[Declude.JunkMail] iMail Forwarded mailboxes

2005-12-01 Thread Orin Wells
Is there something special that has to be done for a user account 
that is using forwarding for Declude to shunt the spam off?  I was 
looking through the spike in spam I have seen lately where it is 
apparently slipping through all the gates and noticed that on account 
(probably more) where I actually have the forwarding going to a 
client account off-server and to my own account the is within the 
same iMail coverage the email that should be trapped into the spam 
box appears not to be.  It is getting scanned and all the declude 
messages are inserted but the mail is sent along as if everything is OK.


I have a vague recollection of something about setting up a 
forward.junkmail file and using ROUTETO to get the spam into the 
desired spam box.  Am I correct?






---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Autowhitelist not working

2005-12-01 Thread Evans Martin
Yeah.  We're hoping to get more features with v3.0.  I hope they live up to
expectations.

Evans Martin
http://www.martek.net

iPlus Info Browser - IPB's IMail Migration Tool, password browser, reporting
suite make IPlus Info Browser something no IMail administrator should be
without.  http://www.martek.net/Default.aspx?tabid=96


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems
> Sent: Thursday, December 01, 2005 3:08 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Autowhitelist not working
> 
> I'm running on IMail 8.12
> 
> I've considered SmarterMail but the lack of a mailbox feature to route
> spam
> to individual mailboxes was a dealbreaker. We have too many customers who
> depend on it.
> 
> Bill
> 
> - Original Message -
> From: "Evans Martin" <[EMAIL PROTECTED]>
> To: 
> Sent: Thursday, December 01, 2005 1:38 PM
> Subject: RE: [Declude.JunkMail] Autowhitelist not working
> 
> 
> > What exact version are you running?  SmarterMail or IMail?  We run
> > SmarterMail now and worked with David on a fix for the AutoWhitelist
> > problem.  I think it made it into production in 3.0.5.18.
> >
> > Evans Martin
> > http://www.martek.net
> >
> > iPlus Info Browser - IPB's IMail Migration Tool, password browser,
> > reporting
> > suite make IPlus Info Browser something no IMail administrator should be
> > without.  http://www.martek.net/Default.aspx?tabid=96
> >
> >
> >
> >> -Original Message-
> >> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> >> [EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems
> >> Sent: Thursday, December 01, 2005 12:34 PM
> >> To: declude.junkmail@declude.com
> >> Subject: [Declude.JunkMail] Autowhitelist not working
> >>
> >> My Autowhitelist appears to have stopped working. Customers email has
> >> started to go to the spam folder even though the sending email address
> is
> >> in
> >> their WebMail Contacts List.
> >>
> >> I don't know at this point exactly when this problem began, but it is
> >> recent. I upgraded from 1.82 to 3.0 about 2 weeks ago, but I don't know
> >> if
> >> it's related.
> >>
> >> Looking at the logs, it appears the email is being treated as if
> >> autowtitelist isn't on. I've double checked my global config to ensure
> it
> >> is.
> >>
> >> Has anyone encountered this before?
> >>
> >> Bill G
> >>
> >>
> >> ---
> >> [This E-mail scanned for viruses by Declude EVA]
> >>
> >> ---
> >> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
> >>
> >> ---
> >> This E-mail came from the Declude.JunkMail mailing list.  To
> >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >> type "unsubscribe Declude.JunkMail".  The archives can be found
> >> at http://www.mail-archive.com.
> >> ---
> >> [This E-mail scanned for viruses by Declude Virus]
> >
> >
> >
> > ---
> > [This E-mail scanned for viruses by Declude Virus]
> >
> >
> > ---
> > [This E-mail scanned for viruses by Declude Virus]
> >
> > ---
> > [This E-mail was scanned for viruses by Declude EVA www.declude.com]
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> > ---
> > [This E-mail scanned for viruses by Declude EVA]
> >
> >
> 
> 
> ---
> [This E-mail scanned for viruses by Declude EVA]
> 
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Autowhitelist not working

2005-12-01 Thread David Barker
Should be available in the SmarterMail 3.0 release.

David B
www.declude.com 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill Green dfn
Systems
Sent: Thursday, December 01, 2005 4:08 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Autowhitelist not working

I'm running on IMail 8.12

I've considered SmarterMail but the lack of a mailbox feature to route spam
to individual mailboxes was a dealbreaker. We have too many customers who
depend on it.

Bill

- Original Message -
From: "Evans Martin" <[EMAIL PROTECTED]>
To: 
Sent: Thursday, December 01, 2005 1:38 PM
Subject: RE: [Declude.JunkMail] Autowhitelist not working


> What exact version are you running?  SmarterMail or IMail?  We run
> SmarterMail now and worked with David on a fix for the AutoWhitelist
> problem.  I think it made it into production in 3.0.5.18.
>
> Evans Martin
> http://www.martek.net
>
> iPlus Info Browser - IPB's IMail Migration Tool, password browser, 
> reporting
> suite make IPlus Info Browser something no IMail administrator should be
> without.  http://www.martek.net/Default.aspx?tabid=96
>
>
>
>> -Original Message-
>> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
>> [EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems
>> Sent: Thursday, December 01, 2005 12:34 PM
>> To: declude.junkmail@declude.com
>> Subject: [Declude.JunkMail] Autowhitelist not working
>>
>> My Autowhitelist appears to have stopped working. Customers email has
>> started to go to the spam folder even though the sending email address is
>> in
>> their WebMail Contacts List.
>>
>> I don't know at this point exactly when this problem began, but it is
>> recent. I upgraded from 1.82 to 3.0 about 2 weeks ago, but I don't know 
>> if
>> it's related.
>>
>> Looking at the logs, it appears the email is being treated as if
>> autowtitelist isn't on. I've double checked my global config to ensure it
>> is.
>>
>> Has anyone encountered this before?
>>
>> Bill G
>>
>>
>> ---
>> [This E-mail scanned for viruses by Declude EVA]
>>
>> ---
>> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>>
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>> type "unsubscribe Declude.JunkMail".  The archives can be found
>> at http://www.mail-archive.com.
>> ---
>> [This E-mail scanned for viruses by Declude Virus]
>
>
>
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
>
> ---
> [This E-mail scanned for viruses by Declude Virus]
>
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail scanned for viruses by Declude EVA]
>
> 


---
[This E-mail scanned for viruses by Declude EVA]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Autowhitelist not working

2005-12-01 Thread Bill Green dfn Systems

I'm running on IMail 8.12

I've considered SmarterMail but the lack of a mailbox feature to route spam 
to individual mailboxes was a dealbreaker. We have too many customers who 
depend on it.


Bill

- Original Message - 
From: "Evans Martin" <[EMAIL PROTECTED]>

To: 
Sent: Thursday, December 01, 2005 1:38 PM
Subject: RE: [Declude.JunkMail] Autowhitelist not working



What exact version are you running?  SmarterMail or IMail?  We run
SmarterMail now and worked with David on a fix for the AutoWhitelist
problem.  I think it made it into production in 3.0.5.18.

Evans Martin
http://www.martek.net

iPlus Info Browser - IPB's IMail Migration Tool, password browser, 
reporting

suite make IPlus Info Browser something no IMail administrator should be
without.  http://www.martek.net/Default.aspx?tabid=96




-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems
Sent: Thursday, December 01, 2005 12:34 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Autowhitelist not working

My Autowhitelist appears to have stopped working. Customers email has
started to go to the spam folder even though the sending email address is
in
their WebMail Contacts List.

I don't know at this point exactly when this problem began, but it is
recent. I upgraded from 1.82 to 3.0 about 2 weeks ago, but I don't know 
if

it's related.

Looking at the logs, it appears the email is being treated as if
autowtitelist isn't on. I've double checked my global config to ensure it
is.

Has anyone encountered this before?

Bill G


---
[This E-mail scanned for viruses by Declude EVA]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]




---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude EVA]





---
[This E-mail scanned for viruses by Declude EVA]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Ban Files by Extension on a Per-Domain Basis

2005-12-01 Thread Darin Cox
Let it ban across all domains, but use the BANnotify.eml with a requeue
script.  Worst case is that the user has to click on a link in the BANnotify
to have the email requeued and delivered in a few minutes.

Darin.


- Original Message - 
From: "Glenn \ WCNet" <[EMAIL PROTECTED]>
To: 
Sent: Thursday, December 01, 2005 3:28 PM
Subject: Re: [Declude.JunkMail] Ban Files by Extension on a Per-Domain Basis


Well, I'm not versed at all in VBScript.   Honestly, I don't have any
problem blocking .bats and .exes globally, and probably should and will do
that via Virus.  There may be some fall-out from anyone not expecting it.  I
can deal with that if it happens.  But as you say, I'm not going to block
.zips.

G.Z.

- Original Message - 
From: "Matt" <[EMAIL PROTECTED]>
To: 
Sent: Thursday, December 01, 2005 1:40 PM
Subject: Re: [Declude.JunkMail] Ban Files by Extension on a Per-Domain Basis


Glenn,

It could be done accurately with an external test that you could write
in something like VBScript, but it can be quite involved.  It can't be
done accurately with Declude filters in JunkMail, though some might
claim it to be accurate enough.

FYI, I haven't found any resistance to blocking executables across more
than 200 domains.  Customers expect this, and even if they weren't
blocked, other servers could still, and mostly will, block such files.
Blocking zips is another story, and while some around here swear by it,
I have created an external test in Declude that accurately detects
virtually all zip viruses which allows me to continue to allow
legitimate usage of zip files.  This is a conundrum for many right now,
but I don't think that the majority of my customers would understand or
appreciate wholesale blocking of zips containing executables since that
is the preferred method of transferring such files.

Matt




Glenn \ WCNet wrote:

>I have a customer who is asking if .bats, exes, and .zips can be blocked on
>their mail host.  I'm running Declude 1.81.  I know extensions can be
>blocked with Declude Virus, but not on a per-domain basis.  Can it be done
>(accurately) with JunkMail filtering?
>
>G.Z.
>
>---
>[This E-mail was scanned for viruses by Declude EVA www.declude.com]
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail".  The archives can be found
>at http://www.mail-archive.com.
>
>
>
>
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Autowhitelist not working

2005-12-01 Thread Evans Martin
What exact version are you running?  SmarterMail or IMail?  We run
SmarterMail now and worked with David on a fix for the AutoWhitelist
problem.  I think it made it into production in 3.0.5.18.

Evans Martin
http://www.martek.net

iPlus Info Browser - IPB's IMail Migration Tool, password browser, reporting
suite make IPlus Info Browser something no IMail administrator should be
without.  http://www.martek.net/Default.aspx?tabid=96



> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems
> Sent: Thursday, December 01, 2005 12:34 PM
> To: declude.junkmail@declude.com
> Subject: [Declude.JunkMail] Autowhitelist not working
> 
> My Autowhitelist appears to have stopped working. Customers email has
> started to go to the spam folder even though the sending email address is
> in
> their WebMail Contacts List.
> 
> I don't know at this point exactly when this problem began, but it is
> recent. I upgraded from 1.82 to 3.0 about 2 weeks ago, but I don't know if
> it's related.
> 
> Looking at the logs, it appears the email is being treated as if
> autowtitelist isn't on. I've double checked my global config to ensure it
> is.
> 
> Has anyone encountered this before?
> 
> Bill G
> 
> 
> ---
> [This E-mail scanned for viruses by Declude EVA]
> 
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> ---
> [This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] weighting domains

2005-12-01 Thread nick hayer




David Barker wrote:

  Nick,

It is an item for the development schedule, but not likely in a near future
release, as currently the functionality is available using invURIBL.
  

Gotcha.  No biggie - I was just wondering..

Thanks!

-Nick



  
David B
www.declude 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer
Sent: Thursday, December 01, 2005 1:55 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] weighting domains

 >>I would suggest you look to add a URI filtering product like out
invURIBL.

David of Declude -

Will this feature be available in a future release?

Thanks

-Nick



  
  
All of these domains are listed on SURBL/URIBL.  URI filtering is very 
effective at capturing these patterns well before these hosts get 
listed in traditional RBL's.
Example:
Non-authoritative answer:
Name:dbfm.org.multi.surbl.org
Address:  127.0.0.68
Non-authoritative answer:
Name:dbfm.org.multi.uribl.com
Address:  127.0.0.2
Darrell
--
-- Check out http://www.invariantsystems.com for utilities for Declude 
And Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.

Kevin Rogers writes:



  Some of our users are getting a lot of spam from various domains that 
all have this in the beginning:  csh
Like:
csh.dbfm.org [65.249.245.172]
csh.mdcg.net [65.249.245.159]
csh.jtdz.org [65.249.245.150]
csh.xmdc.org [65.249.245.168]
csh.kvyh.com [65.249.245.204]
I have the Pro versions of every Declude product.  How would I go 
about adding some weight to emails from this domain? - Should I 
somehow use the csh. property or the first three parts of the IP 
address 65.249.245.?
Thanks
---
[This E-mail was scanned for viruses.]
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list.  To 
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
"unsubscribe Declude.JunkMail".  The archives can be found at 
http://www.mail-archive.com.
  



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To 
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
"unsubscribe Declude.JunkMail".  The archives can be found at 
http://www.mail-archive.com.



  
  ---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


  






Re: [Declude.JunkMail] Ban Files by Extension on a Per-Domain Basis

2005-12-01 Thread Glenn \\ WCNet
Well, I'm not versed at all in VBScript.   Honestly, I don't have any
problem blocking .bats and .exes globally, and probably should and will do
that via Virus.  There may be some fall-out from anyone not expecting it.  I
can deal with that if it happens.  But as you say, I'm not going to block
.zips.

G.Z.

- Original Message - 
From: "Matt" <[EMAIL PROTECTED]>
To: 
Sent: Thursday, December 01, 2005 1:40 PM
Subject: Re: [Declude.JunkMail] Ban Files by Extension on a Per-Domain Basis


Glenn,

It could be done accurately with an external test that you could write
in something like VBScript, but it can be quite involved.  It can't be
done accurately with Declude filters in JunkMail, though some might
claim it to be accurate enough.

FYI, I haven't found any resistance to blocking executables across more
than 200 domains.  Customers expect this, and even if they weren't
blocked, other servers could still, and mostly will, block such files.
Blocking zips is another story, and while some around here swear by it,
I have created an external test in Declude that accurately detects
virtually all zip viruses which allows me to continue to allow
legitimate usage of zip files.  This is a conundrum for many right now,
but I don't think that the majority of my customers would understand or
appreciate wholesale blocking of zips containing executables since that
is the preferred method of transferring such files.

Matt




Glenn \ WCNet wrote:

>I have a customer who is asking if .bats, exes, and .zips can be blocked on
>their mail host.  I'm running Declude 1.81.  I know extensions can be
>blocked with Declude Virus, but not on a per-domain basis.  Can it be done
>(accurately) with JunkMail filtering?
>
>G.Z.
>
>---
>[This E-mail was scanned for viruses by Declude EVA www.declude.com]
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.JunkMail".  The archives can be found
>at http://www.mail-archive.com.
>
>
>
>
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] weighting domains

2005-12-01 Thread David Barker
Nick,

It is an item for the development schedule, but not likely in a near future
release, as currently the functionality is available using invURIBL.

David B
www.declude 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer
Sent: Thursday, December 01, 2005 1:55 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] weighting domains

 >>I would suggest you look to add a URI filtering product like out
invURIBL.

David of Declude -

Will this feature be available in a future release?

Thanks

-Nick



> All of these domains are listed on SURBL/URIBL.  URI filtering is very 
> effective at capturing these patterns well before these hosts get 
> listed in traditional RBL's.
> Example:
> Non-authoritative answer:
> Name:dbfm.org.multi.surbl.org
> Address:  127.0.0.68
> Non-authoritative answer:
> Name:dbfm.org.multi.uribl.com
> Address:  127.0.0.2
> Darrell
> --
> -- Check out http://www.invariantsystems.com for utilities for Declude 
> And Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
> integration, MRTG Integration, and Log Parsers.
>
> Kevin Rogers writes:
>
>> Some of our users are getting a lot of spam from various domains that 
>> all have this in the beginning:  csh
>> Like:
>> csh.dbfm.org [65.249.245.172]
>> csh.mdcg.net [65.249.245.159]
>> csh.jtdz.org [65.249.245.150]
>> csh.xmdc.org [65.249.245.168]
>> csh.kvyh.com [65.249.245.204]
>> I have the Pro versions of every Declude product.  How would I go 
>> about adding some weight to emails from this domain? - Should I 
>> somehow use the csh. property or the first three parts of the IP 
>> address 65.249.245.?
>> Thanks
>> ---
>> [This E-mail was scanned for viruses.]
>> ---
>> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>> ---
>> This E-mail came from the Declude.JunkMail mailing list.  To 
>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
>> "unsubscribe Declude.JunkMail".  The archives can be found at 
>> http://www.mail-archive.com.
>
>
>
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
>
>
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Ban Files by Extension on a Per-Domain Basis

2005-12-01 Thread Matt

Glenn,

It could be done accurately with an external test that you could write 
in something like VBScript, but it can be quite involved.  It can't be 
done accurately with Declude filters in JunkMail, though some might 
claim it to be accurate enough.


FYI, I haven't found any resistance to blocking executables across more 
than 200 domains.  Customers expect this, and even if they weren't 
blocked, other servers could still, and mostly will, block such files.  
Blocking zips is another story, and while some around here swear by it, 
I have created an external test in Declude that accurately detects 
virtually all zip viruses which allows me to continue to allow 
legitimate usage of zip files.  This is a conundrum for many right now, 
but I don't think that the majority of my customers would understand or 
appreciate wholesale blocking of zips containing executables since that 
is the preferred method of transferring such files.


Matt




Glenn \ WCNet wrote:


I have a customer who is asking if .bats, exes, and .zips can be blocked on
their mail host.  I'm running Declude 1.81.  I know extensions can be
blocked with Declude Virus, but not on a per-domain basis.  Can it be done
(accurately) with JunkMail filtering?

G.Z.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Ban Files by Extension on a Per-Domain Basis

2005-12-01 Thread Glenn \\ WCNet
I have a customer who is asking if .bats, exes, and .zips can be blocked on
their mail host.  I'm running Declude 1.81.  I know extensions can be
blocked with Declude Virus, but not on a per-domain basis.  Can it be done
(accurately) with JunkMail filtering?

G.Z.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] weighting domains

2005-12-01 Thread Markus Gufler

> Will this feature be available in a future release?

Nick,

Darrel's InvURIBL is everything else then expensive and very usefull.

Markus

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] weighting domains

2005-12-01 Thread Nick Hayer
>>I would suggest you look to add a URI filtering product like out 
invURIBL.


David of Declude -

Will this feature be available in a future release?

Thanks

-Nick



All of these domains are listed on SURBL/URIBL.  URI filtering is very 
effective at capturing these patterns well before these hosts get 
listed in traditional RBL's.

Example:
Non-authoritative answer:
Name:dbfm.org.multi.surbl.org
Address:  127.0.0.68
Non-authoritative answer:
Name:dbfm.org.multi.uribl.com
Address:  127.0.0.2
Darrell

Check out http://www.invariantsystems.com for utilities for Declude 
And Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI 
integration, MRTG Integration, and Log Parsers.


Kevin Rogers writes:

Some of our users are getting a lot of spam from various domains that 
all have this in the beginning:  csh

Like:
csh.dbfm.org [65.249.245.172]
csh.mdcg.net [65.249.245.159]
csh.jtdz.org [65.249.245.150]
csh.xmdc.org [65.249.245.168]
csh.kvyh.com [65.249.245.204]
I have the Pro versions of every Declude product.  How would I go 
about adding some weight to emails from this domain? - Should I 
somehow use the csh. property or the first three parts of the IP 
address 65.249.245.?

Thanks
---
[This E-mail was scanned for viruses.]
---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Autowhitelist not working

2005-12-01 Thread Bill Green dfn Systems
My Autowhitelist appears to have stopped working. Customers email has 
started to go to the spam folder even though the sending email address is in 
their WebMail Contacts List.


I don't know at this point exactly when this problem began, but it is 
recent. I upgraded from 1.82 to 3.0 about 2 weeks ago, but I don't know if 
it's related.


Looking at the logs, it appears the email is being treated as if 
autowtitelist isn't on. I've double checked my global config to ensure it 
is.


Has anyone encountered this before?

Bill G 



---
[This E-mail scanned for viruses by Declude EVA]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT - At wits end

2005-12-01 Thread Orin Wells
I would like to thank everyone for the suggestions.  We have a 
temporary fix to the problem so the fires should subside for a bit.


I was unable to install a caching DNS service on our 2000 server 
because I need the folks at the Server farm to do it for us or to 
have them at least put the Windows 2000 CD in the drive to accomplish 
that.  When we go to our 2003 servers, after I figure out our 
hardware problems, I will see to it we have that running.


For now what I have done is inserted another DNS server that also 
belongs to the ISP but is located at a remote site and it has no 
problem with the troublesome domain.  I put this in iMail and it is 
working fine.  However, with the slug of spam I got this morning I am 
wondering if Declude isn't having a problem.  I don't think so 
because even if it is still pointing at the original primary DNS 
server it should be OK.  I think we are just seeing another round of 
annoying spam that is slipping by the filters.  Will have to get back 
in and tweak things again.


At 09:53 AM 11/30/2005, Colbeck, Andrew wrote:

My two cents ...

John and Matt are offering sound "best practices advice" for installing
a cacheing only DNS on your Windows 2000.  It's dead easy, and you'll
find that your queries to find mail servers and RBL answers are faster.

"Cacheing only" means that this DNS service on your Imail server won't
be responsible for serving up any zones, so you don't need to worry
about messing that up.

If you're worried about the bad guys (of course!), you can easily
configure the service to only accept queries from your internal machines
by IP, and/or use your firewall to block inbound queries.

I tested using the nameserver you cited to look up ucancap.org and found
that it could timeout, but once I got the record, it would be cached for
24 hours.

I found that the reply came by UDP, was less than 512 bytes, and nicely
included the IP address of the MX host along with the MX record.

I noted that, at least from my network, I had really good tracert times
(but they block ICMP).

Their mailhost is slow to respond; reaching them, I see that their HELO
greeting is "barracuda.ucancap.org" so I'd have to wonder how long
they've had an antispam device from barracuda.com in front of their real
mail host, and is this when you stopped being able to send them mail?

...

I just did some nslookup tests using ns1.dnswizards.com and also
ns2.dnswizards.com and get hinky results, with ridiculous timeouts.  I'd
suggest that if nothing else, you stop using them for your DNS queries!

Andrew 8)


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Orin Wells
> Sent: Wednesday, November 30, 2005 8:09 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] OT - At wits end
>
> At 11:03 PM 11/29/2005, Dave Doherty wrote:
> >Hi, Orin-
> >
> >A couple of suggestions
> >
> >First, look at your HOSTS file in
> c:\winnt\system32\drivers\etc to see
> >if 64.62.134.10 is listed there. Delete the entry if you
> find it there.
>
> Thanks.  Done that.  Nothing there.
>
>
> >Next, add DNS service to your IMail server.
>
> I have been hesitant to do our own DNS services because of
> others who have told me doing your own DNS can become a full
> time job.  I am assuming they are talking about a registered
> DNS server when every hacker in the world wants to play with
> it.  I hadn't thought about activating DNS though.  We are
> running a 2000 server and I would have to figure out how to
> turn it on.  We will be going to 2003 soon if we can ever get
> the servers running correctly.  I hate hardware!!
>
> >Set the DNS servers in Network Properties to known-good upstream DNS
> >resolvers.
>
> Other than this, the primary servers for all our domains are
> thought to be good.  I believe they have another server we
> could add to the stream.
>
> >Set the DNS address in IMail to 127.0.0.1. This has the effect of
> >providing mulitple DNS servers to IMail.
>
> Ahhh.  That was a piece I was missing here.  We have
> 64.85.13.6 which is the primary DNS server.  Will this then
> use the servers in Network Properties or is it going to
> expect the local server to be providing DNS services?
>
> Thanks for the suggestions.
>
>
> >-d
> >
> >
> >- Original Message - From: "Orin Wells"
> <[EMAIL PROTECTED]>
> >To: 
> >Sent: Wednesday, November 30, 2005 1:35 AM
> >Subject: [Declude.JunkMail] OT - At wits end
> >
> >
> >>We have a bit of a puzzler with one our clients in trying to
> >>communicate with another domain.  What happens is they get
> 20 attempts
> >>failure to deliver.  What is REALLY happening is that the
> DNS servers
> >>that service our environment do not see the target domain for some
> >>unknown reason and thus iMail is unable to resolve the
> domain to an ip
> >>address for delivery. And since our imail server is
> pointing to one of
> >>these DNS servers as our primary server I have been unable
> to find a
> >>way 

Re: [Declude.JunkMail] weighting domains

2005-12-01 Thread Darrell \([EMAIL PROTECTED])
Kevin, 

I would suggest you look to add a URI filtering product like out invURIBL.  
All of these domains are listed on SURBL/URIBL.  URI filtering is very 
effective at capturing these patterns well before these hosts get listed in 
traditional RBL's. 


Example:
Non-authoritative answer:
Name:dbfm.org.multi.surbl.org
Address:  127.0.0.68 


Non-authoritative answer:
Name:dbfm.org.multi.uribl.com
Address:  127.0.0.2 


Darrell

Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers. 



Kevin Rogers writes: 

Some of our users are getting a lot of spam from various domains that all 
have this in the beginning:  csh 

Like: 


csh.dbfm.org [65.249.245.172]
csh.mdcg.net [65.249.245.159]
csh.jtdz.org [65.249.245.150]
csh.xmdc.org [65.249.245.168]
csh.kvyh.com [65.249.245.204] 

I have the Pro versions of every Declude product.  How would I go about 
adding some weight to emails from this domain? - Should I somehow use the 
csh. property or the first three parts of the IP address 65.249.245.? 

Thanks 


---
[This E-mail was scanned for viruses.] 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com] 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Hotmail.co.uk

2005-12-01 Thread David Lewis-Waller
Dave,

Thanks for this but I have already checked and we're not listed on any SPAM
database which is why I'm trying to get a contact for Hotmail.co.uk as I
don't know why we are being blocked. I know this particular IP is being
blocked as it's been like it for some time now and changing IP allows mail
through. Ultimately, I don't want to keep changing IP everytime
Hotmail.co.uk has a problem with us hence my desire to find out why we are
being blocked.

Cheers,

David 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: 01 December 2005 15:06
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Hotmail.co.uk

Hi David-

Check http://www.DNSStuff.com. Enter your SMTP server's IP address int he
"Spam Database Lookup" function, and see what blacklists you are on. In my
experience, you get better results with the blacklist people than you get
from the large email houses.

-Dave Doherty
 Skywaves, Inc.



- Original Message -
From: "David Lewis-Waller" <[EMAIL PROTECTED]>
To: 
Sent: Thursday, December 01, 2005 8:49 AM
Subject: [Declude.JunkMail] Hotmail.co.uk


> We have a problem with sending email to hotmail.co.uk, it would appears 
> that
> any email sent via our mail server to hotmail.co.uk accounts are not
> delivered presumably blacklisted. I have contacted hotmail.co.uk but as 
> yet
> I have had no response. Has anyone had a similar experince. BTW 
> hotmail.com
> is not affected just hotmail.co.uk.
>
> Thanks,
>
> David
>
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
> 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] weighting domains

2005-12-01 Thread Travis Sullivan
If you are doing basic filtering, with dns based blacklists, and content 
filter, body and subject, then you could simply add points to this IP 
address, enough to reach the hold weight:


#ipbl.txt is our list of ips that we penalize, not fully block
ipbl.txt

#contents of ipbl.txt
65.249.245.0/24

#default.junkmail contents - add this line:
ipbl  warn

#global.cfg contents - add this line near the bottom of your cfg file
IPBL   ipfile  E:\IMail\Declude\ipbl.txt x 12 0


of course change the paths to your liking.  the idea here is to score the 
matches in the ipbl file with a weight that nearly equals your hold weight. 
Thus, another hit from a dns blacklist or keywords found in a subject/body 
scan will provide the extra hit needed to hold the email.  This will nearly 
eliminate false positives, just in case there is a good guy on that ip 
range.


Hope this helps!

Travis


- Original Message - 
From: "Nick Hayer" <[EMAIL PROTECTED]>

To: 
Sent: Thursday, December 01, 2005 10:27 AM
Subject: Re: [Declude.JunkMail] weighting domains



Hi Kevin

Lots you could do - to wack this guy you could have a filter that that 
said

REMOTEIP END NOTCONTAINS   65.249.245.
REVDNS 0 CONTAINS csh.

I am not sure if REMOTEIP or REVDNS or MAILFROM is appropriate but you get 
the idea..


In addition you could have an ipfile that you could list these particular 
ip's...


-Nick



Kevin Rogers wrote:

Some of our users are getting a lot of spam from various domains that all 
have this in the beginning:  csh


Like:

csh.dbfm.org [65.249.245.172]
csh.mdcg.net [65.249.245.159]
csh.jtdz.org [65.249.245.150]
csh.xmdc.org [65.249.245.168]
csh.kvyh.com [65.249.245.204]

I have the Pro versions of every Declude product.  How would I go about 
adding some weight to emails from this domain? - Should I somehow use the 
csh. property or the first three parts of the IP address 65.249.245.?


Thanks

---
[This E-mail was scanned for viruses.]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.





---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] weighting domains

2005-12-01 Thread Nick Hayer

Hi Kevin

Lots you could do - to wack this guy you could have a filter that that said
REMOTEIP END NOTCONTAINS   65.249.245.
REVDNS 0 CONTAINS csh.

I am not sure if REMOTEIP or REVDNS or MAILFROM is appropriate but you 
get the idea..


In addition you could have an ipfile that you could list these 
particular ip's...


-Nick



Kevin Rogers wrote:

Some of our users are getting a lot of spam from various domains that 
all have this in the beginning:  csh


Like:

csh.dbfm.org [65.249.245.172]
csh.mdcg.net [65.249.245.159]
csh.jtdz.org [65.249.245.150]
csh.xmdc.org [65.249.245.168]
csh.kvyh.com [65.249.245.204]

I have the Pro versions of every Declude product.  How would I go 
about adding some weight to emails from this domain? - Should I 
somehow use the csh. property or the first three parts of the IP 
address 65.249.245.?


Thanks

---
[This E-mail was scanned for viruses.]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT: Old Imail Forum

2005-12-01 Thread Sharyn Schmidt
Title: Message



LOL 
I'm having a REALLY WEIRD problem and I'm just waiting for my list subscription 
confirmation to post it
 
Aww..I 
missed you all too.

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Nick HayerSent: Thursday, December 01, 2005 
  11:14 AMTo: Declude.JunkMail@declude.comSubject: Re: 
  [Declude.JunkMail] OT: Old Imail ForumHi 
  Sharyn,We missed ya!  What bring you back to this neck of the 
  woods?-Nick


RE: [Declude.JunkMail] OT: Old Imail Forum

2005-12-01 Thread John T \(Lists\)
Title: OT: Old Imail Forum









Yes,
it is still around. Us old diehards like it best.

 



John T

eServices For You



 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Sharyn Schmidt
Sent: Thursday,
 December 01, 2005 7:51 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] OT:
Old Imail Forum

 

I
just tried signing up for the IMAIL forum after a long absence and I'm noticing
it is all webbased now? 

Is
the old Forum still around somewhere, but not being advertised? 

Thanks,

Sharyn











Re: [Declude.JunkMail] OT: Old Imail Forum

2005-12-01 Thread Nick Hayer
Title: OT: Old Imail Forum




Hi Sharyn,

We missed ya!  What bring you back to this neck of the woods?

-Nick



Sharyn Schmidt wrote:

  
  
  

  I just tried signing up for the IMAIL
forum after a long absence and I'm noticing it is all webbased now?
  
  Is the old Forum still around
somewhere, but not being advertised?
  
  Thanks,
  
  Sharyn
  





Re: [Declude.JunkMail] declude.cfg threads procedure

2005-12-01 Thread Bill Green dfn Systems

Thank You John and Bill :-),

During my adjustments, I was able to try it both ways. On my first 
adjustment I stopped and restarted decludeproc, smtp, and Que Manager. I 
immediately saw the change in proccessor utilization. For the second 
adjustment, I only restarted the decludeproc service. This change also 
worked well with no apparent troubles as far as I could tell from logs, and 
directory checks.


My threads are now set at 65. This setting change allowed my server to clear 
up a backlog of 9000 in the proc directory in minutes during the heaviest 
time of day. Big difference!


Bill G


- Original Message - 
From: "Bill Landry" <[EMAIL PROTECTED]>

To: 
Sent: Wednesday, November 30, 2005 3:46 PM
Subject: Re: [Declude.JunkMail] declude.cfg threads procedure


It's not necessary to stop/start any IMail services, since IMail calls 
declude.exe (not decludeproc.exe), and all declude.exe does is move the 
queue files from the spool directory to the proc directory.  Decludeproc 
checks the proc directory at whatever time interval you have set in you 
declude.cfg and processes whatever it finds there.


Bill
- Original Message - 
From: "John T (Lists)" <[EMAIL PROTECTED]>

To: 
Sent: Wednesday, November 30, 2005 2:09 PM
Subject: RE: [Declude.JunkMail] declude.cfg threads procedure


Changes to the Declude.cfg file require a restart of the Decludeproc.exe
service.

Of course, I highly recommend first stopping the Imail SMTP and Queue
Manager services before restarting the Decludeproc service but some one 
has

posted that is not needed.

John T
eServices For You



-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of Bill Green dfn Systems
Sent: Wednesday, November 30, 2005 1:40 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] declude.cfg threads procedure

Hi,

I recently upgraded to Declude 3.0.5.20. Everything is running well 
except

for a backlog in the proc directory in the heavy part of the day. I began
adjusting threads in declude.cfg. The original setting was 5. With my 
Dual

1.5 Ghz machine, I figured 75 was closer to the mark.

Do I need to stop/start any services to make the change effective, or 
just

change the number in declude.cfg?

Bill


---
[This E-mail scanned for viruses by Declude EVA]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude EVA]





---
[This E-mail scanned for viruses by Declude EVA]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] weighting domains

2005-12-01 Thread Kevin Rogers
Some of our users are getting a lot of spam from various domains that 
all have this in the beginning:  csh


Like:

csh.dbfm.org [65.249.245.172]
csh.mdcg.net [65.249.245.159]
csh.jtdz.org [65.249.245.150]
csh.xmdc.org [65.249.245.168]
csh.kvyh.com [65.249.245.204]

I have the Pro versions of every Declude product.  How would I go about 
adding some weight to emails from this domain? - Should I somehow use 
the csh. property or the first three parts of the IP address 65.249.245.?


Thanks

---
[This E-mail was scanned for viruses.]

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] OT: Old Imail Forum

2005-12-01 Thread Sharyn Schmidt
Title: Message



THATS 
the one I was looking for.
 
Thanks!!!

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of John CarterSent: Thursday, December 01, 2005 
  10:59 AMTo: Declude.JunkMail@declude.comSubject: RE: 
  [Declude.JunkMail] OT: Old Imail Forum
  Sharyn
   
  Your message just showed up on both the Junkmail forum 
  and the Imail forum. Yes, the email based forum is still 
  around.
   
  Try going to : http://www.ipswitch.com/support/mailing-lists.html
   
  John


Re: [Declude.JunkMail] OT: Old Imail Forum

2005-12-01 Thread Darin Cox
Title: OT: Old Imail Forum



Yep... still there and going strong.
Darin.
 
 
- Original Message - 
From: Sharyn 
Schmidt 
To: Declude.JunkMail@declude.com 

Sent: Thursday, December 01, 2005 10:50 AM
Subject: [Declude.JunkMail] OT: Old Imail Forum

I just tried signing up for the IMAIL forum after a 
long absence and I'm noticing it is all webbased now? 
Is the old Forum still around somewhere, but not 
being advertised? 
Thanks, Sharyn 


RE: [Declude.JunkMail] OT: Old Imail Forum

2005-12-01 Thread John Carter
Title: OT: Old Imail Forum



Sharyn
 
Your message just showed up on both the Junkmail forum and 
the Imail forum. Yes, the email based forum is still around.
 
Try going to : http://www.ipswitch.com/support/mailing-lists.html
 
John


From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED] On Behalf Of Sharyn 
SchmidtSent: Thursday, December 01, 2005 9:51 AMTo: 
Declude.JunkMail@declude.comSubject: [Declude.JunkMail] OT: Old Imail 
Forum

I just tried signing up for the IMAIL forum after a 
long absence and I'm noticing it is all webbased now? 
Is the old Forum still around somewhere, but not 
being advertised? 
Thanks, Sharyn 


[Declude.JunkMail] OT: Old Imail Forum

2005-12-01 Thread Sharyn Schmidt
Title: OT: Old Imail Forum






I just tried signing up for the IMAIL forum after a long absence and I'm noticing it is all webbased now?


Is the old Forum still around somewhere, but not being advertised?


Thanks,

Sharyn





Re: [Declude.JunkMail] Hotmail.co.uk

2005-12-01 Thread Dave Doherty

Hi David-

Check http://www.DNSStuff.com. Enter your SMTP server's IP address int he 
"Spam Database Lookup" function, and see what blacklists you are on. In my 
experience, you get better results with the blacklist people than you get 
from the large email houses.


-Dave Doherty
Skywaves, Inc.



- Original Message - 
From: "David Lewis-Waller" <[EMAIL PROTECTED]>

To: 
Sent: Thursday, December 01, 2005 8:49 AM
Subject: [Declude.JunkMail] Hotmail.co.uk


We have a problem with sending email to hotmail.co.uk, it would appears 
that

any email sent via our mail server to hotmail.co.uk accounts are not
delivered presumably blacklisted. I have contacted hotmail.co.uk but as 
yet
I have had no response. Has anyone had a similar experince. BTW 
hotmail.com

is not affected just hotmail.co.uk.

Thanks,

David

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.





---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Hotmail.co.uk

2005-12-01 Thread David Lewis-Waller
We have a problem with sending email to hotmail.co.uk, it would appears that
any email sent via our mail server to hotmail.co.uk accounts are not
delivered presumably blacklisted. I have contacted hotmail.co.uk but as yet
I have had no response. Has anyone had a similar experince. BTW hotmail.com
is not affected just hotmail.co.uk.

Thanks,

David

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.