[Declude.JunkMail] automated response

2006-12-22 Thread craig
I am going to be out of the office most of Friday the 22nd of December.

Unfortunately, yesterday I had to drive back to Marbella from Madrid to reboot 
a router and am now driving back to Madrid again today.

This means any pending work I had scheduled for yesterday is now moved to 
Tommorrow.






---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Solution for tooo much junkmail?

2006-12-22 Thread J Porter
We're all seeing it... My log files have increased over 30% in recent times 
as I'm sure yours have too. Through due diligence we stop an awful lot, but 
much still gets by.


But we're being active after the fact. Is there anyone who has knowledge of 
what virus and/or trojan is causing all of this great increase in activity?? 
The biggest thing we do know is that the majority of it is coming from our 
neighbors: the home-based systems on dial-up, DSL and cable.


I'd like to be more proactive and go on an education crusade to provide 
folks with the knowledge of how to detect if their systems are infected and 
what to do about it, but I have no idea of what to look for or what software 
to use to fix it.


Anyone with some leads on finding the ultimate sources that's creating all 
these zombies??


~Joe




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Upgraded to Security Suite - Whitelist stopped working.

2006-12-22 Thread S.J.Stanaitis
When I previously ran the 3.x version of Declude Junkmail, I used an
external file for my white-list.  I transferred it over to the new Security
Suite but haven't had any luck, it just gets skipped and whitelisted
addresses get tested like any other.

In my Global.cfg file I have the line:
WHITELISTFILE   D:\Imail\Declude\filters\whitelist.txt

In that file I have a few domains but mainly email addresses listed:

[EMAIL PROTECTED]
[EMAIL PROTECTED]
etc...

I'd check the docs but... :)  Any suggestions?

Thanks,
Sam

SJ.Stanaitis - Network Administrator
Decorative Product Source E-commerce Network
(877)-650-8054 x160
[EMAIL PROTECTED]




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Upgraded to Security Suite - Whitelist stopped working.

2006-12-22 Thread S.J.Stanaitis
Nevermind, fixed it... needed to be in the $default$.junkmail file.

Thanks,
Sam

SJ.Stanaitis - Network Administrator
Decorative Product Source E-commerce Network


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
S.J.Stanaitis
Sent: Friday, December 22, 2006 8:59 AM
To: declude.junkmail@declude.com
Cc: 'Linda Pagillo'
Subject: [Declude.JunkMail] Upgraded to Security Suite - Whitelist stopped
working.

When I previously ran the 3.x version of Declude Junkmail, I used an
external file for my white-list.  I transferred it over to the new Security
Suite but haven't had any luck, it just gets skipped and whitelisted
addresses get tested like any other.

In my Global.cfg file I have the line:
WHITELISTFILE   D:\Imail\Declude\filters\whitelist.txt

In that file I have a few domains but mainly email addresses listed:

[EMAIL PROTECTED]
[EMAIL PROTECTED]
etc...

I'd check the docs but... :)  Any suggestions?

Thanks,
Sam

SJ.Stanaitis - Network Administrator
Decorative Product Source E-commerce Network
(877)-650-8054 x160
[EMAIL PROTECTED]




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Upgraded to Security Suite - Whitelist stopped working.

2006-12-22 Thread John T \(Lists\)
You said it is being skipped. What does the junkmail log say?

John T
eServices For You

Life is a succession of lessons which must be lived to be understood.
Ralph Waldo Emerson (1802-1882)


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
 S.J.Stanaitis
 Sent: Friday, December 22, 2006 5:59 AM
 To: declude.junkmail@declude.com
 Cc: 'Linda Pagillo'
 Subject: [Declude.JunkMail] Upgraded to Security Suite - Whitelist stopped
working.
 
 When I previously ran the 3.x version of Declude Junkmail, I used an
 external file for my white-list.  I transferred it over to the new
Security
 Suite but haven't had any luck, it just gets skipped and whitelisted
 addresses get tested like any other.
 
 In my Global.cfg file I have the line:
 WHITELISTFILE D:\Imail\Declude\filters\whitelist.txt
 
 In that file I have a few domains but mainly email addresses listed:
 
 [EMAIL PROTECTED]
 [EMAIL PROTECTED]
 etc...
 
 I'd check the docs but... :)  Any suggestions?
 
 Thanks,
 Sam
 
 SJ.Stanaitis - Network Administrator
 Decorative Product Source E-commerce Network
 (877)-650-8054 x160
 [EMAIL PROTECTED]
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Solution for tooo much junkmail?

2006-12-22 Thread John T \(Lists\)
 I'd like to be more proactive and go on an education crusade to provide
 folks with the knowledge of how to detect if their systems are infected
and
 what to do about it, but I have no idea of what to look for or what
software
 to use to fix it.

You're going to educate:
1. Little ole' Mrs. Smith who only uses her computer to view pictures of
her grandkids and to get email.
2. Tom the all-league quarter back football star who only does research for
football scholarships. Well yeah also to chat with his friends. And do keep
up on the latest tunes.
3. The geek up the street who listens to Leo Laporte and chats about how so
many people are on the Internet and don't have a clue about which MB is the
best for the hot on-line games and how they waste so much money on things
like AV and firewalls.
4. Mrs. Jones who searches for new recopies about fried dumplings and to get
the latest entertainment world gossip.
5. The small business owner who gets email and his website as part of the
$35 per month DSL package at the shop but his workers don't go on the
Internet so there is nothing to worry about.

More power to ya.

 Anyone with some leads on finding the ultimate sources that's creating all
 these zombies??

And if you could then what? Unless you want to be a vigilante the government
(politicians, courts, lawyers, no wait not lawyers they stick up for them)
will just shake their finger at them and say No No No you must be good boys
and girls)

Remember people, if the battle against spam and viruses was that easy, the
war would be over by now.

John T
eServices For You

Life is a succession of lessons which must be lived to be understood.
Ralph Waldo Emerson (1802-1882)




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Solution for tooo much junkmail?

2006-12-22 Thread Kevin Bilbee
Setup a blacklist and start blocking the IP ranges of the Home-Based
systems. Take the offending IP addresses and use ARIN to look up the ip
range of the offending ISP. You may even be able to call the ISP to get
their non-business ip ranges.


Kevin Bilbee

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of J
 Porter
 Sent: Friday, December 22, 2006 2:38 AM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Solution for tooo much junkmail?
 
 We're all seeing it... My log files have increased over 30% in recent
 times
 as I'm sure yours have too. Through due diligence we stop an awful lot,
 but
 much still gets by.
 
 But we're being active after the fact. Is there anyone who has
 knowledge of
 what virus and/or trojan is causing all of this great increase in
 activity??
 The biggest thing we do know is that the majority of it is coming from
 our
 neighbors: the home-based systems on dial-up, DSL and cable.
 
 I'd like to be more proactive and go on an education crusade to
 provide
 folks with the knowledge of how to detect if their systems are infected
 and
 what to do about it, but I have no idea of what to look for or what
 software
 to use to fix it.
 
 Anyone with some leads on finding the ultimate sources that's creating
 all
 these zombies??
 
 ~Joe
 
 
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Seeking IMail Expert and Consultant for Hire - Follow Up

2006-12-22 Thread Don Schreiner
Remember this post I made back on November 10, 2006 (see below)? A lot of
list members have since e-mailed asking if I ever found someone and how it
was coming along. In follow-up to those same folks on the list we finally
completed upgrade to our Declude installs from 1.82  to 4.3.23. Once again
(since Scott left) I am comfortable with controlling Spam using Declude. We
remain at IMail 8.22 until such time I feel comfortable their Web Mail and
other Web based security/functionality issues get resolved.

 

I want to thank those who specifically responded offering help (Darrell with
Invariant, Dave Doherty, and Matt with Mail Pure), and also all the folks on
this list who have provided help to me over the years. All of you are the
best in the business and I would never have remained a Declude client for
the last 5 years without same. Folks like Sandy, John, Len, Doug, Andy,
Darin (and may others) who make posts make it possible to keep learning
moving forward.

 

Darrell with Invariant (http://www.invariantsystems.com) was the first to
respond and offered his help free of charge. I was not looking for free
help, but a consultant to work with. Regardless, I decided to take him up on
his offer and insisted to compensate something for his time. He never did
give me a fee or schedule, so I came up with one on my own and he was worth
every penny and more!!!

 

One of my major concerns was losing the ability reviewing False Positives
(as I was using the old Spam Review). That came to rest when I discovered
his Invariant False Positive Review software product. It is the best tool I
have ever used and loaded with all kinds of features like on-the-fly
reporting to Sniffer, Filter file updating, DNS lookups, and a lot more. If
anyone needs a cool tool to review your held Spam and built-in tools to
manage same, I highly recommend this FP Review product. Invariant also has
several other good products I strongly recommend including invURIBL which is
also helping us tag Spam. Darrell never really pushed his products on us,
but rather kept to helping me better understand our E-mail System, how best
to use and configure Declude, Sniffer, Filters, Weighting, and more. I made
the decision to purchase his products without pressure.

 

In summary, based on number of servers, accounts, and volume, it was not
cost-effective for us to farm out our Spam filtering. I strongly considered
doing this and it may be the most appropriate for other companies with
different circumstances. I needed to learn how to manage on our own with
what limited resources we had in place. Darrell was very sensitive to this,
our CPU usage, and other items. As we grow, we may need to implement a
Gateway server like IMGate, Alligate, ASSP, etc.(all of which I am studying)
, but for now we are hanging in there (about 60K messages daily on one
server, 40K on another, across multiple domains, about 3500 users). I am
also open to other products like MX Guard, but we have invested so much in
Declude it is difficult to switch at this point. We are stopping lots more
Spam thanks to Darrell's assistance and strongly recommend him to anyone
needing an E-mail server consultant.

 

Anyone interested in details, please e-mail me off-list and be glad to
share. Seasons greetings and peace to all!  Thanks.

 

-Don

 

CompBiz.Inc.

407-322-8654

 

- Original Message - 

From: Don mailto:[EMAIL PROTECTED]  Schreiner 

To: declude.junkmail@declude.com 

Sent: Friday, November 10, 2006 6:36 AM

Subject: [Declude.JunkMail] Seeking IMail Expert and Consultant for Hire

 

Dear Declude List,

 

I am seeking an IMail/Declude/Sniffer, etc. expert for consultation and hire
via telephone, e-mail, and remote Terminal Server. Please contact me off
list if interested in helping teach this old dog new tricks. Below is some
info about our situation.

 

With ongoing issues, bugs, and version changes (both IMail and Declude), we
need help with not only decision making moving forward, but the best
configurations for our clients filtering Spam and Virus'. All our licenses
and SA's are up-to-date, but we remain at IMail 8.22 and Declude 1.82. Our
license renewal dates are forthcoming for IMail in December, and Declude
next year. Product knowledge with great results of other technologies like
MXGuard, invURIBl, ASSP, ClamAV, Log Analyzers, etc. is desired, as we are
certainly would consider if better alternatives can be proven. I recently
tried implementing MXGuard and invURIBL with limited success and reverted
back to our original set-up, as it seemed to be catching more Spam. Not sure
it was these products fault, but perhaps myself in the set-up? We have been
using IMail/Declude since early version 4.0 days and with mostly acceptable
filtering results until these last few years, and growing worse in recent
months with .gif and stock spams. I currently need some concentrated help
with set-up, upgrades, and guidance. While we are a small hosting and
Coldfusion Dev firm 

[Declude.JunkMail] Virus sneaking past Declude/AVG/F-PROT?

2006-12-22 Thread S.J.Stanaitis
I've got a single mailbox on my Imail server configured to get all the SPAM.
It's then processed in TheBat!  (Exciting, I know.  Take a moment and
revel.)

 

Anyhow, my Symantec Antivirus is snagging a slew of Trojan.Dowiex!inf which
it identifies as a low risk Trojan horse.  I've got Declude 4 running both
AVG and F-Prot and it snuck past.  Anyone else seeing this?

 

http://www.symantec.com/security_response/writeup.jsp?docid=2006-121817-5005
-99

 

Thanks,

Sam

 

SJ.Stanaitis - Network Administrator

Decorative Product Source E-commerce Network


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Virus sneaking past Declude/AVG/F-PROT?

2006-12-22 Thread Harry Vanderzand
do you have avafterjm on?
 
In that case if it is deemed as spam then virus scan will not run on it.
 

Harry Vanderzand 
inTown Internet  Computer Services 
519-741-1222


 


  _  

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
S.J.Stanaitis
Sent: Friday, December 22, 2006 3:55 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Virus sneaking past Declude/AVG/F-PROT?



I've got a single mailbox on my Imail server configured to get all the SPAM.
It's then processed in TheBat!  (Exciting, I know.  Take a moment and
revel.)

 

Anyhow, my Symantec Antivirus is snagging a slew of Trojan.Dowiex!inf which
it identifies as a low risk Trojan horse.  I've got Declude 4 running both
AVG and F-Prot and it snuck past.  Anyone else seeing this?

 

http://www.symantec.com/security_response/writeup.jsp?docid=2006-121817-5005
-99

 

Thanks,

Sam

 

SJ.Stanaitis - Network Administrator

Decorative Product Source E-commerce Network


---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.

re: [Declude.JunkMail] Virus sneaking past Declude/AVG/F-PROT?

2006-12-22 Thread Gary Steiner
Submit a sample through http://www.virustotal.com
and it will show you which anti-virus programs are currently identifying it.

Gary


 Original Message 
 From: S.J.Stanaitis [EMAIL PROTECTED]
 Sent: Friday, December 22, 2006 4:09 PM
 To: declude.junkmail@declude.com
 Subject: [Declude.JunkMail] Virus sneaking past Declude/AVG/F-PROT?
 
 I've got a single mailbox on my Imail server configured to get all the SPAM.
 It's then processed in TheBat!  (Exciting, I know.  Take a moment and
 revel.)
 
  
 
 Anyhow, my Symantec Antivirus is snagging a slew of Trojan.Dowiex!inf which
 it identifies as a low risk Trojan horse.  I've got Declude 4 running both
 AVG and F-Prot and it snuck past.  Anyone else seeing this?
 
  
 
 http://www.symantec.com/security_response/writeup.jsp?docid=2006-121817-5005
 -99
 
  
 
 Thanks,
 
 Sam
 
  
 
 SJ.Stanaitis - Network Administrator
 
 Decorative Product Source E-commerce Network
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list. To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail. The archives can be found
 at http://www.mail-archive.com.
 
 
 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com. 





---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.