Re: [Declude.JunkMail] MailPure?
Evans, I put back up the Beta filters directory on my server at: http://www.mailpure.com/software/decludefilters/beta There are two _vbscript_ filters in there, Size and BlankSubject. BlankSubject is the more modern of the two and gives a good example of how to parse multiple script arguments, open an E-mail and process it using some RegEx. Declude 2.0.6+ also supports bitmasked codes, so you can write a single external script that returns a single code than can be parsed by Declude to mean multiple test failures. This is of course a huge advantage to having multiple separate tests that do the same things over and over again. You can do something like 30 bitmasked result codes this way. You should search the archives for this list for more information if you get to the point of trying this out. Matt Evans Martin wrote: I would like to try my hand at writing filters. Does anyone have any sample vb source code? Maybe just a skeleton I could use to learn from? Thanks, Evans Martin EVANS MARTIN [EMAIL PROTECTED] HOSTING: http://www.martek.net PROGRAMMING: http://www.martekware.com iPlus Info Browser IPBs IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. http://www.martek.net/Default.aspx?tabid=96 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott Fisher Sent: Friday, January 27, 2006 12:56 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] MailPure? Here's my link to filters / external programs that I found over time. Publically (meaning free) available filters / external programs have dropped off over time. http://it.farmprogress.com/declude/declude.htm The Mailpure filters were very educational. They definitely taught me a lot about filters when I was a new Declude user. I still use modified version of foreign / anti-av / and the tld filters. - Original Message - From: Matt To: Declude.JunkMail@declude.com Sent: Friday, January 27, 2006 5:43 PM Subject: Re: [Declude.JunkMail] MailPure? Evans, I haven't updated these filters in a while, and most of my development has been in _vbscript_ plug-ins instead of native Declude filters for the past two years. I recently removed all of the old pages from my site since they were stagnant. I can put back up some of the filters that I had listed there if you wish. They are at least educational in terms of what you can do with Declude's native filtering. Scott Fisher also has a page up that lists several good resources for filters including some plug-ins. I can't recall the link though. Matt Evans Martin wrote: I went to MailPure.Com to see if they had any new filter files today and noticed that the link is broken and that their main page is just a logo page without any links now. Are they still providing filter files? Evans Martin EVANS MARTIN [EMAIL PROTECTED] HOSTING: http://www.martek.net PROGRAMMING: http://www.martekware.com iPlus Info Browser IPBs IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. http://www.martek.net/Default.aspx?tabid=96
[Declude.JunkMail] Recurring Quemgr Issues again
OK - I'm officially fed up and looking to move to a different platform. I finally thought I had this licked, but it is rearing up again.Our Queuemgr just up'd and stpped again today; still haven't gotten it back up. We were on IMail 8.15hf2; dual Xeon 2GB Ram, Win2000, declude 3.x (latest) JMPro, Virus std and HJ, F-ProtThe issue IS NOT- mail gets processed by Declude fine; it's not being processed by Imail Queuemgr when pla ced back in the spool folder*I have stopped / restarted all services; no good*Istopped services, renamed the spool file so I could start from scratch, restarted all and it is hit or miss.*dns IS NOT the problem - dns runs on the server direct; I have concluded from nslookup that DNS is woking fine. I have even tried to switch DNS to a new server; same thing.I took the opportunity to upgrade to 8.22 while I am down, thinking this would help. Nope.It's a d%$ good thing I have a SmarterMail server running for a few test domains so I can still communicate with the group for assistance. The only reason I haven;t switched to SM yet (latest v2) is because as far as I know, SM declude still do not support AMTP Auth whitelist.Anyone have any suggestions?Randy ArmbrechtGlobal Web Solutions, Inc.804-382-5300 option 1
[Declude.JunkMail] SmarterMail: Doesn't log authenitcated user to log file
I am currently trying to clean up a very nasty spam run someone initiated through our SmarterMail server. Much to my dismay, it appears that SmarterMail does not log which user authenticates a SMTP session, only that the session is authenticated to the SMTP log file. How is this possible ??? 13:06:53 [200.181.148.244][456908] rsp: 220 mail3.denver.wehostwebsites.com 13:06:53 [200.181.148.244][456908] connected at 1/29/2006 1:06:53 PM 13:06:54 [200.181.148.244][456908] cmd: EHLO 192.168.7.100 13:06:54 [200.181.148.244][456908] rsp: 250-imail3 Hello [200.181.148.244] 250-SIZE 31457280 250-AUTH LOGIN CRAM-MD5 250 OK 13:06:54 [200.181.148.244][456908] cmd: AUTH LOGIN 13:06:54 [200.181.148.244][456908] rsp: 334 VXNlcm5hbWU6 13:06:55 [200.181.148.244][456908] rsp: 334 UGFzc3dvcmQ6 13:06:55 [200.181.148.244][456908] rsp: 235 Authentication successful 13:06:55 [200.181.148.244][456908] cmd: MAIL FROM:[EMAIL PROTECTED] 13:06:55 [200.181.148.244][456908] rsp: 250 OK [EMAIL PROTECTED] Sender ok 13:06:56 [200.181.148.244][456908] cmd: RCPT TO:[EMAIL PROTECTED] 13:06:56 [200.181.148.244][456908] rsp: 250 OK [EMAIL PROTECTED] Recipient ok 13:06:57 [200.181.148.244][456908] cmd: DATA This is just un-***-believable ... If anyone has any suggestions on how I can track down the customer abusing my SMTP via SmarterMail logs, please email me directly to [EMAIL PROTECTED], since my main email is currently outbound only. Thanks! - Jay Sudowski // Handy Networks LLC Director of Technical Operations Providing Shared, Reseller, Semi Managed and Fully Managed Windows 2003 Hosting Solutions Tel: 877-70 HANDY x882 | Fax: 888-300-2FAX www.handynetworks.com --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] MailPure?
Thanks for the info Matt. Im going to dig in and try to get my feet wet in the filter arena soon. I appreciate the help. Evans From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Sunday, January 29, 2006 1:26 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] MailPure? Evans, I put back up the Beta filters directory on my server at: http://www.mailpure.com/software/decludefilters/beta There are two _vbscript_ filters in there, Size and BlankSubject. BlankSubject is the more modern of the two and gives a good example of how to parse multiple script arguments, open an E-mail and process it using some RegEx. Declude 2.0.6+ also supports bitmasked codes, so you can write a single external script that returns a single code than can be parsed by Declude to mean multiple test failures. This is of course a huge advantage to having multiple separate tests that do the same things over and over again. You can do something like 30 bitmasked result codes this way. You should search the archives for this list for more information if you get to the point of trying this out. Matt Evans Martin wrote: I would like to try my hand at writing filters. Does anyone have any sample vb source code? Maybe just a skeleton I could use to learn from? Thanks, Evans Martin EVANS MARTIN [EMAIL PROTECTED] HOSTING: http://www.martek.net PROGRAMMING: http://www.martekware.com iPlus Info Browser IPBs IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. http://www.martek.net/Default.aspx?tabid=96 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott Fisher Sent: Friday, January 27, 2006 12:56 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] MailPure? Here's my link to filters / external programs that I found over time. Publically (meaning free) available filters / external programs have dropped off over time. http://it.farmprogress.com/declude/declude.htm The Mailpure filters were very educational. They definitely taught me a lot about filters when I was a new Declude user. I still use modified version of foreign / anti-av / and the tld filters. - Original Message - From: Matt To: Declude.JunkMail@declude.com Sent: Friday, January 27, 2006 5:43 PM Subject: Re: [Declude.JunkMail] MailPure? Evans, I haven't updated these filters in a while, and most of my development has been in _vbscript_ plug-ins instead of native Declude filters for the past two years. I recently removed all of the old pages from my site since they were stagnant. I can put back up some of the filters that I had listed there if you wish. They are at least educational in terms of what you can do with Declude's native filtering. Scott Fisher also has a page up that lists several good resources for filters including some plug-ins. I can't recall the link though. Matt Evans Martin wrote: I went to MailPure.Com to see if they had any new filter files today and noticed that the link is broken and that their main page is just a logo page without any links now. Are they still providing filter files? Evans Martin EVANS MARTIN [EMAIL PROTECTED] HOSTING: http://www.martek.net PROGRAMMING: http://www.martekware.com iPlus Info Browser IPBs IMail Migration Tool, password browser, reporting suite make IPlus Info Browser something no IMail administrator should be without. http://www.martek.net/Default.aspx?tabid=96
