Re: [Declude.JunkMail] How to stop second virus scan when first captures the virus.

2005-05-05 Thread Jonathan
And my name .. but my name is probably on there several places over the 
past several years.

It always baffles me why this isn't already built-in - Declude spent so 
much time performance tweaking etc, then they leave the most 
cpu-intensive stuff wide open. It's not like it evaluates the results 
from all the scanners, and makes a decision on whether or not it's a 
virus or a false-positive. Back in the early days, I had a hunch they 
would come out with a "Pro" version, and stuff like this would be in 
there .. but then they did come out with a Pro, and still no dice.

*confused*
Jonathan
John Tolmachoff (Lists) wrote:
Add my name to the list of users asking for this.
John T
eServices For You
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
Sent: Thursday, May 05, 2005 5:38 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] How to stop second virus scan when first
   

captures
 

the virus.
David,
Unfortuantly, this is not a feature.  It is one that we have been asking
   

for
 

as well.  If we ever get this feature I know for one thing I am going to
move F-Prot to my first scanner and enable this.  Mcafee while a great
scanner it is very CPU intensive.
Darrell

Check out http://www.invariantsystems.com for utilities for Declude And
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
   

MRTG
 

Integration, and Log Parsers.
David writes:
   

Hey all,
   Any help on this would be greatly appreciated.  WE are
 

currently
 

running 2 antivirus filters and with the huge surge of viruses the last
couple days its come to my attention that I could spare a significant
 

amount
 

of CPU if I could prevent my second antivirus from running if my first
 

AV
 

catches the email.  We are using f-prot and mcafee.  Thanks again

-David
 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
   

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] How to stop second virus scan when first captures the virus.

2005-05-05 Thread John Tolmachoff \(Lists\)
Add my name to the list of users asking for this.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
> Sent: Thursday, May 05, 2005 5:38 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] How to stop second virus scan when first
captures
> the virus.
> 
> David,
> 
> Unfortuantly, this is not a feature.  It is one that we have been asking
for
> as well.  If we ever get this feature I know for one thing I am going to
> move F-Prot to my first scanner and enable this.  Mcafee while a great
> scanner it is very CPU intensive.
> 
> Darrell
>  
> Check out http://www.invariantsystems.com for utilities for Declude And
> Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG
> Integration, and Log Parsers.
> 
> 
> David writes:
> 
> > Hey all,
> >
> > Any help on this would be greatly appreciated.  WE are
currently
> > running 2 antivirus filters and with the huge surge of viruses the last
> > couple days its come to my attention that I could spare a significant
amount
> > of CPU if I could prevent my second antivirus from running if my first
AV
> > catches the email.  We are using f-prot and mcafee.  Thanks again
> >
> >
> >
> > -David
> >
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] How to stop second virus scan when first captures the virus.

2005-05-05 Thread Darrell \([EMAIL PROTECTED])
David, 

Unfortuantly, this is not a feature.  It is one that we have been asking for 
as well.  If we ever get this feature I know for one thing I am going to 
move F-Prot to my first scanner and enable this.  Mcafee while a great 
scanner it is very CPU intensive. 

Darrell

Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers. 

David writes: 

Hey all, 

Any help on this would be greatly appreciated.  WE are currently
running 2 antivirus filters and with the huge surge of viruses the last
couple days its come to my attention that I could spare a significant amount
of CPU if I could prevent my second antivirus from running if my first AV
catches the email.  We are using f-prot and mcafee.  Thanks again 

  

-David 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] How to stop second virus scan when first captures the virus.

2005-05-05 Thread David








Hey all,

    Any help on this would be greatly appreciated. 
WE are currently running 2 antivirus filters and with the huge surge of viruses
the last couple days its come to my attention that I could spare a significant amount
of CPU if I could prevent my second antivirus from running if my first AV
catches the email.  We are using f-prot and mcafee.  Thanks again

 

-David








[Declude.JunkMail] Incremental Release

2005-05-05 Thread [EMAIL PROTECTED]
For the foreseeable future Declude will be following a different release
strategy.

Beginning today we will be issuing Incremental Releases on a regular basis.
These releases should be regarded as Beta Code although they will be fully
documented and supported.

After a number of releases have been issued and tested a new version will be
made available consisting of the rolled up Incremental Releases.

The release is available as usual for those customers with valid service
agreements from the 'My Account' page.

If you have any questions please feel free to contact me.


Barry Simpson
www.declude.com
Office (866) 332-583


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] IPBYPASS and IMGate

2005-05-05 Thread Dan Horne
Hi, I currently have my Declude config set to IPBYPASS my Imgate box.  I
added clamav to IMGage via amavisd-new, but it is causing problems due
to amavisd-new's headers.  It adds a received header when postfix passes
to amavisd-new, and postfix adds another header when it gets passed
back.  So by the time Imail/Declude sees it, the headers look like:

1)Received from sender (with sender's ip address) by postfix
2)Received from localhost (postfix at 127.0.0.1) by amavis
3)Received from localhost (amavis at 127.0.0.1) by postfix
4)Received from postfix (with gateway's ip address) by Imail

I'm looking for a way to get clamav integrated into postfix without
adding these extra headers, but that is not for this forum.  Someone on
the IMGate list suggested I IPBYPASS 127.0.0.1.  This would solve the
problem, but will it cause any other issues?

Thanks,

Dan Horne
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] AV After Junkmail

2005-05-05 Thread Markus Gufler
Yes I've reverted back because Junkmail has catched many virus messages.

As we've had running vulnerability alerts containing a requeue link there
was a risk, that certain users click on a link to requeue an infected
message.
As we don't send out vulnerability alerts anymore maybe it would be an idea
to think about reenabling AVAFTERJM.

Markus



> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Darrell ([EMAIL PROTECTED])
> Sent: Thursday, May 05, 2005 2:16 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] AV After Junkmail
> 
> Markus,
> 
> Does this mean you reverted back?  I only ask this because 
> you mention you had it on for a long time until 2004.
> 
> Darrell
> ---
> invURIBL - Intelligent URI Filtering.  Stops 85%+ SPAM with 
> the default configuration.
> Download a copy today - http://www.invariantsystems.com
> 
> - Original Message -
> From: "Markus Gufler" <[EMAIL PROTECTED]>
> To: 
> Sent: Wednesday, May 04, 2005 6:43 PM
> Subject: RE: [Declude.JunkMail] AV After Junkmail
> 
> 
> >
> > > How many people are running this "AVAFTERJM ON".  Also, I am
> > > curious to see what your experience with this has been.
> > > Besides being careful about returning messages to the queue
> > > was there any other downsides?
> >
> > I've had set this switch to ON for a long time until 2004 
> has begun the
> > still continuing wave of mail worms. This has caused many many virus
> > messages being hold as spam. A lot more of review work and 
> as you said the
> > risk that some human could requeue a message who seems 
> legit but contains
> a
> > virus.
> >
> > Markus
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Outbound Scanning

2005-05-05 Thread Jeff Robertson
We are running SmarterMail 2.5 and came across the same problem.  Any time
our customers were on a dynamic spamlisted IP, their email to others in
their office would get held as spam.  Needless to say, this didn't go over
well.  We fixed the problem with SPF.  We run the SPF FAIL test, and then we
have a custom filter.

In global.cfg:

SPFFAIL spf FAIL x 30 0
...
LOCALDOM filter [declude path]\Filters\LocalDom.txt x 0 0

In LocalDom.txt:

TESTSFAILED END CONTAINS SPFFAIL
MAILFROM -300 ENDSWITH ourdomain1.com
MAILFROM -300 ENDSWITH ourdomain2.com
etc...

The logic is that all of our domains have a functional SPF record.
Therefore, any mail sent from one of our domains will have 300 points taken
off its score (essentially a whitelist in our scoring).  If someone spoofs
one of our domains as the sender, it fails SPF, so the LocalDom test stops
at the first line.  

This seems to be working well (only b/c we have SPF), but we'll be very
happy when the SmarterMail upgrade comes out that relays the authenticated
user info to Declude.  

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Evans Martin
Sent: Thursday, May 05, 2005 7:44 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Outbound Scanning

That would be awesome.  We're planning a switch to SmarterMail soon so it
may be a non issue in the near future if they implement it.

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of David Franco-Rocha [ Declude ]
> Sent: Thursday, May 05, 2005 6:48 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Outbound Scanning
> 
> Evans,
> 
> We have this on a list of possible enhancements for the very near future.
> It
> would, however, be a global setting that applies to the entire server:
> scanning inbound only, outbound only or both.
> 
> David Franco-Rocha
> 
> - Original Message -
> From: "Evans Martin" <[EMAIL PROTECTED]>
> To: 
> Sent: Thursday, May 05, 2005 2:11 AM
> Subject: RE: [Declude.JunkMail] Outbound Scanning
> 
> 
> Because I'm running 7.15 of IMail.
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Darin Cox
> > Sent: Wednesday, May 04, 2005 6:57 PM
> > To: Declude.JunkMail@declude.com
> > Subject: Re: [Declude.JunkMail] Outbound Scanning
> >
> > If you have Pro, why don't you turn AUTOWHITELIST ON?  That way anyone
> who
> > authenticates is whitelisted.
> >
> > Darin.
> >
> >
> > - Original Message -
> > From: "Evans Martin" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Wednesday, May 04, 2005 7:16 PM
> > Subject: RE: [Declude.JunkMail] Outbound Scanning
> >
> >
> > I'm talking about Junkmail; not Virus.  I'm marking my own outbound mail
> > as
> > spam in a lot of cases.  I want to disable this behavior.
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > > [EMAIL PROTECTED] On Behalf Of Jonathan
> > > Sent: Wednesday, May 04, 2005 6:13 PM
> > > To: Declude.JunkMail@declude.com
> > > Subject: Re: [Declude.JunkMail] Outbound Scanning
> > >
> > > I think you're looking for virus_domains.txt - it has inbound only,
> > > outbound only, both, etc options.
> > >
> > > Jonathan
> > >
> > >
> > > Evans Martin wrote:
> > >
> > > >So there is no way to turn off outbound scanning?
> > > >
> > > >
> > > >
> > > >>-Original Message-
> > > >>From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > > >>[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
> > > >>Sent: Wednesday, May 04, 2005 4:41 PM
> > > >>To: Declude.JunkMail@declude.com
> > > >>Subject: RE: [Declude.JunkMail] Outbound Scanning
> > > >>
> > > >>Then they need to auth to the server. You need 8.x to be able to
> have
> > > >>declude
> > > >>know if the user has authed just set WHITELIST AUTH in yor
> > > >>
> > > >>
> > > >global.cfg
> > > >
> > > >
> > > >>Kevin Bilbee
> > > >>
> > > >>
> > > >>
> > > >>>-Original Message-
> > > >>>From: [EMAIL PROTECTED]
> > > >>>[mailto:[EMAIL PROTECTED] Behalf Of Evans
> Martin
> > > >>>Sent: Wednesday, May 04, 2005 2:24 PM
> > > >>>To: Declude.JunkMail@declude.com
> > > >>>Subject: [Declude.JunkMail] Outbound Scanning
> > > >>>
> > > >>>
> > > >>>I am trying to disable outbound scanning of my domains.  I
> > > >>>commented everything out in the slightly modified from default
> > > >>>global.cfg that came after the outbound section using a # but it
> > > >>>still seems to be scanning outbound.
> > > >>>
> > > >>>I am using per domain configs but I don't see where Declude is
> > > >>>being instructed to scan outbound.  Many of my users are
> > > >>>complaining because their mail goes out tagged as spam.  Help!
> > > >>>
> > > >>>Thanks,
> > > >>>Evans Martin
> > > >>>---
> > > >>>This E-mail came from the Declude.JunkMail mailing list.  To
> > > >>>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > >>>type "unsubscribe Declude.Junk

RE: [Declude.JunkMail] Outbound Scanning

2005-05-05 Thread Evans Martin
That would be awesome.  We're planning a switch to SmarterMail soon so it
may be a non issue in the near future if they implement it.

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of David Franco-Rocha [ Declude ]
> Sent: Thursday, May 05, 2005 6:48 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Outbound Scanning
> 
> Evans,
> 
> We have this on a list of possible enhancements for the very near future.
> It
> would, however, be a global setting that applies to the entire server:
> scanning inbound only, outbound only or both.
> 
> David Franco-Rocha
> 
> - Original Message -
> From: "Evans Martin" <[EMAIL PROTECTED]>
> To: 
> Sent: Thursday, May 05, 2005 2:11 AM
> Subject: RE: [Declude.JunkMail] Outbound Scanning
> 
> 
> Because I'm running 7.15 of IMail.
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Darin Cox
> > Sent: Wednesday, May 04, 2005 6:57 PM
> > To: Declude.JunkMail@declude.com
> > Subject: Re: [Declude.JunkMail] Outbound Scanning
> >
> > If you have Pro, why don't you turn AUTOWHITELIST ON?  That way anyone
> who
> > authenticates is whitelisted.
> >
> > Darin.
> >
> >
> > - Original Message -
> > From: "Evans Martin" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Wednesday, May 04, 2005 7:16 PM
> > Subject: RE: [Declude.JunkMail] Outbound Scanning
> >
> >
> > I'm talking about Junkmail; not Virus.  I'm marking my own outbound mail
> > as
> > spam in a lot of cases.  I want to disable this behavior.
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > > [EMAIL PROTECTED] On Behalf Of Jonathan
> > > Sent: Wednesday, May 04, 2005 6:13 PM
> > > To: Declude.JunkMail@declude.com
> > > Subject: Re: [Declude.JunkMail] Outbound Scanning
> > >
> > > I think you're looking for virus_domains.txt - it has inbound only,
> > > outbound only, both, etc options.
> > >
> > > Jonathan
> > >
> > >
> > > Evans Martin wrote:
> > >
> > > >So there is no way to turn off outbound scanning?
> > > >
> > > >
> > > >
> > > >>-Original Message-
> > > >>From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > > >>[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
> > > >>Sent: Wednesday, May 04, 2005 4:41 PM
> > > >>To: Declude.JunkMail@declude.com
> > > >>Subject: RE: [Declude.JunkMail] Outbound Scanning
> > > >>
> > > >>Then they need to auth to the server. You need 8.x to be able to
> have
> > > >>declude
> > > >>know if the user has authed just set WHITELIST AUTH in yor
> > > >>
> > > >>
> > > >global.cfg
> > > >
> > > >
> > > >>Kevin Bilbee
> > > >>
> > > >>
> > > >>
> > > >>>-Original Message-
> > > >>>From: [EMAIL PROTECTED]
> > > >>>[mailto:[EMAIL PROTECTED] Behalf Of Evans
> Martin
> > > >>>Sent: Wednesday, May 04, 2005 2:24 PM
> > > >>>To: Declude.JunkMail@declude.com
> > > >>>Subject: [Declude.JunkMail] Outbound Scanning
> > > >>>
> > > >>>
> > > >>>I am trying to disable outbound scanning of my domains.  I
> > > >>>commented everything out in the slightly modified from default
> > > >>>global.cfg that came after the outbound section using a # but it
> > > >>>still seems to be scanning outbound.
> > > >>>
> > > >>>I am using per domain configs but I don't see where Declude is
> > > >>>being instructed to scan outbound.  Many of my users are
> > > >>>complaining because their mail goes out tagged as spam.  Help!
> > > >>>
> > > >>>Thanks,
> > > >>>Evans Martin
> > > >>>---
> > > >>>This E-mail came from the Declude.JunkMail mailing list.  To
> > > >>>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > >>>type "unsubscribe Declude.JunkMail".  The archives can be found
> > > >>>at http://www.mail-archive.com.
> > > >>>
> > > >>>
> > > >>>
> > > >>---
> > > >>This E-mail came from the Declude.JunkMail mailing list.  To
> > > >>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > >>type "unsubscribe Declude.JunkMail".  The archives can be found
> > > >>at http://www.mail-archive.com.
> > > >>---
> > > >>[This E-mail scanned for viruses by Declude Virus]
> > > >>
> > > >>
> > > >>
> > > >
> > > >
> > > >
> > > >---
> > > >[This E-mail scanned for viruses by Declude Virus]
> > > >
> > > >---
> > > >This E-mail came from the Declude.JunkMail mailing list.  To
> > > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > >type "unsubscribe Declude.JunkMail".  The archives can be found
> > > >at http://www.mail-archive.com.
> > > >
> > > >
> > > >
> > > >
> > >
> > > ---
> > > This E-mail came from the Declude.JunkMail mailing list.  To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.JunkMail".  The archives can be found
> > > at http://www.mail-archive.com.
> > > ---
> > > [This E-mail scanned for viruses by Declude Virus]
> > >
> >
> >
> >
> > ---
> > [This E-mail scanned for viruses by Declude Virus]
> >
> > ---
> > 

RE: [Declude.JunkMail] Outbound Scanning

2005-05-05 Thread Nick
On 5 May 2005 at 1:11, Evans Martin wrote:

Hi Evans - 

> Because I'm running 7.15 of IMail.
>> I'm talking about Junkmail; not Virus.  I'm marking my own
>> outbound mail as spam in a lot of cases.  I want to disable this 
>> behavior.

How about a crediting filter file like mydomains.txt
STOPATFIRSTHIT
MAILFROM0   ENDSWITH
MAILFROM0   ENDSWITH
etc

global.cfg
FILTER.MYDOMAINS filter mydomains.txt x -5   0

-Nick

> > 
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > > [EMAIL PROTECTED] On Behalf Of Jonathan Sent: Wednesday, May 04,
> > > 2005 6:13 PM To: Declude.JunkMail@declude.com Subject: Re:
> > > [Declude.JunkMail] Outbound Scanning
> > >
> > > I think you're looking for virus_domains.txt - it has inbound
> > > only, outbound only, both, etc options.
> > >
> > > Jonathan
> > >
> > >
> > > Evans Martin wrote:
> > >
> > > >So there is no way to turn off outbound scanning?
> > > >
> > > >
> > > >
> > > >>-Original Message-
> > > >>From: [EMAIL PROTECTED]
> > > >>[mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kevin
> > > >>Bilbee Sent: Wednesday, May 04, 2005 4:41 PM To:
> > > >>Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail]
> > > >>Outbound Scanning
> > > >>
> > > >>Then they need to auth to the server. You need 8.x to be able to
> > > >>have declude know if the user has authed just set WHITELIST AUTH
> > > >>in yor
> > > >>
> > > >>
> > > >global.cfg
> > > >
> > > >
> > > >>Kevin Bilbee
> > > >>
> > > >>
> > > >>
> > > >>>-Original Message-
> > > >>>From: [EMAIL PROTECTED]
> > > >>>[mailto:[EMAIL PROTECTED] Behalf Of Evans
> > > >>>Martin Sent: Wednesday, May 04, 2005 2:24 PM To:
> > > >>>Declude.JunkMail@declude.com Subject: [Declude.JunkMail]
> > > >>>Outbound Scanning
> > > >>>
> > > >>>
> > > >>>I am trying to disable outbound scanning of my domains.  I
> > > >>>commented everything out in the slightly modified from default
> > > >>>global.cfg that came after the outbound section using a # but
> > > >>>it still seems to be scanning outbound.
> > > >>>
> > > >>>I am using per domain configs but I don't see where Declude is
> > > >>>being instructed to scan outbound.  Many of my users are
> > > >>>complaining because their mail goes out tagged as spam.  Help!
> > > >>>
> > > >>>Thanks,
> > > >>>Evans Martin
> > > >>>---
> > > >>>This E-mail came from the Declude.JunkMail mailing list.  To
> > > >>>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > >>>type "unsubscribe Declude.JunkMail".  The archives can be found
> > > >>>at http://www.mail-archive.com.
> > > >>>
> > > >>>
> > > >>>
> > > >>---
> > > >>This E-mail came from the Declude.JunkMail mailing list.  To
> > > >>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > >>type "unsubscribe Declude.JunkMail".  The archives can be found
> > > >>at http://www.mail-archive.com. --- [This E-mail scanned for
> > > >>viruses by Declude Virus]
> > > >>
> > > >>
> > > >>
> > > >
> > > >
> > > >
> > > >---
> > > >[This E-mail scanned for viruses by Declude Virus]
> > > >
> > > >---
> > > >This E-mail came from the Declude.JunkMail mailing list.  To
> > > >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > >type "unsubscribe Declude.JunkMail".  The archives can be found
> > > >at http://www.mail-archive.com.
> > > >
> > > >
> > > >
> > > >
> > >
> > > ---
> > > This E-mail came from the Declude.JunkMail mailing list.  To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
> > > "unsubscribe Declude.JunkMail".  The archives can be found at
> > > http://www.mail-archive.com. --- [This E-mail scanned for viruses
> > > by Declude Virus]
> > >
> > 
> > 
> > 
> > ---
> > [This E-mail scanned for viruses by Declude Virus]
> > 
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found at
> > http://www.mail-archive.com.
> > 
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found at
> > http://www.mail-archive.com. --- [This E-mail scanned for viruses by
> > Declude Virus]
> > 
> 
> 
> 
> ---
> [This E-mail scanned for viruses by Declude Virus]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Outbound Scanning

2005-05-05 Thread David Franco-Rocha [ Declude ]
Evans,
We have this on a list of possible enhancements for the very near future. It 
would, however, be a global setting that applies to the entire server: 
scanning inbound only, outbound only or both.

David Franco-Rocha
- Original Message - 
From: "Evans Martin" <[EMAIL PROTECTED]>
To: 
Sent: Thursday, May 05, 2005 2:11 AM
Subject: RE: [Declude.JunkMail] Outbound Scanning

Because I'm running 7.15 of IMail.
-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Wednesday, May 04, 2005 6:57 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Outbound Scanning
If you have Pro, why don't you turn AUTOWHITELIST ON?  That way anyone who
authenticates is whitelisted.
Darin.
- Original Message -
From: "Evans Martin" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, May 04, 2005 7:16 PM
Subject: RE: [Declude.JunkMail] Outbound Scanning
I'm talking about Junkmail; not Virus.  I'm marking my own outbound mail
as
spam in a lot of cases.  I want to disable this behavior.
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Jonathan
> Sent: Wednesday, May 04, 2005 6:13 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Outbound Scanning
>
> I think you're looking for virus_domains.txt - it has inbound only,
> outbound only, both, etc options.
>
> Jonathan
>
>
> Evans Martin wrote:
>
> >So there is no way to turn off outbound scanning?
> >
> >
> >
> >>-Original Message-
> >>From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> >>[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
> >>Sent: Wednesday, May 04, 2005 4:41 PM
> >>To: Declude.JunkMail@declude.com
> >>Subject: RE: [Declude.JunkMail] Outbound Scanning
> >>
> >>Then they need to auth to the server. You need 8.x to be able to have
> >>declude
> >>know if the user has authed just set WHITELIST AUTH in yor
> >>
> >>
> >global.cfg
> >
> >
> >>Kevin Bilbee
> >>
> >>
> >>
> >>>-Original Message-
> >>>From: [EMAIL PROTECTED]
> >>>[mailto:[EMAIL PROTECTED] Behalf Of Evans Martin
> >>>Sent: Wednesday, May 04, 2005 2:24 PM
> >>>To: Declude.JunkMail@declude.com
> >>>Subject: [Declude.JunkMail] Outbound Scanning
> >>>
> >>>
> >>>I am trying to disable outbound scanning of my domains.  I
> >>>commented everything out in the slightly modified from default
> >>>global.cfg that came after the outbound section using a # but it
> >>>still seems to be scanning outbound.
> >>>
> >>>I am using per domain configs but I don't see where Declude is
> >>>being instructed to scan outbound.  Many of my users are
> >>>complaining because their mail goes out tagged as spam.  Help!
> >>>
> >>>Thanks,
> >>>Evans Martin
> >>>---
> >>>This E-mail came from the Declude.JunkMail mailing list.  To
> >>>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >>>type "unsubscribe Declude.JunkMail".  The archives can be found
> >>>at http://www.mail-archive.com.
> >>>
> >>>
> >>>
> >>---
> >>This E-mail came from the Declude.JunkMail mailing list.  To
> >>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >>type "unsubscribe Declude.JunkMail".  The archives can be found
> >>at http://www.mail-archive.com.
> >>---
> >>[This E-mail scanned for viruses by Declude Virus]
> >>
> >>
> >>
> >
> >
> >
> >---
> >[This E-mail scanned for viruses by Declude Virus]
> >
> >---
> >This E-mail came from the Declude.JunkMail mailing list.  To
> >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >type "unsubscribe Declude.JunkMail".  The archives can be found
> >at http://www.mail-archive.com.
> >
> >
> >
> >
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail scanned for viruses by Declude Virus]
>

---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail scanned for viruses by Declude Virus]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-a

RE: [Declude.JunkMail] Outbound Scanning

2005-05-05 Thread Kevin Bilbee
Then you are stuck and can not stop what is happening with out WHITELIST
AUTH. YOU need to update imail to a version that supports the A attribute in
the Q file to tell imail this is an authenticated user. Either update Imail
or switch over to SmarterMail around August when they should support
WHITELIST AUTH with Declude.

Any other whitelisting of remote users like whitelisting their domain will
cause spoofed spam to be whitelisted.


Kevin Bilbee

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Evans Martin
> Sent: Wednesday, May 04, 2005 11:11 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Outbound Scanning
> 
> 
> Because I'm running 7.15 of IMail.
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
> > [EMAIL PROTECTED] On Behalf Of Darin Cox
> > Sent: Wednesday, May 04, 2005 6:57 PM
> > To: Declude.JunkMail@declude.com
> > Subject: Re: [Declude.JunkMail] Outbound Scanning
> > 
> > If you have Pro, why don't you turn AUTOWHITELIST ON?  That 
> way anyone 
> > who authenticates is whitelisted.
> > 
> > Darin.
> > 
> > 
> > - Original Message -
> > From: "Evans Martin" <[EMAIL PROTECTED]>
> > To: 
> > Sent: Wednesday, May 04, 2005 7:16 PM
> > Subject: RE: [Declude.JunkMail] Outbound Scanning
> > 
> > 
> > I'm talking about Junkmail; not Virus.  I'm marking my own outbound 
> > mail as spam in a lot of cases.  I want to disable this behavior.
> > 
> > > -Original Message-
> > > From: [EMAIL PROTECTED] 
> [mailto:Declude.JunkMail- 
> > > [EMAIL PROTECTED] On Behalf Of Jonathan
> > > Sent: Wednesday, May 04, 2005 6:13 PM
> > > To: Declude.JunkMail@declude.com
> > > Subject: Re: [Declude.JunkMail] Outbound Scanning
> > >
> > > I think you're looking for virus_domains.txt - it has 
> inbound only, 
> > > outbound only, both, etc options.
> > >
> > > Jonathan
> > >
> > >
> > > Evans Martin wrote:
> > >
> > > >So there is no way to turn off outbound scanning?
> > > >
> > > >
> > > >
> > > >>-Original Message-
> > > >>From: [EMAIL PROTECTED] 
> [mailto:Declude.JunkMail- 
> > > >>[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
> > > >>Sent: Wednesday, May 04, 2005 4:41 PM
> > > >>To: Declude.JunkMail@declude.com
> > > >>Subject: RE: [Declude.JunkMail] Outbound Scanning
> > > >>
> > > >>Then they need to auth to the server. You need 8.x to 
> be able to 
> > > >>have declude know if the user has authed just set 
> WHITELIST AUTH 
> > > >>in yor
> > > >>
> > > >>
> > > >global.cfg
> > > >
> > > >
> > > >>Kevin Bilbee
> > > >>
> > > >>
> > > >>
> > > >>>-Original Message-
> > > >>>From: [EMAIL PROTECTED]
> > > >>>[mailto:[EMAIL PROTECTED] Behalf Of Evans 
> > > >>>Martin
> > > >>>Sent: Wednesday, May 04, 2005 2:24 PM
> > > >>>To: Declude.JunkMail@declude.com
> > > >>>Subject: [Declude.JunkMail] Outbound Scanning
> > > >>>
> > > >>>
> > > >>>I am trying to disable outbound scanning of my domains.  I 
> > > >>>commented everything out in the slightly modified from default 
> > > >>>global.cfg that came after the outbound section using 
> a # but it 
> > > >>>still seems to be scanning outbound.
> > > >>>
> > > >>>I am using per domain configs but I don't see where Declude is 
> > > >>>being instructed to scan outbound.  Many of my users are 
> > > >>>complaining because their mail goes out tagged as spam.  Help!
> > > >>>
> > > >>>Thanks,
> > > >>>Evans Martin
> > > >>>---
> > > >>>This E-mail came from the Declude.JunkMail mailing list.  To 
> > > >>>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and 
> > > >>>type "unsubscribe Declude.JunkMail".  The archives can 
> be found 
> > > >>>at http://www.mail-archive.com.
> > > >>>
> > > >>>
> > > >>>
> > > >>---
> > > >>This E-mail came from the Declude.JunkMail mailing list.  To 
> > > >>unsubscribe, just send an E-mail to 
> [EMAIL PROTECTED], and type 
> > > >>"unsubscribe Declude.JunkMail".  The archives can be found at 
> > > >>http://www.mail-archive.com.
> > > >>---
> > > >>[This E-mail scanned for viruses by Declude Virus]
> > > >>
> > > >>
> > > >>
> > > >
> > > >
> > > >
> > > >---
> > > >[This E-mail scanned for viruses by Declude Virus]
> > > >
> > > >---
> > > >This E-mail came from the Declude.JunkMail mailing list.  To 
> > > >unsubscribe, just send an E-mail to 
> [EMAIL PROTECTED], and type 
> > > >"unsubscribe Declude.JunkMail".  The archives can be found at 
> > > >http://www.mail-archive.com.
> > > >
> > > >
> > > >
> > > >
> > >
> > > ---
> > > This E-mail came from the Declude.JunkMail mailing list.  To 
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], 
> and type 
> > > "unsubscribe Declude.JunkMail".  The archives can be found at 
> > > http://www.mail-archive.com.
> > > ---
> > > [This E-mail scanned for viruses by Declude Virus]
> > >
> > 
> > 
> > 
> > ---
> > [This E-mail scanned for viruses by Declude Virus]
> > 
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To