
IP-based, or the primary domain -- so all types of domains should be 
handled the same way.

I want those users that have cruzanltd.com email addresses, to have the 
same junkmail settings that their todhunter.com mail had. I'm trying to 
figure out the easiest way to do this. Since the only people who have 
these cruzanltd.com addresses, are those users that receive all their 
mail, including the spam, can I just create a junkmail file for the 
cruzanltd.com domain or do I have to set up individual user junkmail files 
like I did for the todhunter.com domain?
Just a single per-domain config file 
(\IMail\Declude\cruzanltd.com\$default$.JunkMail) should be all that is 
needed in this case.

If all these users have all their todhunter.com email forwarded to the 
cruzanltd.com email address, does Declude apply the junkmail file settings 
before or after the mail is forwarded?
If the E-mail is truly forwarded (as opposed to an alias), Declude JunkMail 
will apply the actions for the first domain (the one doing the 
forwarding).  Normally the forwarded E-mail will inherit the same actions 
as the first domain.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] $default$.junkmail file questions

2004-06-29 Thread Sharyn Schmidt

Just a single per-domain config file 
(\IMail\Declude\cruzanltd.com\$default$.JunkMail) should be all that is 
needed in this case.

This is what I was looking for. I was unsure Declude would check a folder
marked cruzanltd.com for a default file or it would automatically use the
$default$.junkmail for todhunter.com. I'm assuming, though, that I have to
move the $default$.junkmail file from the todhunter.com domain to the
todhunter.com folder, where my user.junkmail files are? At the moment, it's
just in the declude root directory as there was never any need to change it.
If I set this up, like this, then I can still add individual user.junkmail
files, the same way as always, if there is ever anyone who wants different
settings.




If the E-mail is truly forwarded (as opposed to an alias), Declude JunkMail 
will apply the actions for the first domain (the one doing the 
forwarding).  Normally the forwarded E-mail will inherit the same actions 
as the first domain.

The email is forwarded, as in, in the IMAIL user accounts themselves, their
todhunter email is set to be forwarded to [EMAIL PROTECTED] However, these
ppl are also getting email addressed directly to [EMAIL PROTECTED] which is
why I need to set this up for that domain as well.

So, if I move my $default$.junkmail file for todhunter.com to the
todhunter.com folder and I create a $default$.junkmail file and put it in a
cruzanltd.com folder, Declude will also still read my specific user.junkmail
files that are already set up in the todhunter.com folder..correct? And, if
I ever want to add any user.junkmail files to the cruzanltd.com folder, I
could. Correct?

Sharyn

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.


We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) htmla 
href=http://www.cruzanrums.com;www.cruzanrums.com/a/html
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] $default$.junkmail file questions

2004-06-29 Thread R. Scott Perry

This is what I was looking for. I was unsure Declude would check a folder
marked cruzanltd.com for a default file or it would automatically use the
$default$.junkmail for todhunter.com.
It gets complicated with aliases and forwarding, but if cruzanltd.com only 
appears as a forwarding address, Declude JunkMail won't try to use it.

I'm assuming, though, that I have to
move the $default$.junkmail file from the todhunter.com domain to the
todhunter.com folder, where my user.junkmail files are? At the moment, it's
just in the declude root directory as there was never any need to change it.
If I set this up, like this, then I can still add individual user.junkmail
files, the same way as always, if there is ever anyone who wants different
settings.
Actually, since all that is changing is the adding of forwarding, I don't 
believe you will need to make any changes.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] $default$.junkmail file questions

2004-06-29 Thread Sharyn Schmidt

It gets complicated with aliases and forwarding, but if cruzanltd.com only 
appears as a forwarding address, Declude JunkMail won't try to use it.

Ok...now I'm confused. I do actually have a cruzanltd.com domain set up on
the imail server, with mx records in dns and everything. People will
actually be addressing email to [EMAIL PROTECTED]

 

Let me rephrase the question and ask, if I move the $default$.junkmail file
that I am currently using for the todhunter.com domain, to the folder marked
todhunter.com that contains all the specific user.junkmail files for the
todhunter.com domain, am I going to break anything?

:)



We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) htmla 
href=http://www.cruzanrums.com;www.cruzanrums.com/a/html
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] $default$.junkmail file questions

2004-06-29 Thread R. Scott Perry

It gets complicated with aliases and forwarding, but if cruzanltd.com only
appears as a forwarding address, Declude JunkMail won't try to use it.
Ok...now I'm confused. I do actually have a cruzanltd.com domain set up on
the imail server, with mx records in dns and everything. People will
actually be addressing email to [EMAIL PROTECTED]
If they are addressing the E-mail to [EMAIL PROTECTED], then you would 
need to either have per-domain settings for that domain, or else E-mails to 
that domain would use the default settings.

Let me rephrase the question and ask, if I move the $default$.junkmail file
that I am currently using for the todhunter.com domain, to the folder marked
todhunter.com that contains all the specific user.junkmail files for the
todhunter.com domain, am I going to break anything?
What I would do in this case is simply create a 
\IMail\Declude\cruzanltd.com\$default$.JunkMail file, and not change 
anything else.  That way, E-mail to [EMAIL PROTECTED] will use the 
\IMail\Declude\cruzanltd.com\$default$.JunkMail file, and E-mail to anyone 
else will use whatever settings they previously had.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] $default$.junkmail file questions

2004-06-29 Thread Sharyn Schmidt

What I would do in this case is simply create a 
\IMail\Declude\cruzanltd.com\$default$.JunkMail file, and not change 
anything else.  That way, E-mail to [EMAIL PROTECTED] will use the 
\IMail\Declude\cruzanltd.com\$default$.JunkMail file, and E-mail to anyone 
else will use whatever settings they previously had.


Great! Last question on this..

If it turned out that I did have a user who wanted different settings than
the domain default, I could just go ahead and add a user.junkmail file, like
I have been doing all along, and drop it in the cruzanltd.com folder.
Correct?

You have the patience of a saint, thanks!

Sharyn




We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged Best in the World at the annual
San Francisco Wine and Spirits Championships. For
more information, please click (go to) htmla 
href=http://www.cruzanrums.com;www.cruzanrums.com/a/html
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT: ORBD Question

2004-06-29 Thread Jose Gosende
Thanks to all. The answer is in the URL below, in case anyone
has this problem in the future.

http://support.ipswitch.com/kb/IM-20021108-DM01.htm

Jose

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry
Sent: Tuesday, June 29, 2004 9:50 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] OT: ORBD Question



ORDB has listed one of my mail servers as being an open relay. However, I
have it set to Relay for local users only
(running iMail 6.06) so I'm not sure why it's claiming to be an open
relay. Can someone shed some light?

That's because spammers will often pretend to be a local user.

You need to use No mail relay or Relay for addresses in order to not be
an open relay.

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.712 / Virus Database: 468 - Release Date: 6/27/2004

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.712 / Virus Database: 468 - Release Date: 6/27/2004

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] $default$.junkmail file questions

2004-06-29 Thread R. Scott Perry

If it turned out that I did have a user who wanted different settings than
the domain default, I could just go ahead and add a user.junkmail file, like
I have been doing all along, and drop it in the cruzanltd.com folder.
Correct?
Correct.  :)
   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Way OT: HTML code for tab

2004-06-29 Thread John Tolmachoff \(Lists\)
Does any one know what the HTML code for a single tab is?

John Tolmachoff
Engineer/Consultant/Owner
eServices For You



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Way OT: HTML code for tab

2004-06-29 Thread Grant Griffith - Declude JM
This shows you one way to do this, may not help you in your case.  Not sure
of another way to do it though.

http://www.htmlgoodies.com/tutors/tabs.html

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff
(Lists)
Sent: Tuesday, June 29, 2004 1:19 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Way OT: HTML code for tab


Does any one know what the HTML code for a single tab is?

John Tolmachoff
Engineer/Consultant/Owner
eServices For You



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Hung/zombie Declude Processes

2004-06-29 Thread Roderick A. Anderson
 The only reason this should happen is if your program doesn't end --
Declude JunkMail will wait up to an hour for it to end (although that is
being changed to 5 minutes). One thing that you can do is run Declude
JunkMail in the debug mode (LOGLEVEL DEBUG).  If you search the log
file, you should find a line External program started: followed by the
name of your program.  The next log file entry should be either an error
message or External program reports exit code of:.  If neither of
those appear, Declude JunkMail is probably just sitting and waiting for
your program to end.  If you see your program in Task Manager, that's
definitely the case.

Scott,  Is there a way to run the test for a single message.  With our
e-mail traffic un-commenting the TEST line, saving the GLOBAL.CFG file,
re-commenting the TEST line and saving GLOBAL.CFG faster than I typed
this fills the queue.  We upped the max number of processes to 45 but I
haven't been brave enough to tested it again since one small mistake and
we're out-of processes for an hour.

Rod
-- 
Roderick A. Anderson
Technology Services Management Group 
http://www.technologyservicesmanagementgroup.com/
Spokane WA, 99202

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Way OT: HTML code for tab

2004-06-29 Thread DLAnalyzer Support
John, 

It suppose to be #09; 

i.e. character code 09. 

Darrell 

-
Check out http://www.invariantsystems.com for utilities for Declude and 
Imail.  Now released QueueMon an Imail/Declude Queue Monitoring Application. 


John Tolmachoff (Lists) writes: 

Does any one know what the HTML code for a single tab is? 

John Tolmachoff
Engineer/Consultant/Owner
eServices For You 

 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Hung/zombie Declude Processes

2004-06-29 Thread R. Scott Perry

Scott,  Is there a way to run the test for a single message.  With our
e-mail traffic un-commenting the TEST line, saving the GLOBAL.CFG file,
re-commenting the TEST line and saving GLOBAL.CFG faster than I typed
this fills the queue.  We upped the max number of processes to 45 but I
haven't been brave enough to tested it again since one small mistake and
we're out-of processes for an hour.
The only thing that I can think of would be to write a batch file that does 
this automatically (perhaps having a global.new, renaming the global.cfg to 
global.bak and renaming the global.new to global.cfg, then a second or so 
later renaming global.cfg to global.new and global.bak to global.cfg).

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] external tests

2004-06-29 Thread Scott Fisher
Do external tests automatically run before all filters, or do they run where they are 
located in the global.cfg?

Scott Fisher
Director of IT
Farm Progress Companies

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] external tests

2004-06-29 Thread R. Scott Perry

Do external tests automatically run before all filters, or do they run 
where they are located in the global.cfg?
They do run before the filters.
   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Jason @ AreaTech
We have had a many e-mails showing up as of late that have no subject/body.
Further investigation shows that these messages are far above our hold
weight.  The latest one I've received has a subject, but no body.  Here are
the headers from the message:

Received: from host107-183.pool80181.interbusiness.it [80.181.183.107] by
areatech.com
  (SMTPD32-7.14) id A7EC9DA0084; Tue, 29 Jun 2004 14:50:04 -0500
From: [EMAIL PROTECTED]
To: dolphins@ areatech.com
Subject: Pay less money - receive more software.. It's too simple. ;-)
quibble
Date: Tue, 29 Jun 2004 14:48:37 -0600
Message-ID: 3[4
X-RBL-Warning: DSN: Not supporting null originator (DSN) [2-19-9800]
X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 12. [2-36-12000]
X-RBL-Warning: WEIGHT10: Weight of 39 reaches or exceeds the limit of 10.
[2-37-12800]
X-RBL-Warning: WEIGHT20: Weight of 39 reaches or exceeds the limit of 27.
[2-40-14000]
X-Declude-Sender: [EMAIL PROTECTED] [80.181.183.107]
X-Spam-Tests-Failed: SORBS-DUHL, DSN, SPAMCHK, WEIGHT10, WEIGHT20 [39]
X-UIDL: 385498355


Can someone shed some light on what may be causing this to be delivered?


Thanks

Jason

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread R. Scott Perry

We have had a many e-mails showing up as of late that have no subject/body.
Further investigation shows that these messages are far above our hold
weight.  The latest one I've received has a subject, but no body.  Here are
the headers from the message:
Actually, these didn't slip through:
X-RBL-Warning: DSN: Not supporting null originator (DSN) [2-19-9800]
X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 12. [2-36-12000]
X-RBL-Warning: WEIGHT10: Weight of 39 reaches or exceeds the limit of 10. 
[2-37-12800]
X-RBL-Warning: WEIGHT20: Weight of 39 reaches or exceeds the limit of 27. 
[2-40-14000]
X-Spam-Tests-Failed: SORBS-DUHL, DSN, SPAMCHK, WEIGHT10, WEIGHT20 [39]
This failed 5 spam tests, none of which were set to use the HOLD action.
Can someone shed some light on what may be causing this to be delivered?
If you check the Declude JunkMail log file, it should provide a clue.  It 
sounds like the E-mail may have been addressed to an external user, which 
would cause the actions from the \IMail\Declude\global.cfg file to be used.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Aaron J . Caviglia
We have been receiving a lot of blank subject, blank sender type, blank 
e-mail type of messages.  Anybody know what these are?

Aaron
On Jun 29, 2004, at 12:58 PM, Jason @ AreaTech wrote:
We have had a many e-mails showing up as of late that have no 
subject/body.
Further investigation shows that these messages are far above our hold
weight.  The latest one I've received has a subject, but no body.  
Here are
the headers from the message:

Received: from host107-183.pool80181.interbusiness.it [80.181.183.107] 
by
areatech.com
  (SMTPD32-7.14) id A7EC9DA0084; Tue, 29 Jun 2004 14:50:04 -0500
From: [EMAIL PROTECTED]
To: dolphins@ areatech.com
Subject: Pay less money - receive more software.. It's too simple. ;-)
quibble
Date: Tue, 29 Jun 2004 14:48:37 -0600
Message-ID: 3[4
X-RBL-Warning: DSN: Not supporting null originator (DSN) [2-19-9800]
X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 12. [2-36-12000]
X-RBL-Warning: WEIGHT10: Weight of 39 reaches or exceeds the limit of 
10.
[2-37-12800]
X-RBL-Warning: WEIGHT20: Weight of 39 reaches or exceeds the limit of 
27.
[2-40-14000]
X-Declude-Sender: [EMAIL PROTECTED] [80.181.183.107]
X-Spam-Tests-Failed: SORBS-DUHL, DSN, SPAMCHK, WEIGHT10, WEIGHT20 [39]
X-UIDL: 385498355

Can someone shed some light on what may be causing this to be 
delivered?

Thanks
Jason
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Andy Schmidt
Jason,

What does the Declude log file indicate for these messages?

Best Regards
Andy Schmidt

HM Systems Software, Inc.
600 East Crescent Avenue, Suite 203
Upper Saddle River, NJ 07458-1846

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206

http://www.HM-Software.com/


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jason @ AreaTech
Sent: Tuesday, June 29, 2004 03:58 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Messages slipping through JM


We have had a many e-mails showing up as of late that have no subject/body.
Further investigation shows that these messages are far above our hold
weight.  The latest one I've received has a subject, but no body.  Here are
the headers from the message:

Received: from host107-183.pool80181.interbusiness.it [80.181.183.107] by
areatech.com
  (SMTPD32-7.14) id A7EC9DA0084; Tue, 29 Jun 2004 14:50:04 -0500
From: [EMAIL PROTECTED]
To: dolphins@ areatech.com
Subject: Pay less money - receive more software.. It's too simple. ;-)
quibble
Date: Tue, 29 Jun 2004 14:48:37 -0600
Message-ID: 3[4
X-RBL-Warning: DSN: Not supporting null originator (DSN) [2-19-9800]
X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 12. [2-36-12000]
X-RBL-Warning: WEIGHT10: Weight of 39 reaches or exceeds the limit of 10.
[2-37-12800]
X-RBL-Warning: WEIGHT20: Weight of 39 reaches or exceeds the limit of 27.
[2-40-14000]
X-Declude-Sender: [EMAIL PROTECTED] [80.181.183.107]
X-Spam-Tests-Failed: SORBS-DUHL, DSN, SPAMCHK, WEIGHT10, WEIGHT20 [39]
X-UIDL: 385498355


Can someone shed some light on what may be causing this to be delivered?


Thanks

Jason

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Jason @ AreaTech
Sorry Scott, should have been more clear.  We don't do a declude Hold at
Weight20, we do a warn, and then I have a rule in Imail (7.15) that sends
anything with WEIGHT20 to a spambox submailbox.

Here are the JM logs:

[trunc]
06/29/2004 14:49:58 Qc7df09da00840372 L1 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L2 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L3 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L4 Message OK
[/trunc]


So I'm gonna answer my own question here, and say that Declude got it right,
but Imail didn't catch it in the Rule.  Anyone have a clue on why Imail rule
wouldn't catch the text WEIGHT20 using this rule:


H~(WEIGHT20):spambox


TIA

Jason



- Original Message - 
From: Andy Schmidt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 3:11 PM
Subject: RE: [Declude.JunkMail] Messages slipping through JM


 Jason,

 What does the Declude log file indicate for these messages?

 Best Regards
 Andy Schmidt

 HM Systems Software, Inc.
 600 East Crescent Avenue, Suite 203
 Upper Saddle River, NJ 07458-1846

 Phone:  +1 201 934-3414 x20 (Business)
 Fax:+1 201 934-9206

 http://www.HM-Software.com/



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Ken Weise
If this was forwarded from another account, it would skip the IMail rule. I 
just went through that, when one of our sales people went on vacation and 
forwarded their mail to the CEO, who then received all their spam. :-)

At 04:56 PM 6/29/2004, you wrote:
Sorry Scott, should have been more clear.  We don't do a declude Hold at
Weight20, we do a warn, and then I have a rule in Imail (7.15) that sends
anything with WEIGHT20 to a spambox submailbox.
Here are the JM logs:
[trunc]
06/29/2004 14:49:58 Qc7df09da00840372 L1 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L2 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L3 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L4 Message OK
[/trunc]
So I'm gonna answer my own question here, and say that Declude got it right,
but Imail didn't catch it in the Rule.  Anyone have a clue on why Imail rule
wouldn't catch the text WEIGHT20 using this rule:
H~(WEIGHT20):spambox
TIA
Jason

- Original Message -
From: Andy Schmidt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 3:11 PM
Subject: RE: [Declude.JunkMail] Messages slipping through JM
 Jason,

 What does the Declude log file indicate for these messages?

 Best Regards
 Andy Schmidt

 HM Systems Software, Inc.
 600 East Crescent Avenue, Suite 203
 Upper Saddle River, NJ 07458-1846

 Phone:  +1 201 934-3414 x20 (Business)
 Fax:+1 201 934-9206

 http://www.HM-Software.com/


---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Jason @ AreaTech

- Original Message - 
From: Ken Weise [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 4:16 PM
Subject: Re: [Declude.JunkMail] Messages slipping through JM


 If this was forwarded from another account, it would skip the IMail rule.
I
 just went through that, when one of our sales people went on vacation and
 forwarded their mail to the CEO, who then received all their spam. :-)



Is this by design?  I'm confused now (doesn't take much).  So an e-mail
comes in, it gets processed by declude, processed by rules, and delivered.
Now we take that same e-mail and forward it to my account.   Where does it
go south, does it go from declude to an odd 'forward' process bypassing the
rules, and straight to delivery?


Thanks

Jason

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Grant Griffith - Declude JM
Why not use the command in Declude to do this directly?  In looking at the
manual it appears to be ROUTETO email address.  You could do this for the
WEIGHT20 Piece.

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Ken Weise
Sent: Tuesday, June 29, 2004 4:16 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Messages slipping through JM


If this was forwarded from another account, it would skip the IMail rule. I
just went through that, when one of our sales people went on vacation and
forwarded their mail to the CEO, who then received all their spam. :-)

At 04:56 PM 6/29/2004, you wrote:
Sorry Scott, should have been more clear.  We don't do a declude Hold at
Weight20, we do a warn, and then I have a rule in Imail (7.15) that sends
anything with WEIGHT20 to a spambox submailbox.

Here are the JM logs:

[trunc]
06/29/2004 14:49:58 Qc7df09da00840372 L1 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L2 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L3 Message OK
06/29/2004 14:49:58 Qc7df09da00840372 Tests failed [weight=39]:
SORBS-DUHL=IGNORE DSN=WARN IPNOTINMX=IGNORE SPAMCHK=WARN WEIGHT10=WARN
WEIGHT20=WARN CATCHALLMAILS=IGNORE
06/29/2004 14:49:58 Qc7df09da00840372 L4 Message OK
[/trunc]


So I'm gonna answer my own question here, and say that Declude got it
right,
but Imail didn't catch it in the Rule.  Anyone have a clue on why Imail
rule
wouldn't catch the text WEIGHT20 using this rule:


H~(WEIGHT20):spambox


TIA

Jason



- Original Message -
From: Andy Schmidt [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 3:11 PM
Subject: RE: [Declude.JunkMail] Messages slipping through JM


  Jason,
 
  What does the Declude log file indicate for these messages?
 
  Best Regards
  Andy Schmidt
 
  HM Systems Software, Inc.
  600 East Crescent Avenue, Suite 203
  Upper Saddle River, NJ 07458-1846
 
  Phone:  +1 201 934-3414 x20 (Business)
  Fax:+1 201 934-9206
 
  http://www.HM-Software.com/
 
 

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Ken Weise
Actually, my bad, that's what I get for not comprehending when replying. We 
are using Declude's MAILBOX option. So not quite the same situation.

At 05:21 PM 6/29/2004, you wrote:
- Original Message -
From: Ken Weise [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 4:16 PM
Subject: Re: [Declude.JunkMail] Messages slipping through JM
 If this was forwarded from another account, it would skip the IMail rule.
I
 just went through that, when one of our sales people went on vacation and
 forwarded their mail to the CEO, who then received all their spam. :-)

Is this by design?  I'm confused now (doesn't take much).  So an e-mail
comes in, it gets processed by declude, processed by rules, and delivered.
Now we take that same e-mail and forward it to my account.   Where does it
go south, does it go from declude to an odd 'forward' process bypassing the
rules, and straight to delivery?
Thanks
Jason
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Jason @ AreaTech
- Original Message - 
From: Grant Griffith - Declude JM [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 4:19 PM
Subject: RE: [Declude.JunkMail] Messages slipping through JM


 Why not use the command in Declude to do this directly?  In looking at the
 manual it appears to be ROUTETO email address.  You could do this for
the
 WEIGHT20 Piece.


I'm not sending all WEIGHT20 to a separate e-mail address.  I'm shooting it
to a sub mailbox.  For this I would use the MAILBOX action, and that
requires PRO which we do not have.


Jason



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Grant Griffith - Declude JM
Not sure if this would really work, but you could send it to a separate
mailbox using the ROUTETO function by putting [EMAIL PROTECTED]
Will this work if it is to the same user?  Might be a way around the
problem?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jason @ AreaTech
Sent: Tuesday, June 29, 2004 4:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Messages slipping through JM


- Original Message -
From: Grant Griffith - Declude JM [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 4:19 PM
Subject: RE: [Declude.JunkMail] Messages slipping through JM


 Why not use the command in Declude to do this directly?  In looking at the
 manual it appears to be ROUTETO email address.  You could do this for
the
 WEIGHT20 Piece.


I'm not sending all WEIGHT20 to a separate e-mail address.  I'm shooting it
to a sub mailbox.  For this I would use the MAILBOX action, and that
requires PRO which we do not have.


Jason



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] WAY WAY OT: Attn Greg Foulks

2004-06-29 Thread John Tolmachoff \(Lists\)
Sent via list since he claims he has not received e-mails directly from me.

It appears you are not receiving e-mail from me, even though your server
accepted it:

29-06-2004  12:16:47Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) processing F:\Spool\Qc00c0c68022cd4c1.SMD
29-06-2004  12:16:47Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) [x] looking up nfti.com in HOSTS and MX
29-06-2004  12:16:47Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) Trying nfti.com (0)
29-06-2004  12:16:47Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) [x] Connecting socket to service SMTP on host
nfti.com using protocol tcp
29-06-2004  12:16:47Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) Connect nfti.com [12.32.70.215:25] (1)
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 220 X1 Who is this
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) EHLO mail.eservicesforyou.com
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250-mail.nfti.com says hello
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250-SIZE 0
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250-8BITMIME
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250-DSN
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250-ETRN
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250-AUTH LOGIN
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250-AUTH=LOGIN
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250 EXPN
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) MAIL FROM:[EMAIL PROTECTED]
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250 ok
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) RCPT To:[EMAIL PROTECTED]
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250 ok its for [EMAIL PROTECTED]
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) DATA
29-06-2004  12:16:48Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 354 ok, send it; end with CRLF.CRLF
29-06-2004  12:16:51Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) .
29-06-2004  12:16:51Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 250 Message queued
29-06-2004  12:16:51Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) rdeliver nfti.com [EMAIL PROTECTED] (1)
[EMAIL PROTECTED] 235342
29-06-2004  12:16:51Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) QUIT
29-06-2004  12:16:51Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) 221 Goodbye
29-06-2004  12:16:51Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) [u] closing socket (u)
29-06-2004  12:16:51Local7.Debug127.0.0.1   SMTP
(c00c0c68022cd4c1) finished F:\Spool\Qc00c0c68022cd4c1.SMD status=1

John Tolmachoff
Engineer/Consultant/Owner
eServices For You


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Jason @ AreaTech
Don't believe that will work.  Does anyone know why a forwarded message
isn't processed by the rules?

Thanks,

Jason


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith
- Declude JM
Sent: Tuesday, June 29, 2004 4:44 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Messages slipping through JM


Not sure if this would really work, but you could send it to a separate
mailbox using the ROUTETO function by putting
[EMAIL PROTECTED] Will this work if it is to the same user?
Might be a way around the problem?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Jason @ AreaTech
Sent: Tuesday, June 29, 2004 4:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Messages slipping through JM


- Original Message -
From: Grant Griffith - Declude JM [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 4:19 PM
Subject: RE: [Declude.JunkMail] Messages slipping through JM


 Why not use the command in Declude to do this directly?  In looking at

 the manual it appears to be ROUTETO email address.  You could do 
 this for
the
 WEIGHT20 Piece.


I'm not sending all WEIGHT20 to a separate e-mail address.  I'm shooting
it to a sub mailbox.  For this I would use the MAILBOX action, and that
requires PRO which we do not have.


Jason



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Messages slipping through JM

2004-06-29 Thread Matt




IMail is not perfect and I suspect that unless this happens very often
on a range of message types, that this is related to a bug in IMail.

If you noticed, the message that you shared with the list was only a
partial message, although it looks much more substantial after Declude
adds it's headers. I see this stuff all the time, especially from spam
networks like Wholesalebandwidth. Most of these just litter my spool,
however for some reason IMail goes ahead and processes many of them.
They almost all generally end the same way, with a broken Message-ID
and no To, From or Subject headers. I believe that this is the product
of a common error in a particular piece of spamware..

Here's what I think is happening...I believe that you probably have an
IMail rule that is verifying specifically data located in the header.
Since this message has no body (signified by a double line break after
the headers), and the headers are munged, IMail may be experiencing a
parsing error and is unable to check your rule against the header.

It may be possible that Scott could fix this with Declude inserting
extra line breaks in this special situation so that the IMail rules
would work, but only if it is related to not having double line
breaks. Of course Ipswitch could also fix this and in reality it is
their problem if I am correct. If this just happens with munged
messaged with no bodies, I'm very likely to be right about this,
otherwise I'm very likely to be wrong about it :)

Matt



Jason @ AreaTech wrote:

  Don't believe that will work.  Does anyone know why a forwarded message
isn't processed by the rules?

Thanks,

Jason


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Grant Griffith
- Declude JM
Sent: Tuesday, June 29, 2004 4:44 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Messages slipping through JM


Not sure if this would really work, but you could send it to a separate
mailbox using the ROUTETO function by putting
[EMAIL PROTECTED]??? Will this work if it is to the same user?
Might be a way around the problem?

Sincerely,
Grant Griffith
EI8HT LEGS Enhanced Web Management
A Division of ETC
http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jason @ AreaTech
Sent: Tuesday, June 29, 2004 4:44 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Messages slipping through JM


- Original Message -
From: "Grant Griffith - Declude JM" [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 4:19 PM
Subject: RE: [Declude.JunkMail] Messages slipping through JM


  
  
Why not use the command in Declude to do this directly?  In looking at

  
  
  
  
the manual it appears to be ROUTETO email address.  You could do 
this for

  
  the
  
  
WEIGHT20 Piece.

  
  

I'm not sending all WEIGHT20 to a separate e-mail address.  I'm shooting
it to a sub mailbox.  For this I would use the MAILBOX action, and that
requires PRO which we do not have.


Jason



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  


-- 
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=




Re[2]: [Declude.JunkMail] Hung/zombie Declude Processes

2004-06-29 Thread Sanford Whiteman
 Is there a way to run the test for a single message.

If you can stop SMTPD32 for a moment...or stop Declude for a moment.

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange Addresses into IMail Aliases!
  
http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.