Re: [Declude.JunkMail] Messages slipping through JM
We have been receiving a lot of blank subject, blank sender type, blank e-mail type of messages. Anybody know what these are? Aaron On Jun 29, 2004, at 12:58 PM, Jason @ AreaTech wrote: We have had a many e-mails showing up as of late that have no subject/body. Further investigation shows that these messages are far above our hold weight. The latest one I've received has a subject, but no body. Here are the headers from the message: Received: from host107-183.pool80181.interbusiness.it [80.181.183.107] by areatech.com (SMTPD32-7.14) id A7EC9DA0084; Tue, 29 Jun 2004 14:50:04 -0500 From: [EMAIL PROTECTED] To: dolphins@ areatech.com Subject: Pay less money - receive more software.. It's too simple. ;-) quibble Date: Tue, 29 Jun 2004 14:48:37 -0600 Message-ID: 3[4 X-RBL-Warning: DSN: Not supporting null originator (DSN) [2-19-9800] X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 12. [2-36-12000] X-RBL-Warning: WEIGHT10: Weight of 39 reaches or exceeds the limit of 10. [2-37-12800] X-RBL-Warning: WEIGHT20: Weight of 39 reaches or exceeds the limit of 27. [2-40-14000] X-Declude-Sender: [EMAIL PROTECTED] [80.181.183.107] X-Spam-Tests-Failed: SORBS-DUHL, DSN, SPAMCHK, WEIGHT10, WEIGHT20 [39] X-UIDL: 385498355 Can someone shed some light on what may be causing this to be delivered? Thanks Jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude version 1.79 and Delog
Scott, I've noticed the logging problem as well and I do have LOGLEVEL MID in my global.cfg. That doesn't resolve the issue. Aaron On Jun 1, 2004, at 9:01 AM, R. Scott Perry wrote: I noticed after I upgraded to Declude 1.79, Delog 1.08b is no longer able to calculate the number of failed messages from the declude log files. It returns that 0 failed. Apparently the log files for declude have changed with this new version. Does anybody know if there is a newer version of Delog or another program that can analyze the declude log files? Thanks I believe this is due to the recent change in the log file format. If you change the LOGLEVEL LOW line in your \IMail\Declude\global.cfg file to LOGLEVEL MID, I believe it will start working again. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude version 1.79 and Delog
Scott, Changing to Loglevel High seems to have added the Msg Failed lines to the log. I run delog at the end of the day and see what the results are, but I'm pretty sure it works now. Thanks, Aaron On Jun 1, 2004, at 10:16 AM, R. Scott Perry wrote: Did the Msg Failed line under LOGLEVEL MID to report the individual line numbers that it failed in a filter test get moved to HIGH? With v1.78 and earlier, the Msg failed lines were at LOGLEVEL LOW. With v1.79 and later, they are at LOGLEVEL HIGH. I believe that the Msg failed lines for filter tests have always included the line number that triggered the filter. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] f-prot
Even at 20 bucks its not bad Whats the current part number John? Thanks, Aaron Caviglia On May 18, 2004, at 2:16 PM, Scott Fisher wrote: On March 18, McAfee VirusScan for DOS was CDW part number 458401, and it was $11.00 Of course no one wants to jump through any hoops for $11 (It probably costs more for CDW to process the license paperwork than $11 Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/18/04 02:56PM Do you have a CDW product number on this? Called and they took forever to come back with $20+ Thanks, John --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] f-prot
Where can we purchase the command line scanner? Thanks, Aaron Caviglia On May 17, 2004, at 8:23 PM, Goran Jovanovic wrote: For the latter there is an outstanding request to Scott to kill additional scanning once a scanner detects a virus.. So right now if you use multiple scanners when you scan with ScannerA and it finds a virus Declude will still call ScannerB and have it scan as well? Scott pointed out that his McAfee was only $11.00 for the year so the price barrier is non-existant and I see from your and Scott's responses that there are indeed reasons to have more than one scanner. Thank you all Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, May 17, 2004 10:03 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] f-prot On 17 May 2004 at 9:13, Goran Jovanovic wrote: For the folks using multiple scanners, do you have any stats on how often the secondary scanner found a virus that the first one missed? Hi Goran, Here are my latest stats: Virus Totals: 441 F-Prot 412 AVG 446 McAfee - Vunerabilities: 349 - I update the defs for all every 4 hrs on a staggered schedule. Because of possible false positives I have found it hard to rank one particular scanner over another. For me the advantage to have more than one is one [varies] company will always come out with protection for a new outbreak before another. The downside is cost and cpu overhead. For the latter there is an outstanding request to Scott to kill additional scanning once a scanner detects a virus.. -Nick Hayer I realize that the cost of F-Prot (which I am using) is quite low and others might be as well, so it is not a cost issue but rather a Do I really need it?. Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, May 17, 2004 12:49 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] f-prot I find the Mcafee is the best at detecting viruses within encrupted zips. Otherwise they are pretty even. I'd recommend using F-Prot and Mcafee. Mcafee for the DOS command line scanner is dirt cheap. I'll see if I can find my price tomorrow. [EMAIL PROTECTED] 5/15 12:29p Can anyone tell me how f-prot compares to mcafee or symantec when it comes to keeping their database up with new viruses? That just seems pretty cheap but hey that's exactly what I'm looking for as long as it works well :) thanks, Larry Craddock --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] VirusScan 7.0 Suite Small Business Help!
Hi All, I'm trying to use VirusScan's scan.exe as a second virus scanner for my Imail server using declude. But the problem is when I run scan.exe from a prompt it tells me the dat files are from Jan 2003 and only detects something like 63,000+ viruses. I can' seem to get the dat files for scan.exe to update. However the console will automatically update the windows dat files Anybody got experience with this??? Thanks, Aaron Caviglia --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Pulling Account Information
Hey Everybody, Had a question that I can't seem to find online. I am moving from a Registry based Imail install to a SQL based. And I was wondering how I could pull login information (e-mail addy and password) and put it into a text file of some sort? Thanks, Aaron --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] OT: Pulling Account Information
It seems that the Imail list has been a little slow lately. I generally find the Declude crowd a cut above ;) Thanks, Aaron On Mar 26, 2004, at 10:36 AM, Darin Cox wrote: Don't know if the passwords are a one-way hash or not, but there are loads of tools to enumerate the registry keys and values for SQL Server. SQL itself has xp_instance_regenumkeys and xp_instance_regenumvalues that you can use. You might be able to just copy over the info without decrypting and reencrypting. Someone on the IMail list might have more info. Darin. - Original Message - From: Aaron J. Caviglia [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, March 26, 2004 1:18 PM Subject: [Declude.JunkMail] Pulling Account Information Hey Everybody, Had a question that I can't seem to find online. I am moving from a Registry based Imail install to a SQL based. And I was wondering how I could pull login information (e-mail addy and password) and put it into a text file of some sort? Thanks, Aaron --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Pulling Account Information
Sandy, I tried and didn't get anything. What would it be under? I look under imail sql and imail user extraction. Thanks, Aaron On Mar 26, 2004, at 10:42 AM, Sanford Whiteman wrote: Had a question that I can't seem to find online. I am moving from a Registry based Imail install to a SQL based. And I was wondering how I could pull login information (e-mail addy and password) and put it into a text file of some sort? I posted SQL to do this to the IMail list within the last six months--search for it. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Pulling Account Information
Thanks Sandy! Aaron On Mar 26, 2004, at 11:49 AM, Sanford Whiteman wrote: Sorry--had you backward. Try http://iplus.martek.net. Their IPlus Info Browser extracts usernames and passwords from the Registry userbase for a very low price ($29) vs. Ipswitch's Externalizer ($99). --Sandy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Server Recommendation
Isaias, We currently receive about 70-80% of SPAM. Are servers are a little bit overkill for our needs, about 3,000 - 4,000 e-mails a day. But the server has never hiccuped in over a year now. Only need to reboot to patch windows. Its also weathered a couple of SPAM floods as well, (10,000 emails an hour). Dual Xeon 2.55GHz 533 Bus 4GB DDR RAM RAID 5+HOTFIX Array (All 250GB Serial ATA HDs 7200RPM) Its way overkill, but I love horsepower! Aaron On Mar 12, 2004, at 8:35 AM, TC Online Support wrote: We are currently looking to upgrade our mail server. Lately the processing of the CPU has causing the SMTP to be working real slow, causing a lot of timeouts. We currently we are running a P3 1.133GHz with 512MB RAM. We are looking to upgrade to a dual processor. I was wondering if anybody was willing to share what type of server hardware they are using and if anybody had any recommendations on the CPU power and RAM to have optimal performance. Also I was wondering what amount of SPAM is being received by other ISPs. Currently over 90% of all incoming mail to our server is SPAM. I just wanted to see if this is normal for an ISP. Isaias Hernandez Internet Tech Support [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Server Recommendation
I've always wondered how much e-mail I could flow. Based on your figures I think I would be able to push 5 to 6 million. Were directly connect to an OC12 as well, via GB Ethernet. I love speed... I've setup my 68 Camaro the same way ;) Aaron On Mar 12, 2004, at 8:53 AM, Darryl Koster wrote: That's killer horsepower, We are running dual 800's right now with a gig of ram and other than the spam we receiving the other day our server setup has never had a hiccup. Even then they only hiccupped at receiving over 1,000,000 spam in a 12 hour period. Darryl -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron J. Caviglia Sent: Friday, March 12, 2004 11:44 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Server Recommendation Isaias, We currently receive about 70-80% of SPAM. Are servers are a little bit overkill for our needs, about 3,000 - 4,000 e-mails a day. But the server has never hiccuped in over a year now. Only need to reboot to patch windows. Its also weathered a couple of SPAM floods as well, (10,000 emails an hour). Dual Xeon 2.55GHz 533 Bus 4GB DDR RAM RAID 5+HOTFIX Array (All 250GB Serial ATA HDs 7200RPM) Its way overkill, but I love horsepower! Aaron On Mar 12, 2004, at 8:35 AM, TC Online Support wrote: We are currently looking to upgrade our mail server. Lately the processing of the CPU has causing the SMTP to be working real slow, causing a lot of timeouts. We currently we are running a P3 1.133GHz with 512MB RAM. We are looking to upgrade to a dual processor. I was wondering if anybody was willing to share what type of server hardware they are using and if anybody had any recommendations on the CPU power and RAM to have optimal performance. Also I was wondering what amount of SPAM is being received by other ISPs. Currently over 90% of all incoming mail to our server is SPAM. I just wanted to see if this is normal for an ISP. Isaias Hernandez Internet Tech Support [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
