[Declude.JunkMail] Solution for Mail-backup
A customer is asking us if we can keep a copy of each incomming and outgoing message for his mailboxes on our server. I have no problem to set up declude.junkmail rules/actions so that incomming messages are copied to a separate mailbox. But we use also WHITELIST AUTH and so I can't find a solution to copy also outgoing messages. Is there something I can do in declude junkmail? Maybe with Imail rules? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Solution for Mail-backup
Why not use the Imail copyall function? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Markus Gufler Sent: Tuesday, October 12, 2004 12:54 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Solution for Mail-backup A customer is asking us if we can keep a copy of each incomming and outgoing message for his mailboxes on our server. I have no problem to set up declude.junkmail rules/actions so that incomming messages are copied to a separate mailbox. But we use also WHITELIST AUTH and so I can't find a solution to copy also outgoing messages. Is there something I can do in declude junkmail? Maybe with Imail rules? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Solution for Mail-backup
Why not use the Imail copyall function? Thanks but I believe this will not work on a server hosting hundreds of virtual domains and thousands of mailboxes if only one virtual domain should be backed up. At the moment I'm looking to find a solution with imail rules. (never used them up to now :-) Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Decoded subject lines in logfile
As I know declude.junkmail is able to decode base64 or quoted-printable subject lines. Would it be possible to write this decoded lines in the logfile? Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Solution for Mail-backup
You should be able to use Imail's copyall function in conjunction with Imail rules - Original Message - From: Markus Gufler [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 4:28 AM Subject: RE: [Declude.JunkMail] Solution for Mail-backup Why not use the Imail copyall function? Thanks but I believe this will not work on a server hosting hundreds of virtual domains and thousands of mailboxes if only one virtual domain should be backed up. At the moment I'm looking to find a solution with imail rules. (never used them up to now :-) Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Solution for Mail-backup
You should be able to use Imail's copyall function in conjunction with Imail rules At the moment I'm watching how the solution will work. As virtual hosts in Imail can't have outbound rules I've set a rule for the only primary host looking if the mailfrom adress contains the customers domain name. If yes the message should by copied also to a local mailbox. The inbound rule is set for the customers virtual host only. Two test-messages I've send was delivered and also stored in the mailbox. Now I'm looking if it will work also with real messages from/to the customer. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Solution for Mail-backup
I thinh you may be able to just set up a rule to look in the header for the virtual domain you are looking for -- I think this will get moth incoming and outgoing jp On Tue, 12 Oct 2004 13:44:19 +0200, Markus Gufler [EMAIL PROTECTED] wrote: You should be able to use Imail's copyall function in conjunction with Imail rules At the moment I'm watching how the solution will work. As virtual hosts in Imail can't have outbound rules I've set a rule for the only primary host looking if the mailfrom adress contains the customers domain name. If yes the message should by copied also to a local mailbox. The inbound rule is set for the customers virtual host only. Two test-messages I've send was delivered and also stored in the mailbox. Now I'm looking if it will work also with real messages from/to the customer. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Solution for Mail-backup
I thinh you may be able to just set up a rule to look in the header for the virtual domain you are looking for -- I think this will get moth incoming and outgoing Hmm, will this really work? In Imail v8 I can se only the inbound rules tab for virtual hosts. I've tested this before by creating two rules (mailfrom and mailto) for this virtual domain but unfortunately this has catched only incomming messages. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Solution for Mail-backup
I think I did it as a rule on the copyall user's account... - Original Message - From: Markus Gufler [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 8:11 AM Subject: RE: [Declude.JunkMail] Solution for Mail-backup I thinh you may be able to just set up a rule to look in the header for the virtual domain you are looking for -- I think this will get moth incoming and outgoing Hmm, will this really work? In Imail v8 I can se only the inbound rules tab for virtual hosts. I've tested this before by creating two rules (mailfrom and mailto) for this virtual domain but unfortunately this has catched only incomming messages. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
6.3 Acting as a gateway for domains on other servers The only catch as far as Declude JunkMail is concerned is that IMail will treat the E-mail to the gateway domain as outgoing mail, since it is not stored on the IMail server. Therefore, by default, the outgoing actions in the \IMail\Declude\global.cfg file will be used. To get around this, you can set up per-domain configuration files for the gateway domains. Hello All, I'm trying to setup my server to act as a gateway and I have the Imail part working. I'm having trouble with the declude part though. I can't seem to get my server to scan for junkmail for the domain that I'm acting as a gateway. I have added the folder for the FORWARDDOMAIN.COM and added the $default$.junkmail file. What am I missing on the per-domain configuration? Thanks Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Do you have Junkmail Pro? This feature is only available in Declude Junkmail Pro. Thanks, Kris McElroy [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Tuesday, October 12, 2004 9:24 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers 6.3 Acting as a gateway for domains on other servers The only catch as far as Declude JunkMail is concerned is that IMail will treat the E-mail to the gateway domain as outgoing mail, since it is not stored on the IMail server. Therefore, by default, the outgoing actions in the \IMail\Declude\global.cfg file will be used. To get around this, you can set up per-domain configuration files for the gateway domains. Hello All, I'm trying to setup my server to act as a gateway and I have the Imail part working. I'm having trouble with the declude part though. I can't seem to get my server to scan for junkmail for the domain that I'm acting as a gateway. I have added the folder for the FORWARDDOMAIN.COM and added the $default$.junkmail file. What am I missing on the per-domain configuration? Thanks Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Solution for Mail-backup
I think I did it as a rule on the copyall user's account... This is the recommended method. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Yes.. Declude JunkMail Status: PRO version registered. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kris McElroy Sent: Tuesday, October 12, 2004 9:34 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers Do you have Junkmail Pro? This feature is only available in Declude Junkmail Pro. Thanks, Kris McElroy [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Tuesday, October 12, 2004 9:24 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers 6.3 Acting as a gateway for domains on other servers The only catch as far as Declude JunkMail is concerned is that IMail will treat the E-mail to the gateway domain as outgoing mail, since it is not stored on the IMail server. Therefore, by default, the outgoing actions in the \IMail\Declude\global.cfg file will be used. To get around this, you can set up per-domain configuration files for the gateway domains. Hello All, I'm trying to setup my server to act as a gateway and I have the Imail part working. I'm having trouble with the declude part though. I can't seem to get my server to scan for junkmail for the domain that I'm acting as a gateway. I have added the folder for the FORWARDDOMAIN.COM and added the $default$.junkmail file. What am I missing on the per-domain configuration? Thanks Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Debug helps.. 10/12/2004 11:22:50 Q04d82aa002a0abe8 E-mail whitelisted - automatically passing all spam tests [declude.com] I was sending the test messages from the Declude Spam Tester site. Removed declude from the whitelist and it looks like everything will work now. Thanks, Mike -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kris McElroy Sent: Tuesday, October 12, 2004 10:45 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers Depending on how it is setup you may have to have the following folder either mail.domain.com or domain.com, I would try one then the other and see which one works for your install. Also turn your loglevel to debug and show us some output so that we can help you out. Thanks, Kris McElroy [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Tuesday, October 12, 2004 10:38 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers Yes.. Declude JunkMail Status: PRO version registered. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kris McElroy Sent: Tuesday, October 12, 2004 9:34 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers Do you have Junkmail Pro? This feature is only available in Declude Junkmail Pro. Thanks, Kris McElroy [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Tuesday, October 12, 2004 9:24 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers 6.3 Acting as a gateway for domains on other servers The only catch as far as Declude JunkMail is concerned is that IMail will treat the E-mail to the gateway domain as outgoing mail, since it is not stored on the IMail server. Therefore, by default, the outgoing actions in the \IMail\Declude\global.cfg file will be used. To get around this, you can set up per-domain configuration files for the gateway domains. Hello All, I'm trying to setup my server to act as a gateway and I have the Imail part working. I'm having trouble with the declude part though. I can't seem to get my server to scan for junkmail for the domain that I'm acting as a gateway. I have added the folder for the FORWARDDOMAIN.COM and added the $default$.junkmail file. What am I missing on the per-domain configuration? Thanks Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
The only catch as far as Declude JunkMail is concerned is that IMail will treat the E-mail to the gateway domain as outgoing mail, since it is not stored on the IMail server. Note that standard IMail store-and-forward setups create implicit 'nobody' aliases, friends to spammers and enemies of your server resources. If the mailbox server for these domains is running Exchange, IMail 8, or any LDAPv3 server, I strongly recommend the use of one of our replication scripts for securing your s/f domain against spammers. See my sig. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Solution for Mail-backup
I think I did it as a rule on the copyall user's account... Ah, now I understand. The idea is to activate the copy-all function and set rules for the copyall mailbox so that messages for/from a certain domain will be forwarded to another backup-mailbox and all other messages will be deleted. Thanks Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Sandy, I have setup the gateway in my hosts file and the MX records for that gateway is pointing to my declude server. It looks like what you are saying is my server will try to process every non-user to the gateway machine, correct?? Does this script create registry keys for the gateway users, or how does this work? Thanks, Mike -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Tuesday, October 12, 2004 11:52 AM To: Mike Wiegers Subject: Re: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers Note that standard IMail store-and-forward setups create implicit 'nobody' aliases, friends to spammers and enemies of your server resources. If the mailbox server for these domains is running Exchange, IMail 8, or any LDAPv3 server, I strongly recommend the use of one of our replication scripts for securing your s/f domain against spammers. See my sig. --Sandy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
I have setup the gateway in my hosts file and the MX records for that gateway is pointing to my declude server. It looks like what you are saying is my server will try to process every non-user to the gateway machine, correct?? Yes. Does this script create registry keys for the gateway users, or how does this work? It creates and updates IMail aliases for a remote userbase retrieved over LDAP. You just schedule it to run every 5-10 minutes. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Where would I manually create these aliases? -Original Message- Does this script create registry keys for the gateway users, or how does this work? It creates and updates IMail aliases for a remote userbase retrieved over LDAP. You just schedule it to run every 5-10 minutes. --Sandy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Where would I manually create these aliases? Manually? Under a virtual host, like any aliases. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spammers working OT
We are running Declude and Sniffer on Imail 8.05. One of our nationally accessed domains, xyz.com, has been under constant dictionary attacks with 320,000 messages per day average for 265 e-mail addresses/aliases. After I installed our first Linux box as a gateway with Postfix the number dropped to less than a 10th of the original traffic. I made sure the now single dns mx record for the domain points at the Postfix box. (mail04.mainISP.net) I left the original mail.xyz.com A record in place to allow those domain customers to use the same POP/SMTP server settings. I will be adding a second Postfix box to act as a gateway to our backup mail server. Within the last few days it appears the spammers figured it out and are not using the mx record and going direct to the mail server. Anyone seen this? I am trying to avoid changing the smtp/pop server settings for my customers since the spammers may just look at our support pages and bypass our Postfix machine again. Any suggestions??? Pissed but determined in Seattle, Michael Jaworski Puget Sound Network, Inc. (206) 217-0400 (800) 599-9485 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spammers working OT
Within the last few days it appears the spammers figured it out and are not using the mx record and going direct to the mail server. Anyone seen this? Yep, of course. The only course of action is to ensure that all servers that accept unauthenticated mail for your domain institute the same, or sufficiently similar, anti-DoS and anti-spam defenses. Setting up an authentication-only, submission-only server on port 587 would be the preferred method for exposing a server to your roaming clients. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Sandy- Do you know what Ipswitch's position is on licensing the gateway server? It looks like the small business version is limited to five domains, but is that domains with mailboxes only? Will the SB version do OK with several hundred domains when acting only as a gateway? Or do we need to pay the full price for the pro version all over again to set up a gateway? -d - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Mike Wiegers [EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 3:33 PM Subject: Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers I have setup the gateway in my hosts file and the MX records for that gateway is pointing to my declude server. It looks like what you are saying is my server will try to process every non-user to the gateway machine, correct?? Yes. Does this script create registry keys for the gateway users, or how does this work? It creates and updates IMail aliases for a remote userbase retrieved over LDAP. You just schedule it to run every 5-10 minutes. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
We have Imail setup as an Gateway server. I contacted Imail because I had the same question. They told me that you can use the small business edition as a gateway. There is no limit on domains when it is acting as an gateway. Matt Goodhue -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Tuesday, October 12, 2004 8:37 PM To: [EMAIL PROTECTED] Subject: Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers Sandy- Do you know what Ipswitch's position is on licensing the gateway server? It looks like the small business version is limited to five domains, but is that domains with mailboxes only? Will the SB version do OK with several hundred domains when acting only as a gateway? Or do we need to pay the full price for the pro version all over again to set up a gateway? -d - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Mike Wiegers [EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 3:33 PM Subject: Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers I have setup the gateway in my hosts file and the MX records for that gateway is pointing to my declude server. It looks like what you are saying is my server will try to process every non-user to the gateway machine, correct?? Yes. Does this script create registry keys for the gateway users, or how does this work? It creates and updates IMail aliases for a remote userbase retrieved over LDAP. You just schedule it to run every 5-10 minutes. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/rel ease/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/dow nload/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/downloa d/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Dave, Ipswitch won't allow for gatewaying except on IMail Small Business or IMail Professional. If you or anyone else is interested in just a simple backup gateway, I've got a server that does address validation that is severely underutilized (hardly ever reaches 1% CPU utilization on minute to minute averages). I set this up partly with the idea in mind that I would provide a cheap backup gateway for other admins. This isn't designed to be a big profit center for me and it should be significantly less expensive than buying the software and hardware for yourself, and it provides a redundant network for those that don't already have one. If you prefer to do this yourself, I use MS SMTP with VAMSoft ORF to pull this off (Sandy originally recommended this many months ago). MS SMTP allows you to customize the settings for each instance, and ORF will do envelope rejection of individual RCPT To's to stave off dictionary attacks without hardly any CPU or bandwidth overhead. I do plan on doing some very limited blocking on the server for things like dictionary attack IP's and are safe to block, with the data generated from the logging of multiple rejected recipients in a specific pattern, and expired after a period of inactivity. We will import addresses in the IMailUsers export format with one address per line, and a process that monitors drop directories for new files and updates the gateways when found. I actually run ORF on my IMail server also so that I can do envelope rejection for gatewayed domains. Maybe this isn't exactly what you are looking for, but I figured that I would put it out there for you and others to chew on. Matt Dave Doherty wrote: Sandy- Do you know what Ipswitch's position is on licensing the gateway server? It looks like the small business version is limited to five domains, but is that domains with mailboxes only? Will the SB version do OK with several hundred domains when acting only as a gateway? Or do we need to pay the full price for the pro version all over again to set up a gateway? -d - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Mike Wiegers [EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 3:33 PM Subject: Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers I have setup the gateway in my hosts file and the MX records for that gateway is pointing to my declude server. It looks like what you are saying is my server will try to process every non-user to the gateway machine, correct?? Yes. Does this script create registry keys for the gateway users, or how does this work? It creates and updates IMail aliases for a remote userbase retrieved over LDAP. You just schedule it to run every 5-10 minutes. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Matt, Can you give a rough overview on how you integrated ORF on your boxes? Thanks Darrell --- Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, MRTG Integration, and Log Parsers. - Original Message - From: Matt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 9:36 PM Subject: Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers Dave, Ipswitch won't allow for gatewaying except on IMail Small Business or IMail Professional. If you or anyone else is interested in just a simple backup gateway, I've got a server that does address validation that is severely underutilized (hardly ever reaches 1% CPU utilization on minute to minute averages). I set this up partly with the idea in mind that I would provide a cheap backup gateway for other admins. This isn't designed to be a big profit center for me and it should be significantly less expensive than buying the software and hardware for yourself, and it provides a redundant network for those that don't already have one. If you prefer to do this yourself, I use MS SMTP with VAMSoft ORF to pull this off (Sandy originally recommended this many months ago). MS SMTP allows you to customize the settings for each instance, and ORF will do envelope rejection of individual RCPT To's to stave off dictionary attacks without hardly any CPU or bandwidth overhead. I do plan on doing some very limited blocking on the server for things like dictionary attack IP's and are safe to block, with the data generated from the logging of multiple rejected recipients in a specific pattern, and expired after a period of inactivity. We will import addresses in the IMailUsers export format with one address per line, and a process that monitors drop directories for new files and updates the gateways when found. I actually run ORF on my IMail server also so that I can do envelope rejection for gatewayed domains. Maybe this isn't exactly what you are looking for, but I figured that I would put it out there for you and others to chew on. Matt Dave Doherty wrote: Sandy- Do you know what Ipswitch's position is on licensing the gateway server? It looks like the small business version is limited to five domains, but is that domains with mailboxes only? Will the SB version do OK with several hundred domains when acting only as a gateway? Or do we need to pay the full price for the pro version all over again to set up a gateway? -d - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Mike Wiegers [EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 3:33 PM Subject: Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers I have setup the gateway in my hosts file and the MX records for that gateway is pointing to my declude server. It looks like what you are saying is my server will try to process every non-user to the gateway machine, correct?? Yes. Does this script create registry keys for the gateway users, or how does this work? It creates and updates IMail aliases for a remote userbase retrieved over LDAP. You just schedule it to run every 5-10 minutes. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/download/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail
Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Sure. The backup server just runs MS SMTP with ORF (ORF works within MS SMTP). I use the address blacklist in ORF to limit just addresses that match what I give, and it will accept wildcards for the domains that I don't currently have complete address lists for. ORF loads the config from an INI file when the server starts, so updating the config is just a matter of overwriting the file and restarting the ORF service. I also have IMail and Declude on this server sitting dormant with my config from the master server so that I can turn it on in the case of a prolonged failure and still provide gateway scanning (hosted E-mail would be spooled). MS SMTP is set up to send all E-mail to my master server on port 587 which IMail listens on. On my master server, I have MS SMTP with ORF installed and listening on port 25, and IMail with Declude listening on port 587. In order to provide connectivity to my hosted clients, I have a port redirection for the proper IP so that traffic to port 25 is redirected to port 587 using a router to do this, and when it goes out, it also redirects 587 back to port 25 on this IP. This port is the RFC specified SMTP Auth port, and while IMail doesn't support Auth only on this port, it does give me the ability to let hosted clients configure themselves on port 587 in order to avoid being blocked by providers like MSN, Earthlink, Comcast, etc, and it works over port 25 just the same. The MS SMTP with ORF installation on the master server is the same as that on the backup gateway. If the E-mail has valid recipients, it is passed onto IMail running on the same box with port 587. All of my MX records point to the MS SMTP with ORF IP's and not the IMail with Declude IP. I'm running dual 3 GHz Xeons on both the backup and master servers with 6 and 5 15,000 RPM Cheetahs, both in RAID 5, albeit one less drive and less cash on the RAID controller for the backup, but I doubt that will be an issue. For the standard traffic that gets to IMail, I figure it can handle about 500,000 messages a day with dual virus scanners, Sniffer, and a lean but capable set of custom Declude filters. By digging through the logs on both ORF and Declude, I am fairly certain that I can blacklist IP's with +99.999% confidence and extend the message capacity to over 1 million when you consider what may be blocked, but for now the only thing that needs to be blocked are the invalid addresses from multiple long-running dictionary attacks that are generating significant volume on their own. It takes next to no processing power to block an invalid address with ORF. I'm currently working on the processes that will allow for customers to export their user lists to us. I'm using DTS packages in MS SQL on a separate server to take in the data and only update the gateways when changes are detected so that I don't have to stop and start the ORF service unnecessarily. I plan on creating scripts for customers with different systems that will output these files and upload when changes are detected on their end, and there will be a Web interface that will provide manual configuration with exclusions and additions separate from the flat file uploads. This is a lot of work, but it's something that I've been working towards for a while now and now have the capabilities to support. One additional benefit to this is that MS SMTP has a much better spool, with customizable settings per instance. I can limit the number of connections per domain so that I am protected from being completely taken down by things like loops and other attacks running through my server, and limit the total connections across all domains so that I don't overwhelm IMail with Declude causing virus scanners to time out. IMail also seems to hang on to incomplete connections for 15 to 30 minutes and there were constantly over 100 messages in the IMail spool, but now my spool is only active stuff, and I have MS SMTP set to kill connections after 1 minute of inactivity. I believe that MS SMTP and ORF being services will take precedence to Declude, so even if Declude is chugging the server, it should still accept E-mail in MS SMTP and retry delivery to IMail until it is ready to handle the load, so the server is more stable under heavy loads as compared to IMail with Declude alone. I would much rather Declude act with just MS SMTP so that this could be simplified, but this isn't so overwhelmingly kludgey that it is difficult to administrate. If you have any more specific questions, ask away, although I've just given away a very hard thought out environment design and probably already said too much :) I am definitely interested in doing simple address validating gatewaying for other Declude users though, and I wouldn't be offering if I thought that there wasn't a huge cost benefit to others leveraging my system in certain instances, but of course if you enjoy this stuff and have the cash, building this for yourself isn't difficult except for automating the address
[Declude.JunkMail] How did this trigger my filter?
Hi, I have the following line in a filter: BODY 20 CONTAINS You=92ll It triggered on an HTML e-mail: 10/06/2004 19:20:02 Q7d8a0030012efa97 Triggered BODY CONTAINS filter WORDMASK on You=92ll [weight-20; you=92ll find marketing tools ]. Now in the HTML e-mail there is only one instance of find marketing tools and it looks like (from View Source) pPartnerweb gives all Extreme Networks authorized partners (ESP, EASP and distributors) 24/7 access to a password protected web site that delivers the tools and resources needed to develop and close opportunities. In addition to information on training and certification programs, product updates, and Extreme promotional campaigns, you'll find marketing tools that give you the sales edge, such as vertical market information designed to meet the unique needs of education, healthcare and government customers. So my question is how did the ' get interpreted as an =92? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] How did this trigger my filter?
I would make sure that your view source is the true source and not an interpreted source. It appears that you are using Exchange Web mail, and I wouldn't be surprised to see this behavior in a Web mailer. This is almost guaranteed to be the case here. Matt Goran Jovanovic wrote: Hi, I have the following line in a filter: BODY 20 CONTAINS You=92ll It triggered on an HTML e-mail: 10/06/2004 19:20:02 Q7d8a0030012efa97 Triggered BODY CONTAINS filter WORDMASK on You=92ll [weight-20; you=92ll find marketing tools ]. Now in the HTML e-mail there is only one instance of find marketing tools and it looks like (from View Source) pPartnerweb gives all Extreme Networks authorized partners (ESP, EASP and distributors) 24/7 access to a password protected web site that delivers the tools and resources needed to develop and close opportunities. In addition to information on training and certification programs, product updates, and Extreme promotional campaigns, you'll find marketing tools that give you the sales edge, such as vertical market information designed to meet the unique needs of education, healthcare and government customers. So my question is how did the ' get interpreted as an =92? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How did this trigger my filter?
Matt, The view source is from my Outlook client so not sure if it really is true source or not. Is there anything in the headers that would indicate that this was sent via an Exchange Web mail? I have the headers but do not really see anything indicating what sent it. There is no X-Mailer etc. Any thoughts? Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Matt Sent: Tuesday, October 12, 2004 11:04 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] How did this trigger my filter? I would make sure that your view source is the true source and not an interpreted source. It appears that you are using Exchange Web mail, and I wouldn't be surprised to see this behavior in a Web mailer. This is almost guaranteed to be the case here. Matt Goran Jovanovic wrote: Hi, I have the following line in a filter: BODY 20 CONTAINS You=92ll It triggered on an HTML e-mail: 10/06/2004 19:20:02 Q7d8a0030012efa97 Triggered BODY CONTAINS filter WORDMASK on You=92ll [weight-20; you=92ll find marketing tools ]. Now in the HTML e-mail there is only one instance of find marketing tools and it looks like (from View Source) pPartnerweb gives all Extreme Networks authorized partners (ESP, EASP and distributors) 24/7 access to a password protected web site that delivers the tools and resources needed to develop and close opportunities. In addition to information on training and certification programs, product updates, and Extreme promotional campaigns, you'll find marketing tools that give you the sales edge, such as vertical market information designed to meet the unique needs of education, healthcare and government customers. So my question is how did the ' get interpreted as an =92? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
I wanted to point out that Imail does have a limitation which relates to the number of domains. (Hopefully it may save you some time which I spent learning the hard way.) When you setup a domain as a gateway with Imail you need to add an entry to the HOSTS file and also allow relaying for the IP address mentioned in the host file. However there is a limit of 100 IP address entries (groups or individual IPs) in the Imail SMTP security area. I ran into this back in version 7.x and I don't think it was changed in 8.x. If you are relaying all your domains to the same location, then it's not a problem, but if it's for filtering remote domains, then you'll want to look at some other options such as sending everything to IIS/SMTP on a different port once Declude is done scanning. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Goodhue Sent: Tuesday, October 12, 2004 6:32 PM To: [EMAIL PROTECTED] Subject: RE: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers We have Imail setup as an Gateway server. I contacted Imail because I had the same question. They told me that you can use the small business edition as a gateway. There is no limit on domains when it is acting as an gateway. Matt Goodhue -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Tuesday, October 12, 2004 8:37 PM To: [EMAIL PROTECTED] Subject: Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers Sandy- Do you know what Ipswitch's position is on licensing the gateway server? It looks like the small business version is limited to five domains, but is that domains with mailboxes only? Will the SB version do OK with several hundred domains when acting only as a gateway? Or do we need to pay the full price for the pro version all over again to set up a gateway? -d - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Mike Wiegers [EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 3:33 PM Subject: Re: [OT] RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers I have setup the gateway in my hosts file and the MX records for that gateway is pointing to my declude server. It looks like what you are saying is my server will try to process every non-user to the gateway machine, correct?? Yes. Does this script create registry keys for the gateway users, or how does this work? It creates and updates IMail aliases for a remote userbase retrieved over LDAP. You just schedule it to run every 5-10 minutes. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/products/software/freeutils/SPAMC32/download/rel ease/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.mailmage.com/products/software/freeutils/exchange2aliases/dow nload/release/ http://www.mailmage.com/products/software/freeutils/ldap2aliases/downloa d/release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] How did this trigger my filter?
I was looking at your headers and not those of this message because you didn't share those. That also wouldn't have any effect so don't get caught up on that. I believe that the Properties Details Message Source option in Outlook Express does not MIME decode the source, so it would be evident there. I'm not clear on what version of Outlook that you are running and this might be different. Unfortunately Microsoft has decided to mask all sorts of client and server information from their messages, making things look like they originate from the server and without indications of the client or even a Message-ID. You should be able to test your client's capabilities and determine if it interprets MIME encoding. The most common element that you would see in HTML E-mail would be =3D. If you verify that it doesn't interpret, then this would certainly look to be very suspicious and suggestive of a bug. I wouldn't jump to that conclusion though. If you need to regularly do review with your mail client, I strongly advise that you switch to something like Netscape or Thunderbird (new Mozilla E-mail client). Viewing the plain text source is just a matter of Ctrl.+U. Firefox/Thunderbird is poised to take substantial marketshare from Microsoft for the first time since the browser wars began. I'll be switching to Firefox as soon as they go from preview release to actual release, which should be any day now. To each their own of course, but I couldn't deal with doing this and using Outlook. Matt Goran Jovanovic wrote: Matt, The view source is from my Outlook client so not sure if it really is "true" source or not. Is there anything in the headers that would indicate that this was sent via an Exchange Web mail? I have the headers but do not really see anything indicating what sent it. There is no X-Mailer etc. Any thoughts? Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Matt Sent: Tuesday, October 12, 2004 11:04 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] How did this trigger my filter? I would make sure that your view source is the true source and not an interpreted source. It appears that you are using Exchange Web mail, and I wouldn't be surprised to see this behavior in a Web mailer. This is almost guaranteed to be the case here. Matt Goran Jovanovic wrote: Hi, I have the following line in a filter: BODY 20 CONTAINS You=92ll It triggered on an HTML e-mail: 10/06/2004 19:20:02 Q7d8a0030012efa97 Triggered BODY CONTAINS filter WORDMASK on You=92ll [weight-20; you=92ll find marketing tools ]. Now in the HTML e-mail there is only one instance of find marketing tools and it looks like (from View Source) pPartnerweb gives all Extreme Networks authorized partners (ESP, EASP and distributors) 24/7 access to a password protected web site that delivers the tools and resources needed to develop and close opportunities. In addition to information on training and certification programs, product updates, and Extreme promotional campaigns, you'll find marketing tools that give you the sales edge, such as vertical market information designed to meet the unique needs of education, healthcare and government customers. So my question is how did the ' get interpreted as an =92? Thanx Goran Jovanovic The LAN Shoppe --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
