Re: [Declude.JunkMail] Valid Senders - Best Declude Practices

2006-12-28 Thread Sanford Whiteman
> I  wrote  a Cold Fusion script that looks for these silly text files
> every  so  many  minutes and then parses the crappy, cluttered thing
> into  a nice clean CSV for me, and now I can do anything I want with
> it.  I  imagine  that  someday  I'll  use it in conjunction with the
> gateway, but hey, I have this information right now.

> What would be the best way to use this information with Declude?

I'll answer your query without padding your stated needs.

5XXSink  is  a  connection-time  event  sink  for  MS SMTP (that is, a
plug-in written to the MS API) expressly designed for high-performance
recipient  validation  against a text file, with changes taking effect
immediately.  Simple to operate: you maintain lists of valid recipient
domains  and  users, it rejects anything not on that list. You can set
up   an   MS  SMTP  instance  as  your  MX,  same-box,  forwarding  to
SmarterMail.  Whatever  else you do with MS SMTP is up to you, 5XXSINK
is  just  built  for  it because it's a highly reliable and OS-bundled
MTA.

5XXSINK  is  free.  It  is  in prod at numerous sites with no reported
problems.  (I'm  the  primary  developer  of this tool, and all of our
downloadable tools are free software.)

http://www.imprimia.com/products/software/freeutils/5xxsink/download/release

Later,  when it comes to building your gateway, you know you'll have a
plethora  of  options  across  OSs  and  vendors/communities. For now,
5XXSINK  is  the  fastest existing method I know of directly. OTOH, if
you  were  using  IMail  as  the  MTA wrapper for Declude, it would be
possible  to do all this stuff natively within IMail by using a "smart
store-and-forward"  setup  and some sync scripts for your S&F domains.
The same logic seems possible for SM, and would certainly be the "best
way"  in  theory;  but if you've already probed their forums, I assume
there's no established "cookbook" from that side.

Note  that  there  are  many other products basically equivalent to MS
SMTP   +   5XXSINK   insofar   as  this  need  is  concerned:  they're
easy-to-maintain,   lightweight   Windows-based   MTAs   that  perform
recipient  validation  from  text  files  and  thus can serve the same
purpose  as an MX running on the same box as your mailbox server. Mind
you,  their  *additional*  features,  footprint, and scaleability vary
enormously,  but  here they would all fill the bill. Mercury/32's SMTP
module is one I can def'ly vouch for.

--Sandy



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases!
  
http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/
  
http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



Re: [Declude.JunkMail] Valid Senders - Best Declude Practices

2006-12-28 Thread Herb Guenther




Yes, we do it to filter for some customers that want to run their own
mail server but not have to deal with managing virus and spam filters. 
We use the same smartermail server to host about 80 domains/1400
mailboxes and do domain forwarding for another 10 or so domains with
about 500 addl mailboxes.

Herb

John T (Lists) wrote:

  Does SmarterMail allow you to create aliases for a domain, such as
[EMAIL PROTECTED] is an alias for [EMAIL PROTECTED]?

John T
eServices For You

"Life is a succession of lessons which must be lived to be understood."
Ralph Waldo Emerson (1802-1882)



  
  
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of

  
  Michael
  
  
Cummins
Sent: Thursday, December 28, 2006 1:44 PM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] Valid Senders - Best Declude Practices

OK.

I have a box that I use as an incoming relay for about 30 or so Exchange
servers that all live out in the wild.  I run Smarter Mail, Declude,

  
  Message
  
  
Sniffer, INVURIBL, F-Prot and all kinds of good stuff before I pass it

  
  along
  
  
to the Exchange server with SmarterMail domain forwarding.

I am getting my ass kicked by volume because the mail server accepts any
address and forwards it along; most of which of course are addresses that
don't exist.

I'm building a gateway box in the near future, which will help keep the
incoming fluff down a bit, I'm sure, but what I really need to do is to
implement some kind of valid recipient list.  I doubt that I'll be able to
LDAP all over God's green earth with any kind of reliability or speed.

Since the gateway won't be implemented for a few weeks, I'm been playing
with things to get ready for it, namely, how to get valid sender lists

  
  from
  
  
such a disparate group of Exchange servers.

So.

I patched together this _vbscript_ that exports a list of exchange addresses
using LDAP into a text file.

It runs as a WinCron job.

I created a batch file that uploads it to one of my Cold Fusion servers.

That runs as a WinCron job, too.

I wrote a Cold Fusion script that looks for these silly text files every

  
  so
  
  
many minutes and then parses the crappy, cluttered thing into a nice clean
CSV for me, and now I can do anything I want with it.  I imagine that
someday I'll use it in conjunction with the gateway, but hey, I have this
information right now.

What would be the best way to use this information with Declude?

Ideally, it should be implemented on a per domain basis, in case I can't

  
  get
  
  
some Exchange servers to play nice with me.  Eventually I suppose it will

  
  be
  
  
mandatory, I'm sure, but not right now when I am coming up with best
practices, eh?

So do I set up each text file for each domain as a separate filter?  And
then only use it in the applicable per domain junkmail file?

Is that the best way to do it?

Or am I making Declude work too hard?

I would really love any suggestions you might have.  Thanks!

-- Michael Cummins



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

  
  



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

  


-- 
Herb Guenther
Lanex, LLC
www.lanex.com
(262)789-0966x102 Office
(262)780-0424 Direct


This e-mail is confidential and is for the use of the intended recipient(s)only. If you are not an intended recipient please advise us of our error by return e-mail then delete this e-mail and any attached files. You may not copy, disclose or use the contents in any way.




---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.



Re: [Declude.JunkMail] Valid Senders - Best Declude Practices

2006-12-28 Thread Herb Guenther




Hi Mike;

I feel your pain,  processing 200,000 messages a day for about 15K good
ones.  It sounds to me like your server may just be underpowered.  We
just upgraded our server to a new unit moving from Windows 2000 to 2003
R2 and to Dual, Dual core Opterons, even with only one CPU on the mobo
now I can tell that we would be able to handle a number like 1M
messages a day with Declued/sniffer/smartermail just fine.  The better
hardware gives you more licensing bang for the buck.

Herb

Michael Cummins wrote:

  
I can strongly consider Alligate in front of Declude. 

  
  
So let's say I build a dedicated Alligate box to live in front of my two
Declude enabled servers.  How much of a load would it be able to handle?  I
would need it to handle close to 250k messages per day (current combined
load) with room to grow, and it looks like Alligate is
yet-another-thousand-dollar-thing-that-will-need-yearly-subscriptions-of-hun
dreds-of-dollars.

I'd be happier if I could just send my money to one company.  So would
Declude, I'm sure.  But hey.  If that's what you gotta do.

I was thinking of using a home built postfix gateway to go in front of the
boxen, and if I need more I was just going to add more identical postfix
boxen a la round robin DNS.

Bad idea?  Good idea?

But my customers could use some help today, which is why I was thinking of
using Declude to do some recipient verification.  Conceptually, that would
cut down the work load considerably, right?  I've been having trouble with
my Message Sniffer (in persistent mode) going into a cascading failure
during peak periods because of the volume; so I leave it off most of the
time, which is a huge waste.  

I'm just wondering how to go about using Declude to do this.

Thanks for all the feedback!  I've got an open mind.

-- Michael Cummins



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

  


-- 
Herb Guenther
Lanex, LLC
www.lanex.com
(262)789-0966x102 Office
(262)780-0424 Direct


This e-mail is confidential and is for the use of the intended recipient(s)only. If you are not an intended recipient please advise us of our error by return e-mail then delete this e-mail and any attached files. You may not copy, disclose or use the contents in any way.




---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.



Re: [Declude.JunkMail] Valid Senders - Best Declude Practices

2006-12-28 Thread Matt

Mike,

You are making your life more difficult by approaching it this way.  
Since you gateway, you need recipient validation, and that alone will 
drop your utilization by at least half if not much more.  You would also 
benefit from pre-scanning.  Alligate does both things painlessly.  Just 
ask them for a trial license and read their manual pages.  It's not that 
expensive either.


Matt



Michael Cummins wrote:
I can strongly consider Alligate in front of Declude. 



So let's say I build a dedicated Alligate box to live in front of my two
Declude enabled servers.  How much of a load would it be able to handle?  I
would need it to handle close to 250k messages per day (current combined
load) with room to grow, and it looks like Alligate is
yet-another-thousand-dollar-thing-that-will-need-yearly-subscriptions-of-hun
dreds-of-dollars.

I'd be happier if I could just send my money to one company.  So would
Declude, I'm sure.  But hey.  If that's what you gotta do.

I was thinking of using a home built postfix gateway to go in front of the
boxen, and if I need more I was just going to add more identical postfix
boxen a la round robin DNS.

Bad idea?  Good idea?

But my customers could use some help today, which is why I was thinking of
using Declude to do some recipient verification.  Conceptually, that would
cut down the work load considerably, right?  I've been having trouble with
my Message Sniffer (in persistent mode) going into a cascading failure
during peak periods because of the volume; so I leave it off most of the
time, which is a huge waste.  


I'm just wondering how to go about using Declude to do this.

Thanks for all the feedback!  I've got an open mind.

-- Michael Cummins



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



  



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Valid Senders - Best Declude Practices

2006-12-28 Thread Michael Cummins
> I can strongly consider Alligate in front of Declude. 

So let's say I build a dedicated Alligate box to live in front of my two
Declude enabled servers.  How much of a load would it be able to handle?  I
would need it to handle close to 250k messages per day (current combined
load) with room to grow, and it looks like Alligate is
yet-another-thousand-dollar-thing-that-will-need-yearly-subscriptions-of-hun
dreds-of-dollars.

I'd be happier if I could just send my money to one company.  So would
Declude, I'm sure.  But hey.  If that's what you gotta do.

I was thinking of using a home built postfix gateway to go in front of the
boxen, and if I need more I was just going to add more identical postfix
boxen a la round robin DNS.

Bad idea?  Good idea?

But my customers could use some help today, which is why I was thinking of
using Declude to do some recipient verification.  Conceptually, that would
cut down the work load considerably, right?  I've been having trouble with
my Message Sniffer (in persistent mode) going into a cascading failure
during peak periods because of the volume; so I leave it off most of the
time, which is a huge waste.  

I'm just wondering how to go about using Declude to do this.

Thanks for all the feedback!  I've got an open mind.

-- Michael Cummins



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Valid Senders - Best Declude Practices

2006-12-28 Thread Michael Cummins

In this case, all of the domains are simply listed in the "Domain
Forwarding" portion of the SmarterMail config, and Declude operates with
Outbound Scanning on.  

The SmarterMail server is not actually the hosting server, it is just
forwarding the mail to the Exchange servers, so no domains or e-mail
addresses are set up there.

I run an IMail 2006.1 server for my POP/IMAP needs, but I am taking a closer
and closer look at SmarterMail for that, too.

Since I haven't used SmarterMail for POP/IMAP, I can only guess that it
handles Aliases like any other POP/IMAP server.

-- Michael Cummins




-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T
(Lists)
Sent: Thursday, December 28, 2006 5:27 PM
To: declude.junkmail@declude.com
Subject: RE: [Declude.JunkMail] Valid Senders - Best Declude Practices

Does SmarterMail allow you to create aliases for a domain, such as
[EMAIL PROTECTED] is an alias for [EMAIL PROTECTED]

John T
eServices For You

"Life is a succession of lessons which must be lived to be understood."
Ralph Waldo Emerson (1802-1882)




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] Valid Senders - Best Declude Practices

2006-12-28 Thread John T \(Lists\)
Does SmarterMail allow you to create aliases for a domain, such as
[EMAIL PROTECTED] is an alias for [EMAIL PROTECTED]

John T
eServices For You

"Life is a succession of lessons which must be lived to be understood."
Ralph Waldo Emerson (1802-1882)



> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Michael
> Cummins
> Sent: Thursday, December 28, 2006 1:44 PM
> To: declude.junkmail@declude.com
> Subject: [Declude.JunkMail] Valid Senders - Best Declude Practices
> 
> OK.
> 
> I have a box that I use as an incoming relay for about 30 or so Exchange
> servers that all live out in the wild.  I run Smarter Mail, Declude,
Message
> Sniffer, INVURIBL, F-Prot and all kinds of good stuff before I pass it
along
> to the Exchange server with SmarterMail domain forwarding.
> 
> I am getting my ass kicked by volume because the mail server accepts any
> address and forwards it along; most of which of course are addresses that
> don't exist.
> 
> I'm building a gateway box in the near future, which will help keep the
> incoming fluff down a bit, I'm sure, but what I really need to do is to
> implement some kind of valid recipient list.  I doubt that I'll be able to
> LDAP all over God's green earth with any kind of reliability or speed.
> 
> Since the gateway won't be implemented for a few weeks, I'm been playing
> with things to get ready for it, namely, how to get valid sender lists
from
> such a disparate group of Exchange servers.
> 
> So.
> 
> I patched together this VBscript that exports a list of exchange addresses
> using LDAP into a text file.
> 
> It runs as a WinCron job.
> 
> I created a batch file that uploads it to one of my Cold Fusion servers.
> 
> That runs as a WinCron job, too.
> 
> I wrote a Cold Fusion script that looks for these silly text files every
so
> many minutes and then parses the crappy, cluttered thing into a nice clean
> CSV for me, and now I can do anything I want with it.  I imagine that
> someday I'll use it in conjunction with the gateway, but hey, I have this
> information right now.
> 
> What would be the best way to use this information with Declude?
> 
> Ideally, it should be implemented on a per domain basis, in case I can't
get
> some Exchange servers to play nice with me.  Eventually I suppose it will
be
> mandatory, I'm sure, but not right now when I am coming up with best
> practices, eh?
> 
> So do I set up each text file for each domain as a separate filter?  And
> then only use it in the applicable per domain junkmail file?
> 
> Is that the best way to do it?
> 
> Or am I making Declude work too hard?
> 
> I would really love any suggestions you might have.  Thanks!
> 
> -- Michael Cummins
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



[Declude.JunkMail] Valid Senders - Best Declude Practices

2006-12-28 Thread Michael Cummins
OK.

I have a box that I use as an incoming relay for about 30 or so Exchange
servers that all live out in the wild.  I run Smarter Mail, Declude, Message
Sniffer, INVURIBL, F-Prot and all kinds of good stuff before I pass it along
to the Exchange server with SmarterMail domain forwarding.

I am getting my ass kicked by volume because the mail server accepts any
address and forwards it along; most of which of course are addresses that
don't exist.

I'm building a gateway box in the near future, which will help keep the
incoming fluff down a bit, I'm sure, but what I really need to do is to
implement some kind of valid recipient list.  I doubt that I'll be able to
LDAP all over God's green earth with any kind of reliability or speed.

Since the gateway won't be implemented for a few weeks, I'm been playing
with things to get ready for it, namely, how to get valid sender lists from
such a disparate group of Exchange servers.

So.

I patched together this VBscript that exports a list of exchange addresses
using LDAP into a text file.

It runs as a WinCron job.

I created a batch file that uploads it to one of my Cold Fusion servers.

That runs as a WinCron job, too.

I wrote a Cold Fusion script that looks for these silly text files every so
many minutes and then parses the crappy, cluttered thing into a nice clean
CSV for me, and now I can do anything I want with it.  I imagine that
someday I'll use it in conjunction with the gateway, but hey, I have this
information right now.  

What would be the best way to use this information with Declude?

Ideally, it should be implemented on a per domain basis, in case I can't get
some Exchange servers to play nice with me.  Eventually I suppose it will be
mandatory, I'm sure, but not right now when I am coming up with best
practices, eh?

So do I set up each text file for each domain as a separate filter?  And
then only use it in the applicable per domain junkmail file?

Is that the best way to do it?

Or am I making Declude work too hard?

I would really love any suggestions you might have.  Thanks!

-- Michael Cummins



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] OT: Taiwan earthquake

2006-12-28 Thread Andy Schmidt
Odd, I was just observing that this morning!

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary
Steiner
Sent: Thursday, December 28, 2006 01:16 AM
To: declude.junkmail@declude.com
Subject: [Declude.JunkMail] OT: Taiwan earthquake

Anybody notice a significant drop in spam?

>From the CNN web site:
"Quake knocks Asia back to pre-Internet days"
http://www.cnn.com/2006/WORLD/asiapcf/12/27/taiwan.quake.ap/index.html





---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.