Re: [Declude.JunkMail] 4.3 Upgrade
I upgraded to 4.3 at the end of last week. No problems. Bill -- Original Message -- From: "Mark Reimer" <[EMAIL PROTECTED]> Reply-To: declude.junkmail@declude.com Date: Mon, 24 Jul 2006 11:16:22 -0500 >Have many people upgraded to 4.3 yet. I was wondering if anyone had >experienced any problems with the new version. > > > >Mark Reimer > >IT Project Manager > >American CareSource > >214-596-2464 > > > > > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Razor
Thank you, Sandy. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Friday, 21 July 2006 2:49 AM To: John Shacklett Subject: Re: [Declude.JunkMail] Razor > Do you need SA or something similar to invoke Razor or does it come > into play more directly? As I was mentioning in my exchange with Bill, the Razor client portion is distributed as a few Perl apps (separate ones for checking, reporting, whitelisting, etc.) with numerous supporting .pm modules; the heavy-lifting is done in the .pms, which can also be called directly. As a clearly Perl-centric suite, it fits naturally into SpamAssassin, where it is, by far, most often deployed; SA users are assumed to be using Razor, or are told to do so before complaining about their catch rates! Under Unix variants, the apps such as razor-check can also be forked on their own, and wrapper scripts can be written to return results to a variety of calling MTAs. Unfortunately, it is not at all easy to get razor-check to work on Windows Perl interpreters; I think I'm one of the few to have gotten it working at all, but its reliability is still questionable (i.e. it frequently times out, though it does return correct results whenever it connects). I think this has to do with Perl's socket support, which is not equivalent on Windows and *nix (even though a vast number of other Perl areas work just as well on either platform). So the only reliable way that I know of to run Razor on Windows is to use one of the "compiled" (really, more like "assembled") spamassassin.exe binaries that have the socket issues fixed up and Razor support inside. These exes, however, are necessarily bloated with Perl runtimes and the whole SpamAssassin enchilada, which means you are talking _major_ scan times per fork, even with all other SA tests turned off except for the Razor interface. Spamassassin.exe is simply a wrapped-up executable assembly of spamassassin.pl, and will not execute any faster than the .pl (it's just easier to roll out). Spamassassin.pl/.exe is the a standalone version of SA -- where a new spamassassin process is forked for every incoming mail -- which is not the way it should be run, even on Unix, though it appears to be even worse on Windows. Rather, SA should be launched via spamd, the client-server daemon, since that eliminates the huge overhead of Perl startup and module and rulebase loads; spamd is the only way to scale SA (okay, there are also third-party filtering daemons that support SA as well as other scanners, and replicate spamd's preloading functionality, but that's a whole other topic and completely on the *nix side). SPAMC32, a free Declude external test whose URL is in my sig, is a Windows client for spamd that was designed especially for Declude integration. It requires that you have a spamd running somewhere, and if you're going to need Razor support in your spamd, that somewhere is going to have to be a *nix box, as far as I know. OTOH, you could certainly demo Razor's accuracy by forking a bulky spamassassin.exe only against a corpus of false negatives. There are also a couple of (to my mind) dubious, low-adoption open-source SMTP proxies that claim to integrate Razor without SpamAssassin, but those are unproven in my book, and are likely too competitive to be appropriate on this list if they even work... but those might be another way to at least preview accuracy. HTH. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/downloa d/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/re lease/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.3 Upgrade
John, I had some of the same issues, and cured all leakage by disabling Hi-Jack. Give it a shot. Karl Drugge -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Doyle Sent: Monday, July 24, 2006 1:05 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.3 Upgrade Mark I upgraded last week. I'd had a leakage issue with 4.2 build 12 and went back to 4.09. I have had no problems since going back up to 4.3. I'm running Imail 8.22 hf2 On an unrelated issue. My AVG virus defs were not getting updated. It took a while to troubleshoot, but I got great support from Linda and David to resolve it. Turns out our firewall was blocking the outgoing/incoming tcp traffic on port 25 to declude servers. We allowed traffic to and from their servers and it started working. We use a watchguard firewall and it is pretty locked down. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Mark Reimer Sent: Monday, July 24, 2006 9:16 AM To: Declude JunkMail Subject: [Declude.JunkMail] 4.3 Upgrade Have many people upgraded to 4.3 yet. I was wondering if anyone had experienced any problems with the new version. Mark Reimer IT Project Manager American CareSource 214-596-2464 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] 4.3 Upgrade
Mark I upgraded last week. I'd had a leakage issue with 4.2 build 12 and went back to 4.09. I have had no problems since going back up to 4.3. I'm running Imail 8.22 hf2 On an unrelated issue. My AVG virus defs were not getting updated. It took a while to troubleshoot, but I got great support from Linda and David to resolve it. Turns out our firewall was blocking the outgoing/incoming tcp traffic on port 25 to declude servers. We allowed traffic to and from their servers and it started working. We use a watchguard firewall and it is pretty locked down. John -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Mark ReimerSent: Monday, July 24, 2006 9:16 AMTo: Declude JunkMailSubject: [Declude.JunkMail] 4.3 Upgrade Have many people upgraded to 4.3 yet. I was wondering if anyone had experienced any problems with the new version. Mark Reimer IT Project Manager American CareSource 214-596-2464 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] 4.3 Upgrade
I have two servers running under 4.3 with no issues. The only issue I have with the new version is that when I have the AVG scanner enabled it tells me it can't delete 1 of 2 files and that I may have an on access scanner configured (which I don't). If AVG is disabled I stop getting the error message. This problem also existed in 4.2.x. Darrell --- fpReview - Easy way to review held mail. Many features... http://www.invariantsystems.com Mark Reimer writes: Have many people upgraded to 4.3 yet. I was wondering if anyone had experienced any problems with the new version. Mark Reimer IT Project Manager American CareSource 214-596-2464 --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] 4.3 Upgrade
Have many people upgraded to 4.3 yet. I was wondering if anyone had experienced any problems with the new version. Mark Reimer IT Project Manager American CareSource 214-596-2464 ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
Re: [Declude.JunkMail] USA Today Article
It's a real poser. Lots of real email contains images, so we can't block all messages with images. The distribution method is by compromised bots, so the source IPs are all over the place. One possibility would be to do an OCR scan on anything with an image. Big server resources would be required to do that online, so it would have to be some sidetrack process. It would be interesting to see whether anybody else comes up with anything. PDF spam will be next, I think. -Dave Doherty Skywaves, Inc. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] USA Today Article
OK, but how to stop it? Troy D. Hilton Serveon, Inc. 302-529-8640 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stu Berlin Sent: Monday, July 24, 2006 9:10 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] USA Today Article Nice of USA Today to finally let everyone know why they are getting more junk e-mail. http://www.usatoday.com/money/industries/technology/2006-07-23-sneaky-spam_x .htm Stu --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] USA Today Article
Nice of USA Today to finally let everyone know why they are getting more junk e-mail. http://www.usatoday.com/money/industries/technology/2006-07-23-sneaky-spam_x.htm Stu --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
