Re: [Declude.JunkMail] How can I make imail look for Declude in a different location?

2005-12-14 Thread Darrell \([EMAIL PROTECTED])
Jim, 

You can just change the delivery location in the smtp properties of the 
imail service. 


Darrell

Check out http://www.invariantsystems.com for utilities for Declude And 
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG 
Integration, and Log Parsers. 




Jim Sullivan writes: 


We recently had some problems with our mail server.  The C drive corrupted and 
we had to re-install the opertaing system.  Fortunately, the D drive where 
imail was located was unharmed.  We re-installed imail, swapped in the old 
imail folder and, with a little help from imail's built-in backup/restore 
system, everything is almost working again.
   
  The problem is that the person who re-installed our OS also renamed the drive letters.  The drive where imail is located is now E, rather than D.  We are seeing in our log that every time an email goes through the system, imail is searching for "D:\IMail\Declude.exe" when it should now be searching for "E:\IMail\Declude.exe".  Is there some easy way to get imail to look for declude in the correct location? 



-
Yahoo! Shopping
 Find Great Deals on Holiday Gifts at Yahoo! Shopping 



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Proc Directory

2005-12-14 Thread Kyle Fisher








Thanks.  I finally found an article
in the saying to bump up the threads which I had nothing in my
declude.cfg.  I moved them to 80 and it works great now.

 

Thanks

Kyle

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher
Sent: Wednesday, December 14, 2005
11:50 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Proc
Directory



 

What can I do to speed up the Proc directory?  I am
getting complaints about messages taking 20 to 30min for delivery.  This
started after upgrading to Junkmail 3.0.5.22.  

 

 

Kyle Fisher

 








RE: [Declude.JunkMail] How can I make imail look for Declude in a different location?

2005-12-14 Thread Jim Sullivan
Kevin Bilbee <[EMAIL PROTECTED]> wrote:  Change the registry settingYup, that did it.  Thanks!
	
		Yahoo! Shopping 
Find Great Deals on Holiday Gifts at Yahoo! Shopping 

Re: [Declude.JunkMail] How can I make imail look for Declude in a different location?

2005-12-14 Thread Michael Thomas - Mathbox
Jim,

Click Start, Click Run, enter RegEdit, Click OK.
Move through the registry tree to the following registry value:
\\HKEY_LOCAL_MACHINE\Software\Ipswitch\IMail\Global\SendName

Based on your description, it probably contains:
D:\IMail\declude.exe

Change it to:
E:\IMail\declude.exe

Close the RegEdit
Stop and Start IMail SMTP

Mike


- Original Message - 
From: "Jim Sullivan" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, December 14, 2005 8:23 PM
Subject: [Declude.JunkMail] How can I make imail look for Declude in a
different location?


> We recently had some problems with our mail server.  The C drive corrupted
and we had to re-install the opertaing system.  Fortunately, the D drive
where imail was located was unharmed.  We re-installed imail, swapped in the
old imail folder and, with a little help from imail's built-in
backup/restore system, everything is almost working again.
>
>   The problem is that the person who re-installed our OS also renamed the
drive letters.  The drive where imail is located is now E, rather than D.
We are seeing in our log that every time an email goes through the system,
imail is searching for "D:\IMail\Declude.exe" when it should now be
searching for "E:\IMail\Declude.exe".  Is there some easy way to get imail
to look for declude in the correct location?
>
>
> -
> Yahoo! Shopping
>  Find Great Deals on Holiday Gifts at Yahoo! Shopping


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] How can I make imail look for Declude in a different location?

2005-12-14 Thread Kevin Bilbee



Change 
the registry setting or uninstall declude and reinstall.
 
Kevin 
Bilbee

  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of Jim 
  SullivanSent: Wednesday, December 14, 2005 5:23 PMTo: 
  declude.junkmail@declude.comSubject: [Declude.JunkMail] How can I 
  make imail look for Declude in a different location?
  We recently had some problems with our mail server.  
  The C drive corrupted and we had to re-install the opertaing system.  
  Fortunately, the D drive where imail was located was unharmed.  We 
  re-installed imail, swapped in the old imail folder and, with a little 
  help from imail's built-in backup/restore system, everything is almost working 
  again.
   
  The problem is that the person who re-installed our OS also renamed the 
  drive letters.  The drive where imail is located is now E, rather than 
  D.  We are seeing in our log that every time an email goes through the 
  system, imail is searching for "D:\IMail\Declude.exe" when it should now be 
  searching for "E:\IMail\Declude.exe".  Is there some easy way to get 
  imail to look for declude in the correct location?
  
  
  Yahoo! ShoppingFind Great Deals on Holiday Gifts at Yahoo! 
  Shopping 


[Declude.JunkMail] How can I make imail look for Declude in a different location?

2005-12-14 Thread Jim Sullivan
We recently had some problems with our mail server.  The C drive corrupted and we had to re-install the opertaing system.  Fortunately, the D drive where imail was located was unharmed.  We re-installed imail, swapped in the old imail folder and, with a little help from imail's built-in backup/restore system, everything is almost working again.     The problem is that the person who re-installed our OS also renamed the drive letters.  The drive where imail is located is now E, rather than D.  We are seeing in our log that every time an email goes through the system, imail is searching for "D:\IMail\Declude.exe" when it should now be searching for "E:\IMail\Declude.exe".  Is there some easy way to get imail to look for declude in the correct location?
	
		Yahoo! Shopping 
Find Great Deals on Holiday Gifts at Yahoo! Shopping 

Re: [Declude.JunkMail] Senderbase

2005-12-14 Thread Nick Hayer

Scott Fisher wrote:

Does anyone have software to convert an IPFile to an DNS zone? My 
IPFile has poped over 100 kb...


I can do it in a heartbeat for you in foxpro - I need a sample zone and 
the ip file. If you have a copy of foxpro I will include the code back 
to you.


-Nick





- Original Message - From: "Matt" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, December 14, 2005 10:23 AM
Subject: Re: [Declude.JunkMail] Senderbase



John,

If you use a custom filter in Declude and not the IPFILE type of 
filter, you can list full CIDR ranges.


With Senderbase and researching spammers, it is often useful to have 
a window open to arin.net to check the IP allocations.  In this case 
the spam block is just a part of a larger block from CWIE, LLC who 
happens to be a legit provider and you don't want to tag their entire 
block.  Using a tool like Angry IP Scanner, you can do reverse DNS 
lookups and ping tests on the entire class C and find the extent of 
the spammer's space.  In this case it stretches roughly from 
8.10.58.64 to 8.10.58.89.  I then take the lowest IP and use 
DNSStuff.com's CIDR range lookup and I enter that IP. 8.10.58.64 will 
return 8.10.58.64/27 as the closest match which contains 8.10.58.64 
through 8.10.58.95.  Most providers will allocate according to CIDR 
ranges, so you are safe to assume that this is it.  Then using a 
custom Declude filter, you would code that up like so:


# savesign.com
REMOTEIP   10   CIDR   8.10.58.64/27

If you start to grow this list, you should consider converting it to 
an IP4R DNS zone, but that will take a bit of programming to do.


Matt




John Carter wrote:

Sorry if 99% of you already know this, but give me a minute.  
Sometime ago
someone here mentioned Senderbase.  If you haven't used 
www.senderbase.org
to help lookup IP's, domains, network owners, etc, it is worth 
trying out.
(I'm sure there are other good lookup sites.) It has been helpful 
verifying
bad boys and getting CIDR's.  However today I "discovered" a neat 
feature.


After clicking on the network owner, it most often shows a list of 
"closely

associated domains" and "addresses used to send mail" (network ex:
http://www.senderbase.org/search?searchBy=organization&searchString=GENUITY) 


Clicking one of the domains will generally also produce an address list
specific to the domain. (domain ex.:
http://www.senderbase.org/search?searchBy=domain&searchString=savesign.com). 

Along with the address list is an export function which will produce 
a text
file usable for a Declude ipfile, especially if you want to target 
specific

IP's. (See below. I used Plain Text-Windows & include hostnames.)

Well, if you knew this, you were ahead of the game; if not, Merry 
Christmas.


John C

Sample IP text listing

# Results from IronPort's SenderBase -- Addresses recently used, domain
'savesign.com'
# Exported: December 14, 2005
8.10.58.77  # ss77.savesign.com
8.10.58.84  # ss84.savesign.com
8.10.58.73  # ss73.savesign.com
8.10.58.70  # ss70.savesign.com
8.10.58.74  # ss74.savesign.com
8.10.58.75  # ss75.savesign.com
8.10.58.80  # ss80.savesign.com
8.10.58.72  # ss72.savesign.com
8.10.58.87  # ss87.savesign.com

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Proc Directory

2005-12-14 Thread David Barker








Check your Imail and Declude logs for the
start and finish times of a single message, this will help you understand where
the delay is occurring.

 

David Barker

www.declude.com

 









From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kyle Fisher
Sent: Wednesday, December 14, 2005
12:50 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Proc
Directory



 

What can I do to speed up the Proc directory?  I am
getting complaints about messages taking 20 to 30min for delivery.  This
started after upgrading to Junkmail 3.0.5.22.  

 

 

Kyle Fisher

 








[Declude.JunkMail] Proc Directory

2005-12-14 Thread Kyle Fisher








What can I do to speed up the Proc directory?  I am
getting complaints about messages taking 20 to 30min for delivery.  This
started after upgrading to Junkmail 3.0.5.22.  

 

 

Kyle Fisher

 








Re: [Declude.JunkMail] Senderbase

2005-12-14 Thread Matt
Oops, maybe IPFILE also accepts CIDR ranges.  If it works for you, then 
so be it.


Matt



Scott Fisher wrote:


-Matt,

Can you clarify this? "If you use a custom filter in Declude and not 
the IPFILE type of filter, you can list full CIDR ranges."


I have CIDR ranges in my IPFile:
12.107.178.192/27 12.107.178.192/27 evivaclub.com  updtd 02-18-05

- Original Message - From: "Matt" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, December 14, 2005 10:23 AM
Subject: Re: [Declude.JunkMail] Senderbase



John,

If you use a custom filter in Declude and not the IPFILE type of 
filter, you can list full CIDR ranges.


With Senderbase and researching spammers, it is often useful to have 
a window open to arin.net to check the IP allocations.  In this case 
the spam block is just a part of a larger block from CWIE, LLC who 
happens to be a legit provider and you don't want to tag their entire 
block.  Using a tool like Angry IP Scanner, you can do reverse DNS 
lookups and ping tests on the entire class C and find the extent of 
the spammer's space.  In this case it stretches roughly from 
8.10.58.64 to 8.10.58.89.  I then take the lowest IP and use 
DNSStuff.com's CIDR range lookup and I enter that IP. 8.10.58.64 will 
return 8.10.58.64/27 as the closest match which contains 8.10.58.64 
through 8.10.58.95.  Most providers will allocate according to CIDR 
ranges, so you are safe to assume that this is it.  Then using a 
custom Declude filter, you would code that up like so:


# savesign.com
REMOTEIP   10   CIDR   8.10.58.64/27

If you start to grow this list, you should consider converting it to 
an IP4R DNS zone, but that will take a bit of programming to do.


Matt




John Carter wrote:

Sorry if 99% of you already know this, but give me a minute.  
Sometime ago
someone here mentioned Senderbase.  If you haven't used 
www.senderbase.org
to help lookup IP's, domains, network owners, etc, it is worth 
trying out.
(I'm sure there are other good lookup sites.) It has been helpful 
verifying
bad boys and getting CIDR's.  However today I "discovered" a neat 
feature.


After clicking on the network owner, it most often shows a list of 
"closely

associated domains" and "addresses used to send mail" (network ex:
http://www.senderbase.org/search?searchBy=organization&searchString=GENUITY) 


Clicking one of the domains will generally also produce an address list
specific to the domain. (domain ex.:
http://www.senderbase.org/search?searchBy=domain&searchString=savesign.com). 

Along with the address list is an export function which will produce 
a text
file usable for a Declude ipfile, especially if you want to target 
specific

IP's. (See below. I used Plain Text-Windows & include hostnames.)

Well, if you knew this, you were ahead of the game; if not, Merry 
Christmas.


John C

Sample IP text listing

# Results from IronPort's SenderBase -- Addresses recently used, domain
'savesign.com'
# Exported: December 14, 2005
8.10.58.77  # ss77.savesign.com
8.10.58.84  # ss84.savesign.com
8.10.58.73  # ss73.savesign.com
8.10.58.70  # ss70.savesign.com
8.10.58.74  # ss74.savesign.com
8.10.58.75  # ss75.savesign.com
8.10.58.80  # ss80.savesign.com
8.10.58.72  # ss72.savesign.com
8.10.58.87  # ss87.savesign.com

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Senderbase

2005-12-14 Thread Scott Fisher

-Matt,

Can you clarify this? "If you use a custom filter in Declude and not the 
IPFILE type of filter, you can list full CIDR ranges."


I have CIDR ranges in my IPFile:
12.107.178.192/27 12.107.178.192/27 evivaclub.com  updtd 02-18-05

- Original Message - 
From: "Matt" <[EMAIL PROTECTED]>

To: 
Sent: Wednesday, December 14, 2005 10:23 AM
Subject: Re: [Declude.JunkMail] Senderbase



John,

If you use a custom filter in Declude and not the IPFILE type of filter, 
you can list full CIDR ranges.


With Senderbase and researching spammers, it is often useful to have a 
window open to arin.net to check the IP allocations.  In this case the 
spam block is just a part of a larger block from CWIE, LLC who happens to 
be a legit provider and you don't want to tag their entire block.  Using a 
tool like Angry IP Scanner, you can do reverse DNS lookups and ping tests 
on the entire class C and find the extent of the spammer's space.  In this 
case it stretches roughly from 8.10.58.64 to 8.10.58.89.  I then take the 
lowest IP and use DNSStuff.com's CIDR range lookup and I enter that IP. 
8.10.58.64 will return 8.10.58.64/27 as the closest match which contains 
8.10.58.64 through 8.10.58.95.  Most providers will allocate according to 
CIDR ranges, so you are safe to assume that this is it.  Then using a 
custom Declude filter, you would code that up like so:


# savesign.com
REMOTEIP   10   CIDR   8.10.58.64/27

If you start to grow this list, you should consider converting it to an 
IP4R DNS zone, but that will take a bit of programming to do.


Matt




John Carter wrote:


Sorry if 99% of you already know this, but give me a minute.  Sometime ago
someone here mentioned Senderbase.  If you haven't used www.senderbase.org
to help lookup IP's, domains, network owners, etc, it is worth trying out.
(I'm sure there are other good lookup sites.) It has been helpful 
verifying

bad boys and getting CIDR's.  However today I "discovered" a neat feature.

After clicking on the network owner, it most often shows a list of 
"closely

associated domains" and "addresses used to send mail" (network ex:
http://www.senderbase.org/search?searchBy=organization&searchString=GENUITY)
Clicking one of the domains will generally also produce an address list
specific to the domain. (domain ex.:
http://www.senderbase.org/search?searchBy=domain&searchString=savesign.com).
Along with the address list is an export function which will produce a 
text
file usable for a Declude ipfile, especially if you want to target 
specific

IP's. (See below. I used Plain Text-Windows & include hostnames.)

Well, if you knew this, you were ahead of the game; if not, Merry 
Christmas.


John C

Sample IP text listing

# Results from IronPort's SenderBase -- Addresses recently used, domain
'savesign.com'
# Exported: December 14, 2005
8.10.58.77  # ss77.savesign.com
8.10.58.84  # ss84.savesign.com
8.10.58.73  # ss73.savesign.com
8.10.58.70  # ss70.savesign.com
8.10.58.74  # ss74.savesign.com
8.10.58.75  # ss75.savesign.com
8.10.58.80  # ss80.savesign.com
8.10.58.72  # ss72.savesign.com
8.10.58.87  # ss87.savesign.com

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Senderbase

2005-12-14 Thread Scott Fisher
Does anyone have software to convert an IPFile to an DNS zone? My IPFile has 
poped over 100 kb...




- Original Message - 
From: "Matt" <[EMAIL PROTECTED]>

To: 
Sent: Wednesday, December 14, 2005 10:23 AM
Subject: Re: [Declude.JunkMail] Senderbase



John,

If you use a custom filter in Declude and not the IPFILE type of filter, 
you can list full CIDR ranges.


With Senderbase and researching spammers, it is often useful to have a 
window open to arin.net to check the IP allocations.  In this case the 
spam block is just a part of a larger block from CWIE, LLC who happens to 
be a legit provider and you don't want to tag their entire block.  Using a 
tool like Angry IP Scanner, you can do reverse DNS lookups and ping tests 
on the entire class C and find the extent of the spammer's space.  In this 
case it stretches roughly from 8.10.58.64 to 8.10.58.89.  I then take the 
lowest IP and use DNSStuff.com's CIDR range lookup and I enter that IP. 
8.10.58.64 will return 8.10.58.64/27 as the closest match which contains 
8.10.58.64 through 8.10.58.95.  Most providers will allocate according to 
CIDR ranges, so you are safe to assume that this is it.  Then using a 
custom Declude filter, you would code that up like so:


# savesign.com
REMOTEIP   10   CIDR   8.10.58.64/27

If you start to grow this list, you should consider converting it to an 
IP4R DNS zone, but that will take a bit of programming to do.


Matt




John Carter wrote:


Sorry if 99% of you already know this, but give me a minute.  Sometime ago
someone here mentioned Senderbase.  If you haven't used www.senderbase.org
to help lookup IP's, domains, network owners, etc, it is worth trying out.
(I'm sure there are other good lookup sites.) It has been helpful 
verifying

bad boys and getting CIDR's.  However today I "discovered" a neat feature.

After clicking on the network owner, it most often shows a list of 
"closely

associated domains" and "addresses used to send mail" (network ex:
http://www.senderbase.org/search?searchBy=organization&searchString=GENUITY)
Clicking one of the domains will generally also produce an address list
specific to the domain. (domain ex.:
http://www.senderbase.org/search?searchBy=domain&searchString=savesign.com).
Along with the address list is an export function which will produce a 
text
file usable for a Declude ipfile, especially if you want to target 
specific

IP's. (See below. I used Plain Text-Windows & include hostnames.)

Well, if you knew this, you were ahead of the game; if not, Merry 
Christmas.


John C

Sample IP text listing

# Results from IronPort's SenderBase -- Addresses recently used, domain
'savesign.com'
# Exported: December 14, 2005
8.10.58.77  # ss77.savesign.com
8.10.58.84  # ss84.savesign.com
8.10.58.73  # ss73.savesign.com
8.10.58.70  # ss70.savesign.com
8.10.58.74  # ss74.savesign.com
8.10.58.75  # ss75.savesign.com
8.10.58.80  # ss80.savesign.com
8.10.58.72  # ss72.savesign.com
8.10.58.87  # ss87.savesign.com

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Free SPAM RBL's ?

2005-12-14 Thread Scott Fisher



I run a chunk of IP4r tests.
I've put my month to month results up at this site: 
http://it.farmprogress.com/declude/Testsbymonth.html

  - Original Message - 
  From: 
  IS - Systems Eng. (Karl Drugge) 
  
  To: Declude.JunkMail@declude.com 
  
  Sent: Wednesday, December 14, 2005 10:32 
  AM
  Subject: [Declude.JunkMail] Free SPAM 
  RBL's ?
  
  
  
  I am currently using SPAMCOP, and 
  pretty happy with it, but wouldn’t mind adding another.
   
  What is everyone else using for an 
  external RBL ?
   
  Karl 
  Drugge B.S.I.T., A.S., 
  M.C.S.E. ( NT 4.0 + 2000 ), C.C.N.A., C.C.D.A., Network+, A+ 
  I dream of the 
  day when I will learn to stop asking questions to which I will regret learning 
  the answers ( Roy Greenhilt, Order of the Stick 
   ) 
   
  PLEASE NOTE : Florida 
  has a very broad public records law. Most written communications to or from 
  City officials regarding City business are public records available to the 
  public and media upon request. Your E-mail communications may be subject to 
  public disclosure.


RE: [Declude.JunkMail] Declude and IMail 2006

2005-12-14 Thread Andy Schmidt
John,

I haven't installed 2006 so I may be overlooking the obvious - but if it's
using IIS, then why not set up that IIS site for port 8383?

Or, create a second IIS site, even on the same IP address, that uses port
8383 with a global REDIRECT to the Webmail IIS site on port 80?  This way,
your clients will be redirected to the new logon screen!? 

That's how I normally handle changes in third party web applications.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of John Olden
Sent: Wednesday, December 14, 2005 11:04 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude and IMail 2006

I was not knocking Imail 2006, I was merely listing the problems we had with
the upgrade and made a suggestion for waiting.

3. I'm not sure what you mean by "Widely known." I don't recall seeing it
here. (Not that I expected to) or anything in the product announcement I
received as saying anything about it. I see nowhere in the documentation
(Overview Guide, Getting Started Guide) that says that it was "replaced."
All I see is that IIS is used. Kind of hard to let your clients know via
e-mail that they can't access their e-mail in the usual way anymore. I was
dealing with phone calls all day.
5. Again, The documentation I read said that contacts were imported. Not
that only "correctly formated" contacts were imported. If it worked in the
last version, I assume that it "should" work in the new. If not, let us
know. During the import process it could have given a message me to this
case. Then I could have gone through everyone's aliases.txt file to look for
errors. Which I eventually had to do by just creating a name based on the
first part of the e-mail address.
7. I stated that I had not reported this to "Declude" yet. And, I know this
is a past issue but it only started for me after upgrading to 2006.
10. I would still like to be able to see the headers like in the past. 
And see how many delivery attempts have been made for a specific message.
9 & 11. As I stated I am just reporting everything I experienced. I do not
subscribe to the Imail list because of the sheer volume I experienced in the
past.
I know it may be my fault for not searching the mailing lists, checking the
forums, etc. before upgrading but I would assume that most smaller companies
don't have the time to go "looking" for problems before upgrading. What if
this was a first time purchase/install? I feel sorry for that individual.
We are a small company <100 users so a testing environment is not feasible.
Yes we did have backups but the fact that the only critical non-functioning
part was the webmail sending we did not see a need to revert back until
contacting Ipswitch customer support. Which fixed the problem.
As I said, I'm not knocking it. Just making people aware of areas I was not
aware of before upgrading.

John Olden
Systems Administrator
Champaign Park District
217.398.2550 - voice
217.355.8421 - fax
217.398.2589 ext. 145 - voicemail


John T (Lists) wrote:

>3. Duh, that was widely known and is contained in the documentation.
>5. Makes sense. Have to have required fields non-blank to migrate. 
>7. This is Declude issue, not an Imail issue. This is a known issue and 
>Declude has stated that it will be fixed in a future release.
>9. Yep, disabling that can lead to some problems.
>10. To a point, I can understand that as it has been reported to have 
>problems with viewing a message at the same time the Queue Manger does 
>a timed batch run.
>11. Has been reported and reviewed on the Imail list.
>
>Since this is a major upgrade, you did do testing first, correct? Or at 
>least make a full back or image of the server for a fall back plan?
>
>John T
>eServices For You
>
>  
>
>>-Original Message-
>>From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- 
>>[EMAIL PROTECTED] On Behalf Of John Olden
>>Sent: Tuesday, December 13, 2005 2:49 PM
>>To: Declude.JunkMail@declude.com
>>Subject: Re: [Declude.JunkMail] Declude and IMail 2006
>>
>>We upgraded to 2006 late last week. What a nightmare.   :-\
>>We had a lot of problems and I have some complaints about the reduced 
>>functionality they (Ipswitch) neglected to tell us about before upgrading.
>>1. Old Imail administrator program no longer used. Web administration 
>>should have been in addition to, not in place of.
>>2. No message print button in webmail.
>>3. Webmail does not use port 8383 anymore. It integrates with IIS.
>>4. List administration is not part of the regular webmail page. 
>>Requires you to go to a different administration page.
>>5. Users contacts without names are not imported.
>>6. Had to have all users change their e-mail client settings so they 
>>could post to mailing lists.
>>7. Picked up a problem with Declude confirm. List subscriptions are 
>>not working. User gets confirm message but is not added after reply. 
>>Haven't h

Re: [Declude.JunkMail] Declude and IMail 2006

2005-12-14 Thread Darin Cox
Hi John,

John T was correct in that #3 was widely discussed and known.  If you need
it to remain on port 8383, however, it is simple to add to the IIS
configuration.  I think most of us are glad to have webmail in IIS now for
more control and easier management.

On your note about companies not having time to research a product before
purchasing or upgrading... that's just asking for trouble.  I can't imagine
adopting a major upgrading freshly released in a production environment.
There's a general guideline in IT to wait for the first service pack before
upgrading, as most stability and functionality problems will have been
addressed at that point.  As as for a company not fully researching a major
product before purchasing, that's again asking for trouble.

No offense intended, I just have found it interesting that so many jumped
right in, many without a safety net, and then complained about the new
release, ignoring best practices for major upgrades/installations.  And many
of the complaints are on minor things that would just take a few minutes to
adjust.  This is not a defense of Ipswitch, or any other vendor for that
matter, just a general observation.

Darin.


- Original Message - 
From: "John Olden" <[EMAIL PROTECTED]>
To: 
Sent: Wednesday, December 14, 2005 11:03 AM
Subject: Re: [Declude.JunkMail] Declude and IMail 2006


I was not knocking Imail 2006, I was merely listing the problems we had
with the upgrade and made a suggestion for waiting.

3. I'm not sure what you mean by "Widely known." I don't recall seeing
it here. (Not that I expected to) or anything in the product
announcement I received as saying anything about it. I see nowhere in
the documentation (Overview Guide, Getting Started Guide) that says that
it was "replaced." All I see is that IIS is used. Kind of hard to let
your clients know via e-mail that they can't access their e-mail in the
usual way anymore. I was dealing with phone calls all day.
5. Again, The documentation I read said that contacts were imported. Not
that only "correctly formated" contacts were imported. If it worked in
the last version, I assume that it "should" work in the new. If not, let
us know. During the import process it could have given a message me to
this case. Then I could have gone through everyone's aliases.txt file to
look for errors. Which I eventually had to do by just creating a name
based on the first part of the e-mail address.
7. I stated that I had not reported this to "Declude" yet. And, I know
this is a past issue but it only started for me after upgrading to 2006.
10. I would still like to be able to see the headers like in the past.
And see how many delivery attempts have been made for a specific message.
9 & 11. As I stated I am just reporting everything I experienced. I do
not subscribe to the Imail list because of the sheer volume I
experienced in the past.
I know it may be my fault for not searching the mailing lists, checking
the forums, etc. before upgrading but I would assume that most smaller
companies don't have the time to go "looking" for problems before
upgrading. What if this was a first time purchase/install? I feel sorry
for that individual.
We are a small company <100 users so a testing environment is not
feasible. Yes we did have backups but the fact that the only critical
non-functioning part was the webmail sending we did not see a need to
revert back until contacting Ipswitch customer support. Which fixed the
problem.
As I said, I'm not knocking it. Just making people aware of areas I was
not aware of before upgrading.

John Olden
Systems Administrator
Champaign Park District
217.398.2550 - voice
217.355.8421 - fax
217.398.2589 ext. 145 - voicemail


John T (Lists) wrote:

>3. Duh, that was widely known and is contained in the documentation.
>5. Makes sense. Have to have required fields non-blank to migrate.
>7. This is Declude issue, not an Imail issue. This is a known issue and
>Declude has stated that it will be fixed in a future release.
>9. Yep, disabling that can lead to some problems.
>10. To a point, I can understand that as it has been reported to have
>problems with viewing a message at the same time the Queue Manger does a
>timed batch run.
>11. Has been reported and reviewed on the Imail list.
>
>Since this is a major upgrade, you did do testing first, correct? Or at
>least make a full back or image of the server for a fall back plan?
>
>John T
>eServices For You
>
>
>
>>-Original Message-
>>From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
>>[EMAIL PROTECTED] On Behalf Of John Olden
>>Sent: Tuesday, December 13, 2005 2:49 PM
>>To: Declude.JunkMail@declude.com
>>Subject: Re: [Declude.JunkMail] Declude and IMail 2006
>>
>>We upgraded to 2006 late last week. What a nightmare.   :-\
>>We had a lot of problems and I have some complaints about the reduced
>>functionality they (Ipswitch) neglected to tell us about before upgrading.
>>1. Old Imail administrator program no longer used. Web administ

[Declude.JunkMail] Free SPAM RBL's ?

2005-12-14 Thread IS - Systems Eng. \(Karl Drugge\)







I am currently using SPAMCOP, and pretty happy with it, but
wouldn’t mind adding another.

 

What is everyone else using for an external RBL ?

 

Karl Drugge 
B.S.I.T., A.S., M.C.S.E. ( NT 4.0 + 2000 ), C.C.N.A.,
C.C.D.A., Network+, A+ 
I dream of the day when
I will learn to stop asking questions to which I will regret learning the
answers ( Roy Greenhilt, Order of the Stick  ) 

 




PLEASE NOTE : Florida has a very broad public records law. Most written communications to or from City officials regarding City business are public records available to the public and media upon request. Your E-mail communications may be subject to public disclosure.


Re: [Declude.JunkMail] Senderbase

2005-12-14 Thread Matt

John,

If you use a custom filter in Declude and not the IPFILE type of filter, 
you can list full CIDR ranges.


With Senderbase and researching spammers, it is often useful to have a 
window open to arin.net to check the IP allocations.  In this case the 
spam block is just a part of a larger block from CWIE, LLC who happens 
to be a legit provider and you don't want to tag their entire block.  
Using a tool like Angry IP Scanner, you can do reverse DNS lookups and 
ping tests on the entire class C and find the extent of the spammer's 
space.  In this case it stretches roughly from 8.10.58.64 to 
8.10.58.89.  I then take the lowest IP and use DNSStuff.com's CIDR range 
lookup and I enter that IP.  8.10.58.64 will return 8.10.58.64/27 as the 
closest match which contains 8.10.58.64 through 8.10.58.95.  Most 
providers will allocate according to CIDR ranges, so you are safe to 
assume that this is it.  Then using a custom Declude filter, you would 
code that up like so:


# savesign.com
REMOTEIP   10   CIDR   8.10.58.64/27

If you start to grow this list, you should consider converting it to an 
IP4R DNS zone, but that will take a bit of programming to do.


Matt




John Carter wrote:


Sorry if 99% of you already know this, but give me a minute.  Sometime ago
someone here mentioned Senderbase.  If you haven't used www.senderbase.org
to help lookup IP's, domains, network owners, etc, it is worth trying out.
(I'm sure there are other good lookup sites.) It has been helpful verifying
bad boys and getting CIDR's.  However today I "discovered" a neat feature.

After clicking on the network owner, it most often shows a list of "closely
associated domains" and "addresses used to send mail" (network ex:
http://www.senderbase.org/search?searchBy=organization&searchString=GENUITY)
Clicking one of the domains will generally also produce an address list
specific to the domain. (domain ex.:
http://www.senderbase.org/search?searchBy=domain&searchString=savesign.com).
Along with the address list is an export function which will produce a text
file usable for a Declude ipfile, especially if you want to target specific
IP's. (See below. I used Plain Text-Windows & include hostnames.)

Well, if you knew this, you were ahead of the game; if not, Merry Christmas.

John C

Sample IP text listing

# Results from IronPort's SenderBase -- Addresses recently used, domain
'savesign.com'
# Exported: December 14, 2005
8.10.58.77  # ss77.savesign.com
8.10.58.84  # ss84.savesign.com
8.10.58.73  # ss73.savesign.com
8.10.58.70  # ss70.savesign.com
8.10.58.74  # ss74.savesign.com
8.10.58.75  # ss75.savesign.com
8.10.58.80  # ss80.savesign.com
8.10.58.72  # ss72.savesign.com
8.10.58.87  # ss87.savesign.com

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Declude and IMail 2006

2005-12-14 Thread John Olden
I was not knocking Imail 2006, I was merely listing the problems we had 
with the upgrade and made a suggestion for waiting.


3. I'm not sure what you mean by "Widely known." I don't recall seeing 
it here. (Not that I expected to) or anything in the product 
announcement I received as saying anything about it. I see nowhere in 
the documentation (Overview Guide, Getting Started Guide) that says that 
it was "replaced." All I see is that IIS is used. Kind of hard to let 
your clients know via e-mail that they can't access their e-mail in the 
usual way anymore. I was dealing with phone calls all day.
5. Again, The documentation I read said that contacts were imported. Not 
that only "correctly formated" contacts were imported. If it worked in 
the last version, I assume that it "should" work in the new. If not, let 
us know. During the import process it could have given a message me to 
this case. Then I could have gone through everyone's aliases.txt file to 
look for errors. Which I eventually had to do by just creating a name 
based on the first part of the e-mail address.
7. I stated that I had not reported this to "Declude" yet. And, I know 
this is a past issue but it only started for me after upgrading to 2006.
10. I would still like to be able to see the headers like in the past. 
And see how many delivery attempts have been made for a specific message.
9 & 11. As I stated I am just reporting everything I experienced. I do 
not subscribe to the Imail list because of the sheer volume I 
experienced in the past.
I know it may be my fault for not searching the mailing lists, checking 
the forums, etc. before upgrading but I would assume that most smaller 
companies don't have the time to go "looking" for problems before 
upgrading. What if this was a first time purchase/install? I feel sorry 
for that individual.
We are a small company <100 users so a testing environment is not 
feasible. Yes we did have backups but the fact that the only critical 
non-functioning part was the webmail sending we did not see a need to 
revert back until contacting Ipswitch customer support. Which fixed the 
problem.
As I said, I'm not knocking it. Just making people aware of areas I was 
not aware of before upgrading.


John Olden
Systems Administrator
Champaign Park District
217.398.2550 - voice
217.355.8421 - fax
217.398.2589 ext. 145 - voicemail


John T (Lists) wrote:


3. Duh, that was widely known and is contained in the documentation.
5. Makes sense. Have to have required fields non-blank to migrate. 
7. This is Declude issue, not an Imail issue. This is a known issue and

Declude has stated that it will be fixed in a future release.
9. Yep, disabling that can lead to some problems.
10. To a point, I can understand that as it has been reported to have
problems with viewing a message at the same time the Queue Manger does a
timed batch run.
11. Has been reported and reviewed on the Imail list.

Since this is a major upgrade, you did do testing first, correct? Or at
least make a full back or image of the server for a fall back plan?

John T
eServices For You

 


-Original Message-
From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
[EMAIL PROTECTED] On Behalf Of John Olden
Sent: Tuesday, December 13, 2005 2:49 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude and IMail 2006

We upgraded to 2006 late last week. What a nightmare.   :-\
We had a lot of problems and I have some complaints about the reduced
functionality they (Ipswitch) neglected to tell us about before upgrading.
1. Old Imail administrator program no longer used. Web administration
should have been in addition to, not in place of.
2. No message print button in webmail.
3. Webmail does not use port 8383 anymore. It integrates with IIS.
4. List administration is not part of the regular webmail page. Requires
you to go to a different administration page.
5. Users contacts without names are not imported.
6. Had to have all users change their e-mail client settings so they
could post to mailing lists.
7. Picked up a problem with Declude confirm. List subscriptions are not
working. User gets confirm message but is not added after reply. Haven't
had time to report this one.
8. Spell check does not work in Firefox.
9. "Disable SMTP AUTH Reporting" was preventing webmail users from
sending messages. Was on hold with them for 1.5 hrs before they found
that one.
10. Cannot view individual messages in queue in Web Administration. It
only show totals and has a "Send All" button.
11. Had to enable Imap for webmail users.
12. Help file and PDFs from website are minimal.
Those are the ones that I can remember off the top of my head.

My suggestion, wait until there are a couple of updates before upgrading.

   


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.J

RE: [Declude.JunkMail] Senderbase

2005-12-14 Thread John T \(Lists\)
Nice find. Thanks.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of John Carter
> Sent: Wednesday, December 14, 2005 7:28 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Senderbase
> 
> Sorry if 99% of you already know this, but give me a minute.  Sometime ago
> someone here mentioned Senderbase.  If you haven't used www.senderbase.org
> to help lookup IP's, domains, network owners, etc, it is worth trying out.
> (I'm sure there are other good lookup sites.) It has been helpful
verifying
> bad boys and getting CIDR's.  However today I "discovered" a neat feature.
> 
> After clicking on the network owner, it most often shows a list of
"closely
> associated domains" and "addresses used to send mail" (network ex:
>
http://www.senderbase.org/search?searchBy=organization&searchString=GENUITY)
> Clicking one of the domains will generally also produce an address list
> specific to the domain. (domain ex.:
>
http://www.senderbase.org/search?searchBy=domain&searchString=savesign.com).
> Along with the address list is an export function which will produce a
text
> file usable for a Declude ipfile, especially if you want to target
specific
> IP's. (See below. I used Plain Text-Windows & include hostnames.)
> 
> Well, if you knew this, you were ahead of the game; if not, Merry
Christmas.
> 
> John C
> 
> Sample IP text listing
> 
> # Results from IronPort's SenderBase -- Addresses recently used, domain
> 'savesign.com'
> # Exported: December 14, 2005
> 8.10.58.77  # ss77.savesign.com
> 8.10.58.84  # ss84.savesign.com
> 8.10.58.73  # ss73.savesign.com
> 8.10.58.70  # ss70.savesign.com
> 8.10.58.74  # ss74.savesign.com
> 8.10.58.75  # ss75.savesign.com
> 8.10.58.80  # ss80.savesign.com
> 8.10.58.72  # ss72.savesign.com
> 8.10.58.87  # ss87.savesign.com
> 
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Declude and IMail 2006

2005-12-14 Thread John Olden

We do not use this function. So I can't give a report on that. Sorry.

John Olden
Systems Administrator
Champaign Park District
217.398.2550 - voice
217.355.8421 - fax
217.398.2589 ext. 145 - voicemail



Erik Currier wrote:


John, or Decude users, does the Access database of the new 2006 of Imail; of the contacts 
effect on how Declude "reads" contacts for whitelisting?
 

 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Senderbase

2005-12-14 Thread John Carter
Sorry if 99% of you already know this, but give me a minute.  Sometime ago
someone here mentioned Senderbase.  If you haven't used www.senderbase.org
to help lookup IP's, domains, network owners, etc, it is worth trying out.
(I'm sure there are other good lookup sites.) It has been helpful verifying
bad boys and getting CIDR's.  However today I "discovered" a neat feature.

After clicking on the network owner, it most often shows a list of "closely
associated domains" and "addresses used to send mail" (network ex:
http://www.senderbase.org/search?searchBy=organization&searchString=GENUITY)
Clicking one of the domains will generally also produce an address list
specific to the domain. (domain ex.:
http://www.senderbase.org/search?searchBy=domain&searchString=savesign.com).
Along with the address list is an export function which will produce a text
file usable for a Declude ipfile, especially if you want to target specific
IP's. (See below. I used Plain Text-Windows & include hostnames.)

Well, if you knew this, you were ahead of the game; if not, Merry Christmas.

John C

Sample IP text listing

# Results from IronPort's SenderBase -- Addresses recently used, domain
'savesign.com'
# Exported: December 14, 2005
8.10.58.77  # ss77.savesign.com
8.10.58.84  # ss84.savesign.com
8.10.58.73  # ss73.savesign.com
8.10.58.70  # ss70.savesign.com
8.10.58.74  # ss74.savesign.com
8.10.58.75  # ss75.savesign.com
8.10.58.80  # ss80.savesign.com
8.10.58.72  # ss72.savesign.com
8.10.58.87  # ss87.savesign.com

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.