Re: [Declude.JunkMail] Move Files (Free Utility For Imail/Declude Users)
Comment's inline. Darrell John T (Lists) writes: Couple of questions: Does it run in an active session, such as the console, or does it run even if logged off? It runs in an active session. If you log off the program will be closed by windows. However, once started its interactive so you can lock the console/or disconnect from the TS session. Is number of files to move total of actual files, or number of pairs? Number of messages (pairs). So a value of 1,000 will move 1,000 messages (1,000 D* Files and the 1,000 matching Q* files). Once the process has started, what if I need to stop it, is it simply closing the app? You hit the Stop button. Closing the application will do it as well. If so, what happens if it just moved a D file and then stopped before it moved the Q file? This should never happen - it was coded to always move a pair. It is also coded to move the D* file first to prevent any broken message pairs in the event that the Q* file is grabbed prior to the D* file. --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Monday, July 10, 2006 8:03 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Move Files (Free Utility For Imail/Declude Users) Invariant Systems has released another useful free utility for IPSwitch Imail Users. Move Files is a utility that will move a number of Imail messages (Q*,D*) messages from a source directory to a destination directory on a timed basis. When you have a backup of your spool or Declude proc directory the first thing you do is move all of the messages out of those locations to restore normal mail flow. Previously you would hand move the messages back into the spool or Declude proc preventing another backup. Move Files helps by automating this task by moving a defined number of messages on a timed basis from a source folder to a destination folder. Download (See the news link on the right side): http://www.invariantsystems.com Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Latest All_LIst.dat file
What is the latest all_list.dat file. Mine is dated 9/28/2005. I am seeing an issue with 67.111.134.133 which is in Reston, VA. Howeverm Declude thinks its in Korea. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Latest All_LIst.dat file
Darrell, The latest version of that file is available on Declude's site. Once you log into your account, you will see it on the right hand side of the page, about half way down. Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, July 11, 2006 9:13 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Latest All_LIst.dat file What is the latest all_list.dat file. Mine is dated 9/28/2005. I am seeing an issue with 67.111.134.133 which is in Reston, VA. Howeverm Declude thinks its in Korea. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Latest All_LIst.dat file
There is a much more recent avail you can download from 'my account' on the declude site. If you cannot find it let me know and I will send it to you. -Nick Darrell ([EMAIL PROTECTED]) wrote: What is the latest all_list.dat file. Mine is dated 9/28/2005. I am seeing an issue with 67.111.134.133 which is in Reston, VA. Howeverm Declude thinks its in Korea. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] COPYFILE / Not Inserting X-HEADERS
I am noticing the COPYFILE does not add everything to the headers. One of the things its missing is my custom XINHEADERS. Is this by design? As my expectation is that all of the XINHEADERS would be added as they really help reviewing messages. Lastest version of Declude 4.2.20/IMAIL and I do have the directive COPYFILEACTIONWITHHEADERS set to ON. Darrell --- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Not sure who you spoke to at SmarterTools but I do NOT believe this is true. Declude will not pick up a message until it is completed writing both the .hdr and .eml files, that is the reason why SmarterMail while writing the header will have the .eml file as .em_ (while writing) so that when the .hdr is complete ie. Written then and only then will Declude pick up the file to process it. Also you will see clearly, that the SM logs indicate a problem long before we receive the message. This was a new problem introduced by SmarterMail - 4.2.20 provided a fix for this. Again coming back to a previous post I made talking about the effects of the Mail server on Declude. The question always comes back to who should provide the fix, in this case we did as it was causing messages not being scanned by Declude for spam. I am trying to get a better understanding to the problem from SM and as soon as I have some answers from them I will post to the lists. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 3:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Here is SmarterTools take on the problem: Failed is written to the .hdr if the message was not succesfully recieved via SMTP. For instance, if the connection is closed mid transmission. These(and corresponding .emls) are normally just deleted by SmarterMail. The only reason you are noticing them is because of Declude storing them in the error folder. The implication is that Declude is interrupting part of SmarterMail's normail process. Now I know this is essentially what Declude does anyway, but shouldn't Declude know the difference between a message that has finished SMTP and SmarterMail is ready to deliver, and a message that is incomplete in the SMTP process and an SMTP retry is occurring so this failed message should be ignored? Otherwise we are going to get thousands of unneccessary incomplete messages dumped into the error folder that is going to do nothing other than to take up disk space. Not to mention that if some other type of error occurs that puts a message in the error folder, we'll never find it because its buried under all these other superfluous messages. Before 4.2.20, this wasn't a problem. Original Message From: David Barker [EMAIL PROTECTED] Sent: Monday, July 10, 2006 3:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Gary, This is a SmarterMail issue. When they fail to complete the .hdr file they write Failed in the .hdr as this was causing major spam leakage for declude we decided to move incomplete messages to the \error folder. You could try changing the Failed to Written and drop the messages in the \spool. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Monday, July 10, 2006 2:52 PM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Now that I've installed 4.2.20, I'm getting a lot of messages in the error folder (I'm running SmarterMail 3.3.2369). Most of them seem to be spam, but there are some good messages in there. Am I now going to have to scan this folder for false positives just like the held spam folder? Here is an example of the .hdr file for a message that was good: Failed [EMAIL PROTECTED] [EMAIL PROTECTED] cmdspc: false helo: ivmail1.fcc.es What does Failed mean? Is there something I can look for in the headers of the message (in the .eml file) that would indicate this? Is there any way to requeue this message? Original Message From: David Barker [EMAIL PROTECTED] Sent: Friday, July 07, 2006 11:01 AM To: Declude.Virus@declude.com, Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 EVA ADD New NONSTANDARDHDR vulnerability test. Messages found to have broken headers are moved to the \virus folder EVA FIX ALLOWVULNERABILITIESFROM (for user) EVA FIX BANEXT buffer overflow SM ADD When an error is found in the envelope (.hdr) file the message is moved to the \error folder SM ADD Decludeproc will not start without a valid domainlist.xml SM FIX QUEUEFILE_SAVEFILE the log is showing the correct directory path SM FIX Allows admin to set VIRDIR to any directory path in the virus.cfg David Barker Product Manager Your Email security is our businessT 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
How about if the message has failed in the .hdr file declude just ignores the file to let SmarterMail process it as it see fit??? Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, July 11, 2006 12:26 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Not sure who you spoke to at SmarterTools but I do NOT believe this is true. Declude will not pick up a message until it is completed writing both the .hdr and .eml files, that is the reason why SmarterMail while writing the header will have the .eml file as .em_ (while writing) so that when the .hdr is complete ie. Written then and only then will Declude pick up the file to process it. Also you will see clearly, that the SM logs indicate a problem long before we receive the message. This was a new problem introduced by SmarterMail - 4.2.20 provided a fix for this. Again coming back to a previous post I made talking about the effects of the Mail server on Declude. The question always comes back to who should provide the fix, in this case we did as it was causing messages not being scanned by Declude for spam. I am trying to get a better understanding to the problem from SM and as soon as I have some answers from them I will post to the lists. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 3:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Here is SmarterTools take on the problem: Failed is written to the .hdr if the message was not succesfully recieved via SMTP. For instance, if the connection is closed mid transmission. These(and corresponding .emls) are normally just deleted by SmarterMail. The only reason you are noticing them is because of Declude storing them in the error folder. The implication is that Declude is interrupting part of SmarterMail's normail process. Now I know this is essentially what Declude does anyway, but shouldn't Declude know the difference between a message that has finished SMTP and SmarterMail is ready to deliver, and a message that is incomplete in the SMTP process and an SMTP retry is occurring so this failed message should be ignored? Otherwise we are going to get thousands of unneccessary incomplete messages dumped into the error folder that is going to do nothing other than to take up disk space. Not to mention that if some other type of error occurs that puts a message in the error folder, we'll never find it because its buried under all these other superfluous messages. Before 4.2.20, this wasn't a problem. Original Message From: David Barker [EMAIL PROTECTED] Sent: Monday, July 10, 2006 3:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Gary, This is a SmarterMail issue. When they fail to complete the .hdr file they write Failed in the .hdr as this was causing major spam leakage for declude we decided to move incomplete messages to the \error folder. You could try changing the Failed to Written and drop the messages in the \spool. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Monday, July 10, 2006 2:52 PM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Now that I've installed 4.2.20, I'm getting a lot of messages in the error folder (I'm running SmarterMail 3.3.2369). Most of them seem to be spam, but there are some good messages in there. Am I now going to have to scan this folder for false positives just like the held spam folder? Here is an example of the .hdr file for a message that was good: Failed [EMAIL PROTECTED] [EMAIL PROTECTED] cmdspc: false helo: ivmail1.fcc.es What does Failed mean? Is there something I can look for in the headers of the message (in the .eml file) that would indicate this? Is there any way to requeue this message? Original Message From: David Barker [EMAIL PROTECTED] Sent: Friday, July 07, 2006 11:01 AM To: Declude.Virus@declude.com, Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 EVA ADD New NONSTANDARDHDR vulnerability test. Messages found to have broken headers are moved to the \virus folder EVA FIX ALLOWVULNERABILITIESFROM (for user) EVA FIX BANEXT buffer overflow SMADD When an error is found in the envelope (.hdr) file the message is moved to the \error folder SMADD Decludeproc will not start without a valid domainlist.xml SMFIX
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
That is exactly what was happening prior to the fix and it created a deluge of spam ending up in SmarterMail inboxes. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Tuesday, July 11, 2006 3:49 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 How about if the message has failed in the .hdr file declude just ignores the file to let SmarterMail process it as it see fit??? Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, July 11, 2006 12:26 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Not sure who you spoke to at SmarterTools but I do NOT believe this is true. Declude will not pick up a message until it is completed writing both the .hdr and .eml files, that is the reason why SmarterMail while writing the header will have the .eml file as .em_ (while writing) so that when the .hdr is complete ie. Written then and only then will Declude pick up the file to process it. Also you will see clearly, that the SM logs indicate a problem long before we receive the message. This was a new problem introduced by SmarterMail - 4.2.20 provided a fix for this. Again coming back to a previous post I made talking about the effects of the Mail server on Declude. The question always comes back to who should provide the fix, in this case we did as it was causing messages not being scanned by Declude for spam. I am trying to get a better understanding to the problem from SM and as soon as I have some answers from them I will post to the lists. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 3:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Here is SmarterTools take on the problem: Failed is written to the .hdr if the message was not succesfully recieved via SMTP. For instance, if the connection is closed mid transmission. These(and corresponding .emls) are normally just deleted by SmarterMail. The only reason you are noticing them is because of Declude storing them in the error folder. The implication is that Declude is interrupting part of SmarterMail's normail process. Now I know this is essentially what Declude does anyway, but shouldn't Declude know the difference between a message that has finished SMTP and SmarterMail is ready to deliver, and a message that is incomplete in the SMTP process and an SMTP retry is occurring so this failed message should be ignored? Otherwise we are going to get thousands of unneccessary incomplete messages dumped into the error folder that is going to do nothing other than to take up disk space. Not to mention that if some other type of error occurs that puts a message in the error folder, we'll never find it because its buried under all these other superfluous messages. Before 4.2.20, this wasn't a problem. Original Message From: David Barker [EMAIL PROTECTED] Sent: Monday, July 10, 2006 3:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Gary, This is a SmarterMail issue. When they fail to complete the .hdr file they write Failed in the .hdr as this was causing major spam leakage for declude we decided to move incomplete messages to the \error folder. You could try changing the Failed to Written and drop the messages in the \spool. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Monday, July 10, 2006 2:52 PM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Now that I've installed 4.2.20, I'm getting a lot of messages in the error folder (I'm running SmarterMail 3.3.2369). Most of them seem to be spam, but there are some good messages in there. Am I now going to have to scan this folder for false positives just like the held spam folder? Here is an example of the .hdr file for a message that was good: Failed [EMAIL PROTECTED] [EMAIL PROTECTED] cmdspc: false helo: ivmail1.fcc.es What does Failed mean? Is there something I can look for in the headers of the message (in the .eml file) that would indicate this? Is there any way to requeue this message? Original Message From: David Barker [EMAIL PROTECTED] Sent: Friday, July 07, 2006 11:01 AM To: Declude.Virus@declude.com, Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 EVA ADD New NONSTANDARDHDR vulnerability
[Declude.JunkMail] Country tests
I looked in the 4.x Junkmail manual, and couldn't find an authoritative definition of the Country tests. I have found a number of archived messages, but it is tricky to know if the reason that things are documented is that they are being deprecated or whatever. Is there a Kbase article or Manual page on COUNTR*.* tests, variables, and filter options? Thanks, --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20
David, Has a 3. version been released with the same fixes as in 4.2 build 20? Mark Reimer IT Project Manager American CareSource 214-596-2464 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Country tests
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N Sent: Tuesday, July 11, 2006 3:57 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Country tests I looked in the 4.x Junkmail manual, and couldn't find an authoritative definition of the Country tests. I have found a number of archived messages, but it is tricky to know if the reason that things are documented is that they are being deprecated or whatever. Is there a Kbase article or Manual page on COUNTR*.* tests, variables, and filter options? Thanks, --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Country tests
http://support.declude.com/Customer/KBSearch.aspx?search=COUNTRYcategoryid= 0 David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N Sent: Tuesday, July 11, 2006 3:57 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Country tests I looked in the 4.x Junkmail manual, and couldn't find an authoritative definition of the Country tests. I have found a number of archived messages, but it is tricky to know if the reason that things are documented is that they are being deprecated or whatever. Is there a Kbase article or Manual page on COUNTR*.* tests, variables, and filter options? Thanks, --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Country tests
See if this helps: http://support.declude.com/Customer/KBArticle.aspx?articleid=6 and this may be of some use: http://support.declude.com/Customer/KBArticle.aspx?articleid=42 -chris - Original Message - From: Mike N [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, July 11, 2006 3:57 PM Subject: [Declude.JunkMail] Country tests I looked in the 4.x Junkmail manual, and couldn't find an authoritative definition of the Country tests. I have found a number of archived messages, but it is tricky to know if the reason that things are documented is that they are being deprecated or whatever. Is there a Kbase article or Manual page on COUNTR*.* tests, variables, and filter options? Thanks, --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20
No version 3 is still 3.10 are you experiencing any of the same problems exhibited by 4 ? David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark ReimerSent: Tuesday, July 11, 2006 4:01 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 David, Has a 3. version been released with the same fixes as in 4.2 build 20? Mark Reimer IT Project Manager American CareSource 214-596-2464 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20
So 3.10 does not have a buffer overflow in BANEXT for EVA? Mark Reimer IT Project Manager American CareSource 214-596-2464 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, July 11, 2006 3:07 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 No version 3 is still 3.10 are you experiencing any of the same problems exhibited by 4 ? David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Reimer Sent: Tuesday, July 11, 2006 4:01 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 David, Has a 3. version been released with the same fixes as in 4.2 build 20? Mark Reimer IT Project Manager American CareSource 214-596-2464 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
GotCha. I then like the move to the error folder. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, July 11, 2006 12:54 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 That is exactly what was happening prior to the fix and it created a deluge of spam ending up in SmarterMail inboxes. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Tuesday, July 11, 2006 3:49 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 How about if the message has failed in the .hdr file declude just ignores the file to let SmarterMail process it as it see fit??? Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, July 11, 2006 12:26 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Not sure who you spoke to at SmarterTools but I do NOT believe this is true. Declude will not pick up a message until it is completed writing both the .hdr and .eml files, that is the reason why SmarterMail while writing the header will have the .eml file as .em_ (while writing) so that when the .hdr is complete ie. Written then and only then will Declude pick up the file to process it. Also you will see clearly, that the SM logs indicate a problem long before we receive the message. This was a new problem introduced by SmarterMail - 4.2.20 provided a fix for this. Again coming back to a previous post I made talking about the effects of the Mail server on Declude. The question always comes back to who should provide the fix, in this case we did as it was causing messages not being scanned by Declude for spam. I am trying to get a better understanding to the problem from SM and as soon as I have some answers from them I will post to the lists. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 3:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Here is SmarterTools take on the problem: Failed is written to the .hdr if the message was not succesfully recieved via SMTP. For instance, if the connection is closed mid transmission. These(and corresponding .emls) are normally just deleted by SmarterMail. The only reason you are noticing them is because of Declude storing them in the error folder. The implication is that Declude is interrupting part of SmarterMail's normail process. Now I know this is essentially what Declude does anyway, but shouldn't Declude know the difference between a message that has finished SMTP and SmarterMail is ready to deliver, and a message that is incomplete in the SMTP process and an SMTP retry is occurring so this failed message should be ignored? Otherwise we are going to get thousands of unneccessary incomplete messages dumped into the error folder that is going to do nothing other than to take up disk space. Not to mention that if some other type of error occurs that puts a message in the error folder, we'll never find it because its buried under all these other superfluous messages. Before 4.2.20, this wasn't a problem. Original Message From: David Barker [EMAIL PROTECTED] Sent: Monday, July 10, 2006 3:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Gary, This is a SmarterMail issue. When they fail to complete the .hdr file they write Failed in the .hdr as this was causing major spam leakage for declude we decided to move incomplete messages to the \error folder. You could try changing the Failed to Written and drop the messages in the \spool. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Monday, July 10, 2006 2:52 PM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Now that I've installed 4.2.20, I'm getting a lot of messages in the error folder (I'm running SmarterMail 3.3.2369). Most of them seem to be spam, but there are some good messages in there. Am I now going to have to scan this folder for false positives just like the held spam folder? Here is an example of the .hdr file for a message that was good: Failed [EMAIL PROTECTED] [EMAIL PROTECTED] cmdspc: false helo: ivmail1.fcc.es What does Failed mean? Is there something I can look for in the headers of the message
Re: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20
Will there be any more 3.x releases? - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Tuesday, July 11, 2006 3:07 PM Subject: RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 No version 3 is still 3.10 are you experiencing any of the same problems exhibited by 4 ? David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark ReimerSent: Tuesday, July 11, 2006 4:01 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 David, Has a 3. version been released with the same fixes as in 4.2 build 20? Mark Reimer IT Project Manager American CareSource 214-596-2464 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20
Yes there will be further 3.x fixes for a period of time. However we have encouraged customers to move to 4.x as that is where future development will be focused. David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Tuesday, July 11, 2006 4:36 PMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 Will there be any more 3.x releases? - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Tuesday, July 11, 2006 3:07 PM Subject: RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 No version 3 is still 3.10 are you experiencing any of the same problems exhibited by 4 ? David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark ReimerSent: Tuesday, July 11, 2006 4:01 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 David, Has a 3. version been released with the same fixes as in 4.2 build 20? Mark Reimer IT Project Manager American CareSource 214-596-2464 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: SPAM-WARN: RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20
Also, doesn't 3.1 have a problem with writing headers under specific conditions (possibly identified in 4.2 as headers sometimes not written with copyfile)? See Declude ticket [30A-0C30A9AC-1BB6]. Michael ThomasMathbox978-683-67181-877-MATHBOX (Toll Free) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark ReimerSent: Tuesday, July 11, 2006 4:20 PMTo: declude.junkmail@declude.comSubject: SPAM-WARN: RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 So 3.10 does not have a buffer overflow in BANEXT for EVA? Mark Reimer IT Project Manager American CareSource 214-596-2464 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David BarkerSent: Tuesday, July 11, 2006 3:07 PMTo: declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 No version 3 is still 3.10 are you experiencing any of the same problems exhibited by 4 ? David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark ReimerSent: Tuesday, July 11, 2006 4:01 PMTo: declude.junkmail@declude.comSubject: [Declude.JunkMail] Has a 3. version been released with the same fixes as 4.2 build 20 David, Has a 3. version been released with the same fixes as in 4.2 build 20? Mark Reimer IT Project Manager American CareSource 214-596-2464 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Although I do not use SmarterMail, my take is these are like T files in Imail where it is not a complete message, but for some reason SmarterMail is allowing Declude to have them even though they are not complete. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 12:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Here is SmarterTools take on the problem: Failed is written to the .hdr if the message was not succesfully recieved via SMTP. For instance, if the connection is closed mid transmission. These(and corresponding .emls) are normally just deleted by SmarterMail. The only reason you are noticing them is because of Declude storing them in the error folder. The implication is that Declude is interrupting part of SmarterMail's normail process. Now I know this is essentially what Declude does anyway, but shouldn't Declude know the difference between a message that has finished SMTP and SmarterMail is ready to deliver, and a message that is incomplete in the SMTP process and an SMTP retry is occurring so this failed message should be ignored? Otherwise we are going to get thousands of unneccessary incomplete messages dumped into the error folder that is going to do nothing other than to take up disk space. Not to mention that if some other type of error occurs that puts a message in the error folder, we'll never find it because its buried under all these other superfluous messages. Before 4.2.20, this wasn't a problem. Original Message From: David Barker [EMAIL PROTECTED] Sent: Monday, July 10, 2006 3:24 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Gary, This is a SmarterMail issue. When they fail to complete the .hdr file they write Failed in the .hdr as this was causing major spam leakage for declude we decided to move incomplete messages to the \error folder. You could try changing the Failed to Written and drop the messages in the \spool. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Monday, July 10, 2006 2:52 PM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Now that I've installed 4.2.20, I'm getting a lot of messages in the error folder (I'm running SmarterMail 3.3.2369). Most of them seem to be spam, but there are some good messages in there. Am I now going to have to scan this folder for false positives just like the held spam folder? Here is an example of the .hdr file for a message that was good: Failed [EMAIL PROTECTED] [EMAIL PROTECTED] cmdspc: false helo: ivmail1.fcc.es What does Failed mean? Is there something I can look for in the headers of the message (in the .eml file) that would indicate this? Is there any way to requeue this message? Original Message From: David Barker [EMAIL PROTECTED] Sent: Friday, July 07, 2006 11:01 AM To: Declude.Virus@declude.com, Declude.JunkMail@declude.com Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 EVA ADD New NONSTANDARDHDR vulnerability test. Messages found to have broken headers are moved to the \virus folder EVA FIX ALLOWVULNERABILITIESFROM (for user) EVA FIX BANEXT buffer overflow SMADD When an error is found in the envelope (.hdr) file the message is moved to the \error folder SMADD Decludeproc will not start without a valid domainlist.xml SMFIX QUEUEFILE_SAVEFILE the log is showing the correct directory path SMFIX Allows admin to set VIRDIR to any directory path in the virus.cfg David Barker Product Manager Your Email security is our businessT 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL
Re: [Declude.JunkMail] Country tests
Hi Mike, Here is my understanding of the 2 tests: If an email originates from a country it will fail the COUNTRY test If an email passes through a country it will fail the COUNTRIES test -Nick Mike N wrote: I looked in the 4.x Junkmail manual, and couldn't find an authoritative definition of the Country tests. I have found a number of archived messages, but it is tricky to know if the reason that things are documented is that they are being deprecated or whatever. Is there a Kbase article or Manual page on COUNTR*.* tests, variables, and filter options? Thanks, --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
I don't have an answer to this question. I just know that it is a problem.
But what I find amusing is, here is another instance of two vendors of
interacting software products who point the finger at each other, both saying
it's the other guy's fault.
Original Message
From: John T \(Lists\) [EMAIL PROTECTED]
Sent: Tuesday, July 11, 2006 5:21 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Although I do not use SmarterMail, my take is these are like T files in
Imail where it is not a complete message, but for some reason SmarterMail is
allowing Declude to have them even though they are not complete.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 11, 2006 12:13 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Here is SmarterTools take on the problem:
Failed is written to the .hdr if the message was not succesfully
recieved via SMTP.
For
instance, if the connection is closed mid transmission. These(and
corresponding
.emls) are
normally just deleted by SmarterMail. The only reason you are noticing
them is
because of
Declude storing them in the error folder.
The implication is that Declude is interrupting part of SmarterMail's
normail process.
Now I know this is essentially what Declude does anyway, but shouldn't
Declude know
the difference between a message that has finished SMTP and SmarterMail is
ready to
deliver, and a message that is incomplete in the SMTP process and an SMTP
retry is
occurring so this failed message should be ignored? Otherwise we are
going to get
thousands of unneccessary incomplete messages dumped into the error folder
that is
going to do nothing other than to take up disk space. Not to mention that
if some
other type of error occurs that puts a message in the error folder, we'll
never find it
because its buried under all these other superfluous messages. Before
4.2.20, this
wasn't a problem.
Original Message
From: David Barker [EMAIL PROTECTED]
Sent: Monday, July 10, 2006 3:24 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Gary,
This is a SmarterMail issue. When they fail to complete the .hdr file
they
write Failed in the .hdr as this was causing major spam leakage for
declude we decided to move incomplete messages to the \error folder.
You
could try changing the Failed to Written and drop the messages in the
\spool.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Monday, July 10, 2006 2:52 PM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Now that I've installed 4.2.20, I'm getting a lot of messages in the
error
folder (I'm running SmarterMail 3.3.2369). Most of them seem to be
spam,
but there are some good messages in there. Am I now going to have to
scan
this folder for false positives just like the held spam folder?
Here is an example of the .hdr file for a message that was good:
Failed
[EMAIL PROTECTED]
[EMAIL PROTECTED]
cmdspc: false
helo: ivmail1.fcc.es
What does Failed mean? Is there something I can look for in the
headers
of the message (in the .eml file) that would indicate this? Is there
any
way to requeue this message?
Original Message
From: David Barker [EMAIL PROTECTED]
Sent: Friday, July 07, 2006 11:01 AM
To: Declude.Virus@declude.com, Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
EVA ADD New NONSTANDARDHDR vulnerability test. Messages
found to
have broken headers are moved to the \virus folder
EVA FIX ALLOWVULNERABILITIESFROM (for user)
EVA FIX BANEXT buffer overflow
SM ADD When an error is found in the envelope (.hdr) file
the
message is moved to the \error folder
SM ADD Decludeproc will not start without a valid
domainlist.xml
SM FIX QUEUEFILE_SAVEFILE the log is showing the correct
directory
path
SM FIX Allows admin to set VIRDIR to any directory path in
the
virus.cfg
David Barker
Product Manager
Your Email security is our businessT
978.499.2933 office
978.988.1311 fax
[EMAIL PROTECTED]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail. The archives can be found at
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Gary,
From time to time I feel like the Declude pinyada but in this instance we
have provided a solution for what is happening in SM. And as I have said we
are working with them to resolve this between us.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 11, 2006 5:31 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
I don't have an answer to this question. I just know that it is a problem.
But what I find amusing is, here is another instance of two vendors of
interacting software products who point the finger at each other, both
saying it's the other guy's fault.
Original Message
From: John T \(Lists\) [EMAIL PROTECTED]
Sent: Tuesday, July 11, 2006 5:21 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Although I do not use SmarterMail, my take is these are like T files
in Imail where it is not a complete message, but for some reason
SmarterMail is allowing Declude to have them even though they are not
complete.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Gary Steiner
Sent: Tuesday, July 11, 2006 12:13 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Here is SmarterTools take on the problem:
Failed is written to the .hdr if the message was not succesfully
recieved via SMTP.
For
instance, if the connection is closed mid transmission. These(and
corresponding
.emls) are
normally just deleted by SmarterMail. The only reason you are
noticing
them is
because of
Declude storing them in the error folder.
The implication is that Declude is interrupting part of
SmarterMail's
normail process.
Now I know this is essentially what Declude does anyway, but
shouldn't
Declude know
the difference between a message that has finished SMTP and
SmarterMail is
ready to
deliver, and a message that is incomplete in the SMTP process and an
SMTP
retry is
occurring so this failed message should be ignored? Otherwise we
are
going to get
thousands of unneccessary incomplete messages dumped into the error
folder
that is
going to do nothing other than to take up disk space. Not to
mention that
if some
other type of error occurs that puts a message in the error folder,
we'll
never find it
because its buried under all these other superfluous messages.
Before
4.2.20, this
wasn't a problem.
Original Message
From: David Barker [EMAIL PROTECTED]
Sent: Monday, July 10, 2006 3:24 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Gary,
This is a SmarterMail issue. When they fail to complete the .hdr
file
they
write Failed in the .hdr as this was causing major spam leakage
for declude we decided to move incomplete messages to the \error
folder.
You
could try changing the Failed to Written and drop the messages
in the \spool.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Gary Steiner
Sent: Monday, July 10, 2006 2:52 PM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Now that I've installed 4.2.20, I'm getting a lot of messages in
the
error
folder (I'm running SmarterMail 3.3.2369). Most of them seem to
be
spam,
but there are some good messages in there. Am I now going to have
to
scan
this folder for false positives just like the held spam folder?
Here is an example of the .hdr file for a message that was good:
Failed
[EMAIL PROTECTED]
[EMAIL PROTECTED]
cmdspc: false
helo: ivmail1.fcc.es
What does Failed mean? Is there something I can look for in the
headers
of the message (in the .eml file) that would indicate this? Is
there
any
way to requeue this message?
Original Message
From: David Barker [EMAIL PROTECTED]
Sent: Friday, July 07, 2006 11:01 AM
To: Declude.Virus@declude.com, Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
EVA ADD New NONSTANDARDHDR vulnerability test. Messages
found to
have broken headers are moved to the \virus folder
EVA FIX ALLOWVULNERABILITIESFROM (for user)
EVA FIX BANEXT buffer overflow
SM ADD When an error is found in the envelope (.hdr) file
the
message is moved to the \error folder
SM ADD Decludeproc will not start without a valid
domainlist.xml
SM FIX QUEUEFILE_SAVEFILE the log is
[Declude.JunkMail] Quoted Printable Decoding problems
Will there every be improvements to the decoding of the message body? I'd really like to see quoted printable improvements. Example: email contains quoted-printable encode declude=2e.com filter contains body 50 contains declude.com filter does not fire. Ihave to manually add body 50 contains declude=2e.com to the filter to get it to work. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
As long as someone is working on this. I have 20,000 messages in the
error directory from the past 48 hours. Obviously there is no way we can
sort through this volume of mail. Randomly looking at samples it appears
as though every messages has the Failed text in the .hdr file. I can
only hope that these are all messages that can be deleted.
Mark Strother
Pacific Online
Phone: 604-638-6010 ext. 222
Fax: 604-638-6020
Toll Free: 1-877-503-9870
http://www.pacificonline.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
David Barker
Sent: Tuesday, July 11, 2006 2:35 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Gary,
From time to time I feel like the Declude pinyada but in this instance
we
have provided a solution for what is happening in SM. And as I have said
we
are working with them to resolve this between us.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 11, 2006 5:31 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
I don't have an answer to this question. I just know that it is a
problem.
But what I find amusing is, here is another instance of two vendors of
interacting software products who point the finger at each other, both
saying it's the other guy's fault.
Original Message
From: John T \(Lists\) [EMAIL PROTECTED]
Sent: Tuesday, July 11, 2006 5:21 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Although I do not use SmarterMail, my take is these are like T files
in Imail where it is not a complete message, but for some reason
SmarterMail is allowing Declude to have them even though they are not
complete.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Gary Steiner
Sent: Tuesday, July 11, 2006 12:13 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Here is SmarterTools take on the problem:
Failed is written to the .hdr if the message was not succesfully
recieved via SMTP.
For
instance, if the connection is closed mid transmission. These(and
corresponding
.emls) are
normally just deleted by SmarterMail. The only reason you are
noticing
them is
because of
Declude storing them in the error folder.
The implication is that Declude is interrupting part of
SmarterMail's
normail process.
Now I know this is essentially what Declude does anyway, but
shouldn't
Declude know
the difference between a message that has finished SMTP and
SmarterMail is
ready to
deliver, and a message that is incomplete in the SMTP process and an
SMTP
retry is
occurring so this failed message should be ignored? Otherwise we
are
going to get
thousands of unneccessary incomplete messages dumped into the error
folder
that is
going to do nothing other than to take up disk space. Not to
mention that
if some
other type of error occurs that puts a message in the error folder,
we'll
never find it
because its buried under all these other superfluous messages.
Before
4.2.20, this
wasn't a problem.
Original Message
From: David Barker [EMAIL PROTECTED]
Sent: Monday, July 10, 2006 3:24 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Gary,
This is a SmarterMail issue. When they fail to complete the .hdr
file
they
write Failed in the .hdr as this was causing major spam leakage
for declude we decided to move incomplete messages to the \error
folder.
You
could try changing the Failed to Written and drop the messages
in the \spool.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Gary Steiner
Sent: Monday, July 10, 2006 2:52 PM
To: declude.junkmail@declude.com
Subject: re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Now that I've installed 4.2.20, I'm getting a lot of messages in
the
error
folder (I'm running SmarterMail 3.3.2369). Most of them seem to
be
spam,
but there are some good messages in there. Am I now going to have
to
scan
this folder for false positives just like the held spam folder?
Here is an example of the .hdr file for a message that was good:
Failed
[EMAIL PROTECTED]
[EMAIL PROTECTED]
cmdspc: false
helo: ivmail1.fcc.es
What does Failed mean? Is there something I can look for in the
headers
of the message (in the .eml file) that would indicate this? Is
there
any
way to requeue this message?
Original Message
Re[2]: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
As long as someone is working on this. I have 20,000 messages in the error directory from the past 48 hours. That's totally inappropriate. Degrade gracefully, people. At least make this a configurable option. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Mark, try this.
Go to Windows Search function.
Search files *.hdr
Search text in files failed
Search only the error directory.
Once you run the search, select all, cut, past into a temp directory.
You can now view the error directory to see if there is any file there that
does not have failed in it.
Again, I do not use SmarterMail so I do not know exactly how that is working
but just trying to provide some assistance.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark
Strother
Sent: Tuesday, July 11, 2006 4:34 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
As long as someone is working on this. I have 20,000 messages in the
error directory from the past 48 hours. Obviously there is no way we can
sort through this volume of mail. Randomly looking at samples it appears
as though every messages has the Failed text in the .hdr file. I can
only hope that these are all messages that can be deleted.
Mark Strother
Pacific Online
Phone: 604-638-6010 ext. 222
Fax: 604-638-6020
Toll Free: 1-877-503-9870
http://www.pacificonline.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
David Barker
Sent: Tuesday, July 11, 2006 2:35 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Gary,
From time to time I feel like the Declude pinyada but in this instance
we
have provided a solution for what is happening in SM. And as I have said
we
are working with them to resolve this between us.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Tuesday, July 11, 2006 5:31 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
I don't have an answer to this question. I just know that it is a
problem.
But what I find amusing is, here is another instance of two vendors of
interacting software products who point the finger at each other, both
saying it's the other guy's fault.
Original Message
From: John T \(Lists\) [EMAIL PROTECTED]
Sent: Tuesday, July 11, 2006 5:21 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Although I do not use SmarterMail, my take is these are like T files
in Imail where it is not a complete message, but for some reason
SmarterMail is allowing Declude to have them even though they are not
complete.
John T
eServices For You
Seek, and ye shall find!
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Gary Steiner
Sent: Tuesday, July 11, 2006 12:13 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Here is SmarterTools take on the problem:
Failed is written to the .hdr if the message was not succesfully
recieved via SMTP.
For
instance, if the connection is closed mid transmission. These(and
corresponding
.emls) are
normally just deleted by SmarterMail. The only reason you are
noticing
them is
because of
Declude storing them in the error folder.
The implication is that Declude is interrupting part of
SmarterMail's
normail process.
Now I know this is essentially what Declude does anyway, but
shouldn't
Declude know
the difference between a message that has finished SMTP and
SmarterMail is
ready to
deliver, and a message that is incomplete in the SMTP process and an
SMTP
retry is
occurring so this failed message should be ignored? Otherwise we
are
going to get
thousands of unneccessary incomplete messages dumped into the error
folder
that is
going to do nothing other than to take up disk space. Not to
mention that
if some
other type of error occurs that puts a message in the error folder,
we'll
never find it
because its buried under all these other superfluous messages.
Before
4.2.20, this
wasn't a problem.
Original Message
From: David Barker [EMAIL PROTECTED]
Sent: Monday, July 10, 2006 3:24 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Gary,
This is a SmarterMail issue. When they fail to complete the .hdr
file
they
write Failed in the .hdr as this was causing major spam leakage
for declude we decided to move incomplete messages to the \error
folder.
You
could try changing the Failed to Written and drop the messages
in the \spool.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of Gary Steiner
Sent:
RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Okay. I can confirm that all 20,000 messages have failed in the header file. My problem now seems to be that this directory is pretty large in size. A lot of these messages are larger than our maximum allowed size. I'm guessing that when SmarterMail receives an email larger than the maximum allowed size it writes failed in the header. Previously these were automatically deleted by SmarterMail and we never saw them. Now they're building up in the error directory. The maximum size we allow for an email is 25MBs but in this directory I see a lot of emails that are 25 MBs. I think I'm going to have to create a script that will clear this directory every day or so. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Tuesday, July 11, 2006 6:33 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Mark, try this. Go to Windows Search function. Search files *.hdr Search text in files failed Search only the error directory. Once you run the search, select all, cut, past into a temp directory. You can now view the error directory to see if there is any file there that does not have failed in it. Again, I do not use SmarterMail so I do not know exactly how that is working but just trying to provide some assistance. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Strother Sent: Tuesday, July 11, 2006 4:34 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 As long as someone is working on this. I have 20,000 messages in the error directory from the past 48 hours. Obviously there is no way we can sort through this volume of mail. Randomly looking at samples it appears as though every messages has the Failed text in the .hdr file. I can only hope that these are all messages that can be deleted. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, July 11, 2006 2:35 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Gary, From time to time I feel like the Declude pinyada but in this instance we have provided a solution for what is happening in SM. And as I have said we are working with them to resolve this between us. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 5:31 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 I don't have an answer to this question. I just know that it is a problem. But what I find amusing is, here is another instance of two vendors of interacting software products who point the finger at each other, both saying it's the other guy's fault. Original Message From: John T \(Lists\) [EMAIL PROTECTED] Sent: Tuesday, July 11, 2006 5:21 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Although I do not use SmarterMail, my take is these are like T files in Imail where it is not a complete message, but for some reason SmarterMail is allowing Declude to have them even though they are not complete. John T eServices For You Seek, and ye shall find! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 12:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Here is SmarterTools take on the problem: Failed is written to the .hdr if the message was not succesfully recieved via SMTP. For instance, if the connection is closed mid transmission. These(and corresponding .emls) are normally just deleted by SmarterMail. The only reason you are noticing them is because of Declude storing them in the error folder. The implication is that Declude is interrupting part of SmarterMail's normail process. Now I know this is essentially what Declude does anyway, but shouldn't Declude know the difference between a message that has finished SMTP and SmarterMail is ready to deliver, and a message that is incomplete in the SMTP process and an SMTP retry is occurring so this failed message should be ignored? Otherwise we are going to get thousands of unneccessary incomplete messages
Re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Mark et al., SmarterMail shouldn't be leaving this trash around, and it shouldn't be passing this trash to Declude. While having a work-around in Declude is nice in lieu of a fix from SmarterMail, this really should be fixed in SmarterMail if I am understanding the issues properly. Matt Mark Strother wrote: Okay. I can confirm that all 20,000 messages have failed in the header file. My problem now seems to be that this directory is pretty large in size. A lot of these messages are larger than our maximum allowed size. I'm guessing that when SmarterMail receives an email larger than the maximum allowed size it writes failed in the header. Previously these were automatically deleted by SmarterMail and we never saw them. Now they're building up in the error directory. The maximum size we allow for an email is 25MBs but in this directory I see a lot of emails that are 25 MBs. I think I'm going to have to create a script that will clear this directory every day or so. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John T (Lists) Sent: Tuesday, July 11, 2006 6:33 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Mark, try this. Go to Windows Search function. Search files *.hdr Search text in files failed Search only the error directory. Once you run the search, select all, cut, past into a temp directory. You can now view the error directory to see if there is any file there that does not have failed in it. Again, I do not use SmarterMail so I do not know exactly how that is working but just trying to provide some assistance. John T eServices For You "Seek, and ye shall find!" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Mark Strother Sent: Tuesday, July 11, 2006 4:34 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 As long as someone is working on this. I have 20,000 messages in the error directory from the past 48 hours. Obviously there is no way we can sort through this volume of mail. Randomly looking at samples it appears as though every messages has the Failed text in the .hdr file. I can only hope that these are all messages that can be deleted. Mark Strother Pacific Online Phone: 604-638-6010 ext. 222 Fax: 604-638-6020 Toll Free: 1-877-503-9870 http://www.pacificonline.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of David Barker Sent: Tuesday, July 11, 2006 2:35 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Gary, From time to time I feel like the Declude pinyada but in this instance we have provided a solution for what is happening in SM. And as I have said we are working with them to resolve this between us. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 5:31 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 I don't have an answer to this question. I just know that it is a problem. But what I find amusing is, here is another instance of two vendors of interacting software products who point the finger at each other, both saying "it's the other guy's fault." Original Message From: "John T \(Lists\)" [EMAIL PROTECTED] Sent: Tuesday, July 11, 2006 5:21 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Although I do not use SmarterMail, my take is these are like T files in Imail where it is not a complete message, but for some reason SmarterMail is allowing Declude to have them even though they are not complete. John T eServices For You "Seek, and ye shall find!" -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Gary Steiner Sent: Tuesday, July 11, 2006 12:13 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006 Here is SmarterTools take on the problem: Failed is written to the .hdr if the message was not succesfully recieved via SMTP. For instance, if the connection is closed mid transmission. These(and corresponding .emls) are normally just deleted by SmarterMail. The only reason you are
Re[2]: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006
Previously these were automatically deleted by SmarterMail and we never saw them. Now they're building up in the error directory. But that's completely at odds with the claim that _not_ quarantining them was resulting in spam leakage. So what's the real lowdown here? This should become a configurable option, not a silent quarantine, as obviously Mark would rather go back to the old behavior. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
