RE: [Declude.JunkMail] New Reporting Tool

2006-12-07 Thread Lists - Declude JunkMail 
Thanks so much for this!
 
I tried it out and it errors out as follows:
 
 File path : g:/logarchive/
 Processing a single day
 
 Opening File : g:/logarchive/dec1206.log


.
 
 Sorting arrays and cleaning up data
Unmatched [ in regex; marked by <-- HERE in m/[ <-- HERE weight/ at
f:\tools\dis
tro-declog.pl line 443.
 
My log is 20mb if that matters.



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS -
Systems Eng. (Karl Drugge)
Posted At: Thursday, December 07, 2006 1:53 PM
Posted To: Lists - Declude JunkMail
Conversation: New Reporting Tool
Subject: [Declude.JunkMail] New Reporting Tool



 

The newest PERL script. Slices, dices, etc ... Throw it in a directory,
edit a few environment variables at the top of the script, dump in a few
Declude logs, run it, enjoy. Requires PERL, of course.

 

Added two command line switches : 'day' and 'week' . Day does the
previous day, week does the previous week. No command line switch, and
you do all the logs in the directory. This can be memory
intensive... You have been warned ! My own server, with 11-13k log
files, consumes 700+ megs of memory when doing an entire month. Folks
with larger files might want to think about doing this many files at
once.

 

Karl Drugge

 

 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] New Reporting Tool

2006-12-07 Thread IS - Systems Eng. \(Karl Drugge\) 
 

The newest PERL script. Slices, dices, etc ... Throw it in a directory,
edit a few environment variables at the top of the script, dump in a few
Declude logs, run it, enjoy. Requires PERL, of course.

 

Added two command line switches : 'day' and 'week' . Day does the
previous day, week does the previous week. No command line switch, and
you do all the logs in the directory. This can be memory
intensive... You have been warned ! My own server, with 11-13k log
files, consumes 700+ megs of memory when doing an entire month. Folks
with larger files might want to think about doing this many files at
once.

 

Karl Drugge

 

 

  


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


Distro-declog.pl
Description: Distro-declog.pl

RE: [Declude.JunkMail] Turning outbound scanning off

2006-12-07 Thread Robert Grosshandler 
Understood.  As I mentioned before, we already have 
OUTBOUNDSCANNINGSPAM  OFF
INBOUNDSCANNINGSPAM ON
 
in our global.cfg.  What am I missing?
 
Thanks.

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin
Cox
Sent: Thursday, December 07, 2006 9:24 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Turning outbound scanning off


That would turn off virus scanning, but not junkmail scanning.

Darin.
 
 
- Original Message - 
From: Robert Grosshandler   
To: declude.junkmail@declude.com 
Sent: Thursday, December 07, 2006 10:15 AM
Subject: RE: [Declude.JunkMail] Turning outbound scanning off

Unfortunately, that didn't do it (at least not completely).  I'm not seeing
any entries in the logs.  Here are the headers:
 
X-Declude-Sender: [EMAIL PROTECTED] [67.165.154.15] 
X-Declude-Spoolname: D2d8e01620c5d.smd 
X-Declude-RefID: 
X-Declude-Scan: Score [9] at 09:04:57 on 07 Dec 2006 
X-Declude-Fail: Whitelisted 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno
Bloksma
Sent: Thursday, December 07, 2006 1:21 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Turning outbound scanning off


Hi,
 
In virus.cfg you need
INCOMING ON
OUTGOING OFF

Met vriendelijke groet,
Bonno Bloksma
hoofd systeembeheer


tio hogeschool hotelmanagement en toerisme 
begijnenhof 8-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
  [EMAIL PROTECTED]  /  
www.tio.nl 

- Original Message - 
From: Robert Grosshandler   
To: declude.junkmail@declude.com 
Sent: Thursday, December 07, 2006 1:55 AM
Subject: [Declude.JunkMail] Turning outbound scanning off

Hi
 
Declude is working wonderfully, too wonderfully.  It is scanning e-mail
we're sending out from our server, and we don't want it to do that, since it
adds headers and "stuff" that have no purpose, and might actually cause
filter issues on the receiving end.  We don't need it to do outbound virus
scanning, either.
 
That is, when I compose and send e-mail from my client (Outlook), send it
out via our Imail server, and the Imail server sends it on its merry way to,
say Hotmail, it ends up at Hotmail with Declude headers.
 
Obviously, we've missed something.
 
We've got the following directive in our global.cfg:
 
OUTBOUNDSCANNINGSPAM  OFF
INBOUNDSCANNINGSPAM ON
 
What else do we need, and where do we need it?
 
Thanks in advance.
 
Rob
 
 
 
 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Turning outbound scanning off

2006-12-07 Thread Darin Cox 
That would turn off virus scanning, but not junkmail scanning.

Darin.


- Original Message - 
From: Robert Grosshandler 
To: declude.junkmail@declude.com 
Sent: Thursday, December 07, 2006 10:15 AM
Subject: RE: [Declude.JunkMail] Turning outbound scanning off


Unfortunately, that didn't do it (at least not completely).  I'm not seeing any 
entries in the logs.  Here are the headers:

X-Declude-Sender: [EMAIL PROTECTED] [67.165.154.15] 
X-Declude-Spoolname: D2d8e01620c5d.smd 
X-Declude-RefID: 
X-Declude-Scan: Score [9] at 09:04:57 on 07 Dec 2006 
X-Declude-Fail: Whitelisted 




From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno Bloksma
Sent: Thursday, December 07, 2006 1:21 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Turning outbound scanning off


Hi,

In virus.cfg you need
INCOMING ON
OUTGOING OFF


Met vriendelijke groet,
Bonno Bloksma
hoofd systeembeheer



tio hogeschool hotelmanagement en toerisme 
begijnenhof 8-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
[EMAIL PROTECTED]  / www.tio.nl 
  - Original Message - 
  From: Robert Grosshandler 
  To: declude.junkmail@declude.com 
  Sent: Thursday, December 07, 2006 1:55 AM
  Subject: [Declude.JunkMail] Turning outbound scanning off


  Hi

  Declude is working wonderfully, too wonderfully.  It is scanning e-mail we're 
sending out from our server, and we don't want it to do that, since it adds 
headers and "stuff" that have no purpose, and might actually cause filter 
issues on the receiving end.  We don't need it to do outbound virus scanning, 
either.

  That is, when I compose and send e-mail from my client (Outlook), send it out 
via our Imail server, and the Imail server sends it on its merry way to, say 
Hotmail, it ends up at Hotmail with Declude headers.

  Obviously, we've missed something.

  We've got the following directive in our global.cfg:

  OUTBOUNDSCANNINGSPAM  OFF
  INBOUNDSCANNINGSPAM ON

  What else do we need, and where do we need it?

  Thanks in advance.

  Rob







  ---
  This E-mail came from the Declude.JunkMail mailing list. To
  unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
  type "unsubscribe Declude.JunkMail". The archives can be found
  at http://www.mail-archive.com. 

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Turning outbound scanning off

2006-12-07 Thread Robert Grosshandler 
Unfortunately, that didn't do it (at least not completely).  I'm not seeing
any entries in the logs.  Here are the headers:
 
X-Declude-Sender: [EMAIL PROTECTED] [67.165.154.15] 
X-Declude-Spoolname: D2d8e01620c5d.smd 
X-Declude-RefID: 
X-Declude-Scan: Score [9] at 09:04:57 on 07 Dec 2006 
X-Declude-Fail: Whitelisted 

  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno
Bloksma
Sent: Thursday, December 07, 2006 1:21 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail] Turning outbound scanning off


Hi,
 
In virus.cfg you need
INCOMING ON
OUTGOING OFF

Met vriendelijke groet,
Bonno Bloksma
hoofd systeembeheer


tio hogeschool hotelmanagement en toerisme 
begijnenhof 8-12 / 5611 el eindhoven
t 040 296 28 28 / f 040 237 35 20
  [EMAIL PROTECTED]  /  
www.tio.nl 

- Original Message - 
From: Robert Grosshandler   
To: declude.junkmail@declude.com 
Sent: Thursday, December 07, 2006 1:55 AM
Subject: [Declude.JunkMail] Turning outbound scanning off

Hi
 
Declude is working wonderfully, too wonderfully.  It is scanning e-mail
we're sending out from our server, and we don't want it to do that, since it
adds headers and "stuff" that have no purpose, and might actually cause
filter issues on the receiving end.  We don't need it to do outbound virus
scanning, either.
 
That is, when I compose and send e-mail from my client (Outlook), send it
out via our Imail server, and the Imail server sends it on its merry way to,
say Hotmail, it ends up at Hotmail with Declude headers.
 
Obviously, we've missed something.
 
We've got the following directive in our global.cfg:
 
OUTBOUNDSCANNINGSPAM  OFF
INBOUNDSCANNINGSPAM ON
 
What else do we need, and where do we need it?
 
Thanks in advance.
 
Rob
 
 
 
 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] DYNHELO

2006-12-07 Thread Jay Sudowski - Handy Networks LLC 
DYNHELO dynhelo  x   x   5   0

This test type, attempts to detect dynamic IPs in HELO/EHLO hostnames.
This test should be quite effective, since mailservers on IPs that have
dynamic-like reverse DNS entries will *not* normally send an HELO/EHLO
that look dynamic.  

DYNHELO is not an RBL test.  

-Jay


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Michael Thomas - Mathbox
Sent: Thursday, December 07, 2006 3:06 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] DYNHELO


Hi All,

Does anyone know what list(s) DYNHELO uses? The mail archive has nothing
useful. DYNHELO does not appear in the documentation for 3.1.3 or any of
the
others that I checked. I just noticed that on 12/1/06, at least one of
my
web server IP addresses, 63.150.236.34, started returning positive for
DYNHELO. I checked that IP address at DNSstuff against 272 lists and all
passed. I checked at Spamhaus, SORBS, NJABL, and MAPS (Checked by
DNSstuff,
but I looked anyway.). Still no listing. It is not a DNS problem. I run
a
caching only DNS on my mail server and it is working just fine.

Michael Thomas
Mathbox
978-683-6718
1-877-MATHBOX (Toll Free)
 




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] DYNHELO

2006-12-07 Thread Michael Thomas - Mathbox 
Hi All,

Does anyone know what list(s) DYNHELO uses? The mail archive has nothing
useful. DYNHELO does not appear in the documentation for 3.1.3 or any of the
others that I checked. I just noticed that on 12/1/06, at least one of my
web server IP addresses, 63.150.236.34, started returning positive for
DYNHELO. I checked that IP address at DNSstuff against 272 lists and all
passed. I checked at Spamhaus, SORBS, NJABL, and MAPS (Checked by DNSstuff,
but I looked anyway.). Still no listing. It is not a DNS problem. I run a
caching only DNS on my mail server and it is working just fine.

Michael Thomas
Mathbox
978-683-6718
1-877-MATHBOX (Toll Free)
 




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.