RE: [Declude.JunkMail] Emails not be scanned by Declude

[David Lewis-Waller]

Michael,

Thank you for the pointer and inded the Declude info was at the end of the
message source:

Subject: SPAM-VHIGH 
X-Declude-Sender: [EMAIL PROTECTED] [71.110.9.118]
X-Declude-Spoolname: Dce4a0357a8e2.smd
X-Note: This E-mail was scanned by Declude JunkMail for evidence of spam.
X-Note: This E-mail was scanned by F-Prot for viruses.
X-Note: For further information visit http://www.wisshost.com
X-Note: SPAM tests failed:[SORBS-DUHL, SPAMCOP, SPAMHAUS-XBL, MXRATE-BLOCK,
HELOBOGUS, SNIFFER-NOTFOUND, SPECIALLIST, SPAM-VHIGH]
X-Spam-Weight: 61.
X-Note: This E-mail was sent from pool-71-110-9-118.lsanca.dsl-w.verizon.net
([71.110.9.118]).
X-Note: Remote host: englishforum.biz
X-Note: Sender host: englishforum.biz
X-Note: Queue file: Dce4a0357a8e2.smd


However, Declude is set to delete on SPAM-VHIGH but no action was taken,
which is obviously an issue.

David

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Michael Thomas -
Mathbox
Sent: 25 April 2006 08:25
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Emails not be scanned by Declude

Hi,

You might want to look at the entire typical file, in Notepad or Dump it
contents as hex values. I have noticed a similar percentage of spam that has
no carriage returns. Which means that the Declude headers get added to the
end of the file, rather than after the headers. If you also happen to run
invURIBL, you will note that the currently available version does not parse
the message, apparently because at most there is only one "line" in the
message. Don't know if this is your issue, but thought I would point it out
as a possiblity. If that is the case, it was fairly simple to write a test
for it.

Mike

.
- Original Message -----
From: "David Lewis-Waller" <[EMAIL PROTECTED]>
To: 
Sent: Tuesday, April 25, 2006 2:11 AM
Subject: [Declude.JunkMail] Emails not be scanned by Declude


> We are noticing a large amount of email, approx 20-30%, are not being
> processed by Declude.
>
> Here is a typical header:
>
> Received: from friend [68.57.43.190] by mail.nthost.co.uk with ESMTP
>   (SMTPD-8.20) id A5DA0830; Tue, 25 Apr 2006 06:38:34 +0100
> Message-ID: <[EMAIL PROTECTED]>
> From: "Henry" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: All love enhancers on one portal!
> Date: Tue, 25 Apr 2006 01:36:00 +0100
> MIME-Version: 1.0
> Content-Type: multipart/related;
> type="multipart/alternative";
> boundary="ms020304020609000206080301"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Mailer: Microsoft Outlook Express 6.00.2900.2180
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180
>
>
> Does any one have any idea why Declude is not processing these.
>
> David
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
>


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Emails not be scanned by Declude

[David Lewis-Waller]

We are noticing a large amount of email, approx 20-30%, are not being
processed by Declude. 

Here is a typical header:

Received: from friend [68.57.43.190] by mail.nthost.co.uk with ESMTP
  (SMTPD-8.20) id A5DA0830; Tue, 25 Apr 2006 06:38:34 +0100
Message-ID: <[EMAIL PROTECTED]>
From: "Henry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: All love enhancers on one portal!
Date: Tue, 25 Apr 2006 01:36:00 +0100
MIME-Version: 1.0
Content-Type: multipart/related;
type="multipart/alternative";
boundary="ms020304020609000206080301"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2900.2180
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2180


Does any one have any idea why Declude is not processing these.

David

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Forged email from Declude

[David Lewis-Waller]

This may be of interest, it even has Declude headers which aren't ours :)


Received: from smtp.wiss.co.uk [213.210.8.50] by mail.nthost.co.uk with
ESMTP
  (SMTPD-8.20) id A527139C; Tue, 31 Jan 2006 15:41:27 +
Received: from declude.com ([63.246.13.90]) by smtp.wiss.co.uk with
Microsoft SMTPSVC(6.0.3790.1830);
 Tue, 31 Jan 2006 15:44:59 +
Received: from asdfas.net [213.136.107.177] by mail.declude.com
  (SMTPD32-8.05) id A23124B00D4; Tue, 31 Jan 2006 10:28:49 -0500
Message-ID: <[EMAIL PROTECTED]>
Subject: CBL:colander medley
Date: Tue, 31 Jan 2006 10:27:37 -0500
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="=_NextPart_000_0001_01C62650.F51D11C0"
X-Priority: 3
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook Express 6.00.2800.1106
X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail client
[8c03].
X-RBL-Warning: WEIGHT10: Weight of 204 reaches or exceeds the limit of 100.
X-RBL-Warning: WEIGHT20: Weight of 204 reaches or exceeds the limit of 200.
X-Declude-Sender: [EMAIL PROTECTED] [213.136.107.177]
X-Declude-Spoolname: D8231024b00d4a426.smd
X-Declude-Note: Scanned by Declude 4.0.2b for spam.
"http://www.declude.com/x-note.htm";
X-Declude-Scan: Incoming Score [204] at 10:29:11 on 31 Jan 2006
X-Declude-Fail: CBL [34], SBL-XBL [53], BADHEADERS [32], REVDNS [35],
FILTER-USERS [50], WEIGHT10 [100], WEIGHT20 [200], WEIGHT20b [200]
X-Country-Chain: [RIPE Unlisted]->destination
X-Declude-IM_IN:

Precedence: bulk
Sender: [EMAIL PROTECTED]
Return-Path: [EMAIL PROTECTED]
X-OriginalArrivalTime: 31 Jan 2006 15:44:59.0187 (UTC)
FILETIME=[4AA71830:01C6267D]
X-RBL-Warning: SPAM-LOW: Total weight between 10 and 14.
X-Declude-Sender: [EMAIL PROTECTED] [63.246.13.90]
X-Declude-Spoolname: D852701a2a651.smd
X-Note: This E-mail was scanned by Declude JunkMail for evidence of spam.
X-Note: This E-mail was scanned by F-Prot for viruses.
X-Note: For further information visit http://www.wisshost.com
X-Note: SPAM tests failed:[BADHEADERS, ROUTING, SNIFFER-NOTFOUND, SPAM-LOW]
X-Spam-Weight: 10.
X-Note: This E-mail was sent from mail.declude.com ([63.246.13.90]).
X-Note: Remote host: declude.com
X-Note: Sender host: declude.com
X-Note: Queue file: D852701a2a651.smd
From: [EMAIL PROTECTED]
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 436801385
X-IMail-ThreadID: 852701a2a651

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Whitelisting email address

[David Lewis-Waller]

Karl,

Why delete or bounce? In the scenario that litigation should dictate that
you can't delete or bounce then having to deal with the huge volume of
junkmail is an option that you must live with. 

Can I suggest that rather than reap the whirlwind of customer ire you pass
something back to them in the form of empowerment. I am of course making a
number of assumptions but why not simply declare:

A) you are not going to delete or bounce
B) you are going to appropraitely mark email
C) you empower your users (perhaps by an Imail filter) make their own
decisions (and take some responbility for their email) by giving them the
power to delete bounce on your markings e.g. SPAM-VHIGH.

Just a thought...

David 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of IS - Systems Eng.
(Karl Drugge)
Sent: 17 January 2006 22:18
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] Whitelisting email address

Believe me, I'd love to find a way to do it, but when I HAVE to receive
emails from hideously mis-configured servers, whack-job citizens, and other
municipalities with less then stellar I.T. staff. from any where at any
time, not bouncing becomes the worse of two evils. 

 

As an example, if I DELETE an email from a citizen because it meets my
delete criteria ( let's say a nut-job, retired, self declared IT samurai
with a shareware SMTP server, on a dial up account to a local home based ISP
run by his best friend ) I can ( and have ) been questioned by the City
Manager on exactly WHY he didn't get this email, because this nut-job shows
up to a city council meeting and has a foaming at the mouth fit in public.
Technical explanations don't cut it in the political arena. I have to, at
the very least, send something back to notify the originator that the email
was bounced, unless it's so horribly mal-formed, or chock full of key words,
that it I can absolutely guarantee it's spam.   

 

But, if someone wants to take a crack at it, I'll be more than happy to post
my config files.

 

 

Karl Drugge

 

 

 

 

 

 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Tuesday, January 17, 2006 4:28 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Whitelisting email address

 

Karl,

Getting blacklisted for bouncing spam back to forged addresses would
probably be a lot worse than missing a stray message that shouldn't have
been blocked.  This certainly can happen, especially if you get a lot of
zombie generated spam.

It is also of course a big pain dealing with servers that bounce this stuff
back to forged addresses.  Today I'm under heavy attack from multiple
sources of backscatter.  Backscatter costs others time, money and
frustration.  It's not fair if it is avoidable.  Please reconsider your
choices.  Maybe we can help you figure out a better way to deal with this.

Matt



IS - Systems Eng. (Karl Drugge) wrote: 

I hold at 20, bounce at 40, and delete at 60.

 

I realize bouncing is bad, but we're government, so I have to be careful
about outright deleting email without notifying someone, somewhere.

 

Karl Drugge

 

 

 

 

 

 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian
Sent: Tuesday, January 17, 2006 3:38 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Whitelisting email address

 

What are you using for a hold weight and delete weight?

 

Brian

 

- Original Message - 

From: IS - Systems Eng. (Karl Drugge)   

To: Declude.JunkMail@declude.com 

Sent: Tuesday, January 17, 2006 3:17 PM

Subject: RE: [Declude.JunkMail] Whitelisting email address

 

I can confirm that.

 

If a single email address is white listed, then all of them get white
listed.

 

The solution was a line like this : BYPASSWHITELIST  bypasswhitelist  45
6  0  0

 

If an email was over weight 45, AND it also had 6 or more recipients, than
it bypassed the white-listing and checked it normally.

 

I never tried to do it with individual config files.. But that might work,
if it didn't affect all the recipients.

 

 

Karl Drugge

 

 

 

 

 

 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian
Sent: Tuesday, January 17, 2006 2:16 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Whitelisting email address

 

I recall that happening with IMail as well.  That is why I was wondering if
I did something wrong before.

 

Brian

 

- Original Message - 

From: Shayne Embry   

To: Declude.JunkMail@declude.com 

Sent: Tuesday, January 17, 2006 1:12 PM

Subject: Re: [Declude.JunkMail] Whitelisting email address

 

We have found that if one of the addresses is whitelisted, then every
recipient's address gets whitelisted. This may be unique to
SmarterMail/Declude. I don't remember having the problem

RE: [Declude.JunkMail] Whitelisting email address

[David Lewis-Waller]

I would second that. We were blacklisted by SORBS when one of OUR customers
autoresponded to a forged sender, which happended to be a SORBS admin or
tarpit address. We passed the 'fine' of delisting back to the customer as a
salutatory lesson but not before we received many complaints of senders
email not being delivered because of draconian single point failure tests
some ISP's / corporates have in place.

David 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: 17 January 2006 21:28
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Whitelisting email address

Karl,

Getting blacklisted for bouncing spam back to forged addresses would
probably be a lot worse than missing a stray message that shouldn't have
been blocked.  This certainly can happen, especially if you get a lot of
zombie generated spam.

It is also of course a big pain dealing with servers that bounce this stuff
back to forged addresses.  Today I'm under heavy attack from multiple
sources of backscatter.  Backscatter costs others time, money and
frustration.  It's not fair if it is avoidable.  Please reconsider your
choices.  Maybe we can help you figure out a better way to deal with this.

Matt



IS - Systems Eng. (Karl Drugge) wrote: 

I hold at 20, bounce at 40, and delete at 60.

 

I realize bouncing is bad, but we're government, so I have to be
careful about outright deleting email without notifying someone, somewhere.

 

Karl Drugge

 

 

 

 

 

 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian
Sent: Tuesday, January 17, 2006 3:38 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Whitelisting email address

 

What are you using for a hold weight and delete weight?

 

Brian

 

- Original Message - 

From: IS - Systems Eng. (Karl Drugge)
  

To: Declude.JunkMail@declude.com 

Sent: Tuesday, January 17, 2006 3:17 PM

Subject: RE: [Declude.JunkMail] Whitelisting email address

 

I can confirm that.

 

If a single email address is white listed, then all of them get
white listed.

 

The solution was a line like this : BYPASSWHITELIST
bypasswhitelist  45 6  0  0

 

If an email was over weight 45, AND it also had 6 or more
recipients, than it bypassed the white-listing and checked it normally.

 

I never tried to do it with individual config files.. But that might
work, if it didn't affect all the recipients.

 

 

Karl Drugge

 

 

 

 

 

 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Brian
Sent: Tuesday, January 17, 2006 2:16 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Whitelisting email address

 

I recall that happening with IMail as well.  That is why I was
wondering if I did something wrong before.

 

Brian

 

- Original Message - 

From: Shayne Embry   

To: Declude.JunkMail@declude.com 

Sent: Tuesday, January 17, 2006 1:12 PM

Subject: Re: [Declude.JunkMail] Whitelisting email address

 

We have found that if one of the addresses is whitelisted, then
every recipient's address gets whitelisted. This may be unique to
SmarterMail/Declude. I don't remember having the problem with IMail, but we
haven't used it in over a year.

Shayne





Hi Brian,

 

Yes, this can be done with the Pro version. You can have per-user
configurations. You can't not have Declude scan the mail, but you can set
this individual's configuration to ignore all test results and deliver the
mail. As far as I know, this shouldn't have any affect on other recipients
of the email. 

 

Dean

 

On 1/17/06, Brian <[EMAIL PROTECTED]> wrote: 

I have a customer who wants to receive all emails without having
declude
check them for spam.

My question, is can this be done? 

And then can it be done so that if a message comes in and it is a
message
that contains their email address and several other email address on
our
domain, that it can only be sent to their address prior to the spam
checks? 

I hope this makes sense.

Thanks in advance,

Brian T.


---

--

PLEASE NOTE : Florida has a very broad publ

[Declude.JunkMail] Do I admit to this...?

[David Lewis-Waller]

This is a small tale of my own incompetence which, I hope, others may learn
from

Our domain had been getting a lot of SPAM email over the Christmas holiday
and I had initially put it down to seasonal ill will but was surprised at
the sheer volume of unmarked email that was getting through.

After some testing I found that email weren't failing some ip4r tests when a
manual verification showed the senders IP as being listed by at least one
blacklist. 

After a little research (and I have to admit that my faith in Declude
faltered a little) I discovered that the mail server local DNS
(SimpleDNSPlus) was auto blocking it's own IP address for 60 seconds very
few seconds. I hadn't ensured that the auto blocking feature wasn't
correctly configured for loopback IP address.

SPAM detection rates have now improved significantly.

David

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: Re[2]: [Declude.JunkMail] OT Snow

[David Lewis-Waller]

If you're into eco-building then I'll be looking for volunteers in 2006/2007
for a house build on Anglesey :)) 

http://www.multimap.com/map/browse.cgi?client=public&X=25&Y=40&width
=500&height=300&gride=&gridn=&srec=0&coordsys=gb&db=&addr1=&addr2=&addr3=&pc
=&advanced=&local=&localinfosel=&kw=&inmap=&table=&ovtype=&keepicon=&zm=0&sc
ale=100&multimap.x=207&multimap.y=224

Sorry folks this is a dreadful plug and soo off topic. Last one I
promise.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: 05 December 2005 08:55
To: Declude.JunkMail@declude.com
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow

Ok, I'm drooling...  need some onsite assistance with anything... anything
at all...  I'll gladly take out the garbage if you want me to... 

Darin.


- Original Message -
From: "David Lewis-Waller" <[EMAIL PROTECTED]>
To: 
Sent: Monday, December 05, 2005 3:45 AM
Subject: RE: Re[2]: [Declude.JunkMail] OT Snow


Were just a few miles from Caernarfon. Have to say I wouldn't want to live
elsewhere. Over 100 miles of coastline within easy reach (Isle of Anglesey),
a few miles from the hills and mountains. At least 5 medieval castles within
a couple of hours drive (Beaumaris, Conwy, Caernarfon, Rhuddlan, Harlec) -
what was the topic again?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: 03 December 2005 21:48
To: Declude.JunkMail@declude.com
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow

Ahh yes, but you have the most iconic representations of medieval history in
the world.  I'd gladly swap a few years of sunshine just to be near those
for while.

Oh and the pastries...yum...  We had an opportunity to visit Cardiff (and
Caerphilly and Cardiff castles, of course) just before our first child was
born and adored it.

Wish I could have gotten to Harlech and Canaervon, but maybe in a few years
when kids are older.

Darin.


- Original Message -
From: "david" <[EMAIL PROTECTED]>
To: 
Sent: Saturday, December 03, 2005 4:07 PM
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow


I'd willing swap a pile of snow for our weather which can only be described
as damp, all day every day except for a couple of days in August.

David, Wales.


-- Original Message --
From: "Darin Cox" <[EMAIL PROTECTED]>
Reply-To: Declude.JunkMail@declude.com
Date:  Sat, 3 Dec 2005 15:50:27 -0500

>We got a bit warmer here in FL... 79 and sunny today.  No earthquakes
>either.  There is that little problem of the whirly rainy things, but we
>don't get much of them at all in the Tampa Bay area.
>
>Darin.
>
>
>- Original Message - 
>From: "R. Lee Heath" <[EMAIL PROTECTED]>
>To: "Matt" 
>Sent: Saturday, December 03, 2005 2:46 PM
>Subject: Re[2]: [Declude.JunkMail] OT Snow
>
>
>Gotta kick in here. Moved to Phoenix, AZ this last year from
>Chicago and I do not miss it. ;) 72 sunny and just beautiful
>here today, and almost every day... Ice age? What is that?
>
>--
>Roger Heath
>[EMAIL PROTECTED]
>www.rleeheath.com
>
>
>- Copy of Original Message(s): -
>
>M> It was 65 degrees last week in Upstate NY, almost a record high.  Now of
>M> course it is quite seasonal and I am afraid that we won't see those
>M> temps again until March or April.  Fear not, there is no ice age on the
>M> horizon...except of course what is expected.  I wouldn't care at all if
>M> the year was 3 months shorter.
>
>M> Matt
>
>
>
>M> Orin Wells wrote:
>
>>> We had a blanket of snow here in the Seattle area Thursday night too -
>>> still hanging around.  We had almost zero snow last year.  All the ski
>>> areas are in operation.  Some opened a month ago - the earliest in
>>> decades.  Maybe we are going into the next ice age?
>>>
>>> At 09:08 AM 12/3/2005, you wrote:
>>>
>>>> let me know if you get the BANEXT .snow working, we got 24 inches
>>>> yesterday and last night, good ol Lake Erie lake effect snow... sigh
>>>>
>>>> Rick Davidson
>>>> National Systems Manager
>>>> North American Title Group
>>>> -
>>>> - Original Message - From: "Markus Gufler" <[EMAIL PROTECTED]>
>>>> To: 
>>>> Sent: Saturday, December 03, 2005 3:49 AM
>>>> Subject: RE: [Declude.JunkMail] Paranoia
>>>>
>>>>
>>>>>
>>>>>
>>>>>> What's even funnier is by the time I am

RE: [Declude.JunkMail] OT Snow

[David Lewis-Waller]

Nick,

It's based on both. 10-40% income tax plus national insurance (health
service) @ 13%. Purchases are taxed (VAT - value added tax) at 17.5% on most
consumer items. Some items like petrol are have additional tax levies
imposed for instance the total tax levy on petrol is around 65p in the £.

David

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer
Sent: 05 December 2005 15:12
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] OT Snow

Hi David,

David Lewis-Waller wrote: 

If you could put up with
petrol at 93p a litre (which by my calc is approx $5.90 per U.S.
gallon)

 In the US taxes are based on income - whereas for you it would seem to be
based on consumption - I actually do not know which is 'cheaper' but it
would seem your method is more fair..

-Nick



 our
data centre is only a round trip of 560 miles from the office. :)   

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: 05 December 2005 08:55
To: Declude.JunkMail@declude.com
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow

Ok, I'm drooling...  need some onsite assistance with anything...
anything
at all...  I'll gladly take out the garbage if you want me to... 

Darin.


- Original Message -----
    From: "David Lewis-Waller" <[EMAIL PROTECTED]>
<mailto:[EMAIL PROTECTED]> 
To: 
<mailto:Declude.JunkMail@declude.com> 
Sent: Monday, December 05, 2005 3:45 AM
Subject: RE: Re[2]: [Declude.JunkMail] OT Snow


Were just a few miles from Caernarfon. Have to say I wouldn't want
to live
elsewhere. Over 100 miles of coastline within easy reach (Isle of
Anglesey),
a few miles from the hills and mountains. At least 5 medieval
castles within
a couple of hours drive (Beaumaris, Conwy, Caernarfon, Rhuddlan,
Harlec) -
what was the topic again?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: 03 December 2005 21:48
To: Declude.JunkMail@declude.com
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow

Ahh yes, but you have the most iconic representations of medieval
history in
the world.  I'd gladly swap a few years of sunshine just to be near
those
for while.

Oh and the pastries...yum...  We had an opportunity to visit Cardiff
(and
Caerphilly and Cardiff castles, of course) just before our first
child was
born and adored it.

Wish I could have gotten to Harlech and Canaervon, but maybe in a
few years
when kids are older.

Darin.


- Original Message -
From: "david" <[EMAIL PROTECTED]> <mailto:[EMAIL PROTECTED]> 
To: 
<mailto:Declude.JunkMail@declude.com> 
Sent: Saturday, December 03, 2005 4:07 PM
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow


I'd willing swap a pile of snow for our weather which can only be
described
as damp, all day every day except for a couple of days in August.

David, Wales.


-- Original Message --
From: "Darin Cox" <[EMAIL PROTECTED]> <mailto:[EMAIL PROTECTED]> 
Reply-To: Declude.JunkMail@declude.com
Date:  Sat, 3 Dec 2005 15:50:27 -0500

  

We got a bit warmer here in FL... 79 and sunny today.  No
earthquakes
either.  There is that little problem of the whirly rainy
things, but we
don't get much of them at all in the Tampa Bay area.

Darin.


- Original Message - 
From: "R. Lee Heath" <[EMAIL PROTECTED]>
<mailto:[EMAIL PROTECTED]> 
To: "Matt" 
<mailto:Declude.JunkMail@declude.com> 
Sent: Saturday, December 03, 2005 2:46 PM
Subject: Re[2]: [Declude.JunkMail] OT Snow


Gotta kick in here. Moved to Phoenix, AZ this last year from
Chicago and I do not miss it. ;) 72 sunny and just beautiful
here today, and almost every day... Ice age? What is that?

--
Roger Heath
[EMAIL PROTECTED]
www.rleeheath.com


- Copy of Original Message(s): -

M> It was 65 deg

RE: Re[2]: [Declude.JunkMail] OT Snow

[David Lewis-Waller]

Well, we have a couple of servers to install soon. If you could put up with
petrol at 93p a litre (which by my calc is approx $5.90 per U.S. gallon) our
data centre is only a round trip of 560 miles from the office. :)   

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: 05 December 2005 08:55
To: Declude.JunkMail@declude.com
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow

Ok, I'm drooling...  need some onsite assistance with anything... anything
at all...  I'll gladly take out the garbage if you want me to... 

Darin.


- Original Message -----
From: "David Lewis-Waller" <[EMAIL PROTECTED]>
To: 
Sent: Monday, December 05, 2005 3:45 AM
Subject: RE: Re[2]: [Declude.JunkMail] OT Snow


Were just a few miles from Caernarfon. Have to say I wouldn't want to live
elsewhere. Over 100 miles of coastline within easy reach (Isle of Anglesey),
a few miles from the hills and mountains. At least 5 medieval castles within
a couple of hours drive (Beaumaris, Conwy, Caernarfon, Rhuddlan, Harlec) -
what was the topic again?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: 03 December 2005 21:48
To: Declude.JunkMail@declude.com
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow

Ahh yes, but you have the most iconic representations of medieval history in
the world.  I'd gladly swap a few years of sunshine just to be near those
for while.

Oh and the pastries...yum...  We had an opportunity to visit Cardiff (and
Caerphilly and Cardiff castles, of course) just before our first child was
born and adored it.

Wish I could have gotten to Harlech and Canaervon, but maybe in a few years
when kids are older.

Darin.


- Original Message -
From: "david" <[EMAIL PROTECTED]>
To: 
Sent: Saturday, December 03, 2005 4:07 PM
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow


I'd willing swap a pile of snow for our weather which can only be described
as damp, all day every day except for a couple of days in August.

David, Wales.


-- Original Message --
From: "Darin Cox" <[EMAIL PROTECTED]>
Reply-To: Declude.JunkMail@declude.com
Date:  Sat, 3 Dec 2005 15:50:27 -0500

>We got a bit warmer here in FL... 79 and sunny today.  No earthquakes
>either.  There is that little problem of the whirly rainy things, but we
>don't get much of them at all in the Tampa Bay area.
>
>Darin.
>
>
>- Original Message - 
>From: "R. Lee Heath" <[EMAIL PROTECTED]>
>To: "Matt" 
>Sent: Saturday, December 03, 2005 2:46 PM
>Subject: Re[2]: [Declude.JunkMail] OT Snow
>
>
>Gotta kick in here. Moved to Phoenix, AZ this last year from
>Chicago and I do not miss it. ;) 72 sunny and just beautiful
>here today, and almost every day... Ice age? What is that?
>
>--
>Roger Heath
>[EMAIL PROTECTED]
>www.rleeheath.com
>
>
>- Copy of Original Message(s): -
>
>M> It was 65 degrees last week in Upstate NY, almost a record high.  Now of
>M> course it is quite seasonal and I am afraid that we won't see those
>M> temps again until March or April.  Fear not, there is no ice age on the
>M> horizon...except of course what is expected.  I wouldn't care at all if
>M> the year was 3 months shorter.
>
>M> Matt
>
>
>
>M> Orin Wells wrote:
>
>>> We had a blanket of snow here in the Seattle area Thursday night too -
>>> still hanging around.  We had almost zero snow last year.  All the ski
>>> areas are in operation.  Some opened a month ago - the earliest in
>>> decades.  Maybe we are going into the next ice age?
>>>
>>> At 09:08 AM 12/3/2005, you wrote:
>>>
>>>> let me know if you get the BANEXT .snow working, we got 24 inches
>>>> yesterday and last night, good ol Lake Erie lake effect snow... sigh
>>>>
>>>> Rick Davidson
>>>> National Systems Manager
>>>> North American Title Group
>>>> -
>>>> - Original Message - From: "Markus Gufler" <[EMAIL PROTECTED]>
>>>> To: 
>>>> Sent: Saturday, December 03, 2005 3:49 AM
>>>> Subject: RE: [Declude.JunkMail] Paranoia
>>>>
>>>>
>>>>>
>>>>>
>>>>>> What's even funnier is by the time I am ready to get in bed,
>>>>>> Europe is going to work.
>>>>>
>>>>>
>>>>> 
>>>>> mmmh, what? ...  ...
>>>>> Ah, hi guys, good morning from Europe!
>>>>> We've around 12 inches of snow here over night. Where's the
>>>>> snowshovel?

RE: Re[2]: [Declude.JunkMail] OT Snow

[David Lewis-Waller]

Were just a few miles from Caernarfon. Have to say I wouldn't want to live
elsewhere. Over 100 miles of coastline within easy reach (Isle of Anglesey),
a few miles from the hills and mountains. At least 5 medieval castles within
a couple of hours drive (Beaumaris, Conwy, Caernarfon, Rhuddlan, Harlec) -
what was the topic again? 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: 03 December 2005 21:48
To: Declude.JunkMail@declude.com
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow

Ahh yes, but you have the most iconic representations of medieval history in
the world.  I'd gladly swap a few years of sunshine just to be near those
for while.

Oh and the pastries...yum...  We had an opportunity to visit Cardiff (and
Caerphilly and Cardiff castles, of course) just before our first child was
born and adored it.

Wish I could have gotten to Harlech and Canaervon, but maybe in a few years
when kids are older.

Darin.


- Original Message -
From: "david" <[EMAIL PROTECTED]>
To: 
Sent: Saturday, December 03, 2005 4:07 PM
Subject: Re: Re[2]: [Declude.JunkMail] OT Snow


I'd willing swap a pile of snow for our weather which can only be described
as damp, all day every day except for a couple of days in August.

David, Wales.


-- Original Message --
From: "Darin Cox" <[EMAIL PROTECTED]>
Reply-To: Declude.JunkMail@declude.com
Date:  Sat, 3 Dec 2005 15:50:27 -0500

>We got a bit warmer here in FL... 79 and sunny today.  No earthquakes
>either.  There is that little problem of the whirly rainy things, but we
>don't get much of them at all in the Tampa Bay area.
>
>Darin.
>
>
>- Original Message - 
>From: "R. Lee Heath" <[EMAIL PROTECTED]>
>To: "Matt" 
>Sent: Saturday, December 03, 2005 2:46 PM
>Subject: Re[2]: [Declude.JunkMail] OT Snow
>
>
>Gotta kick in here. Moved to Phoenix, AZ this last year from
>Chicago and I do not miss it. ;) 72 sunny and just beautiful
>here today, and almost every day... Ice age? What is that?
>
>--
>Roger Heath
>[EMAIL PROTECTED]
>www.rleeheath.com
>
>
>- Copy of Original Message(s): -
>
>M> It was 65 degrees last week in Upstate NY, almost a record high.  Now of
>M> course it is quite seasonal and I am afraid that we won't see those
>M> temps again until March or April.  Fear not, there is no ice age on the
>M> horizon...except of course what is expected.  I wouldn't care at all if
>M> the year was 3 months shorter.
>
>M> Matt
>
>
>
>M> Orin Wells wrote:
>
>>> We had a blanket of snow here in the Seattle area Thursday night too -
>>> still hanging around.  We had almost zero snow last year.  All the ski
>>> areas are in operation.  Some opened a month ago - the earliest in
>>> decades.  Maybe we are going into the next ice age?
>>>
>>> At 09:08 AM 12/3/2005, you wrote:
>>>
 let me know if you get the BANEXT .snow working, we got 24 inches
 yesterday and last night, good ol Lake Erie lake effect snow... sigh

 Rick Davidson
 National Systems Manager
 North American Title Group
 -
 - Original Message - From: "Markus Gufler" <[EMAIL PROTECTED]>
 To: 
 Sent: Saturday, December 03, 2005 3:49 AM
 Subject: RE: [Declude.JunkMail] Paranoia


>
>
>> What's even funnier is by the time I am ready to get in bed,
>> Europe is going to work.
>
>
> 
> mmmh, what? ...  ...
> Ah, hi guys, good morning from Europe!
> We've around 12 inches of snow here over night. Where's the
> snowshovel?
> Maybe I will add BANEXT .snow to my config file  ;-)
> 
>
> Markus
>
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>

 ---
 [This E-mail was scanned for viruses by Declude EVA www.declude.com]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type "unsubscribe Declude.JunkMail".  The archives can be found
 at http://www.mail-archive.com.
>>>
>>>
>>> ---
>>> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>>>
>>> ---
>>> This E-mail came from the Declude.JunkMail mailing list.  To
>>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>>> type "unsubscribe Declude.JunkMail".  The archives can be found
>>> at http://www.mail-archive.com.
>>>
>>>
>M> ---
>M> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>
>M> ---
>M> This E-mail came from the Declude.JunkMail mailing list.  To
>M> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>M> type "unsubscribe Declude.JunkMail".  The archives can be found
>M> at http://www.mail-

RE: [Declude.JunkMail] Hotmail.co.uk

[David Lewis-Waller]

Dave,

Thanks for this but I have already checked and we're not listed on any SPAM
database which is why I'm trying to get a contact for Hotmail.co.uk as I
don't know why we are being blocked. I know this particular IP is being
blocked as it's been like it for some time now and changing IP allows mail
through. Ultimately, I don't want to keep changing IP everytime
Hotmail.co.uk has a problem with us hence my desire to find out why we are
being blocked.

Cheers,

David 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty
Sent: 01 December 2005 15:06
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Hotmail.co.uk

Hi David-

Check http://www.DNSStuff.com. Enter your SMTP server's IP address int he
"Spam Database Lookup" function, and see what blacklists you are on. In my
experience, you get better results with the blacklist people than you get
from the large email houses.

-Dave Doherty
 Skywaves, Inc.



----- Original Message -
From: "David Lewis-Waller" <[EMAIL PROTECTED]>
To: 
Sent: Thursday, December 01, 2005 8:49 AM
Subject: [Declude.JunkMail] Hotmail.co.uk


> We have a problem with sending email to hotmail.co.uk, it would appears 
> that
> any email sent via our mail server to hotmail.co.uk accounts are not
> delivered presumably blacklisted. I have contacted hotmail.co.uk but as 
> yet
> I have had no response. Has anyone had a similar experince. BTW 
> hotmail.com
> is not affected just hotmail.co.uk.
>
> Thanks,
>
> David
>
> ---
> [This E-mail was scanned for viruses by Declude EVA www.declude.com]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>
> 


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Hotmail.co.uk

[David Lewis-Waller]

We have a problem with sending email to hotmail.co.uk, it would appears that
any email sent via our mail server to hotmail.co.uk accounts are not
delivered presumably blacklisted. I have contacted hotmail.co.uk but as yet
I have had no response. Has anyone had a similar experince. BTW hotmail.com
is not affected just hotmail.co.uk.

Thanks,

David

---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] JunkMail 3.0.5 100% CPU Usage

[David Lewis-Waller]

I have been tweaking the THREADS value and found that small adjustments can
have quite large effects on CPU usage. I found a value of 15 is a good
compromise when processing 15-20k messages a day on a Xeon 1.4GHz dual
processor box with 1GB RAM. Any higher than 15 and I get 100% CPU for
minutes at a time.

I have left the default SMTP max. threads in Imail set at 60 and min.
threads at 2.

David 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Kim Premuda
Sent: 30 September 2005 02:50
To: Declude JunkMail Forum
Subject: [Declude.JunkMail] JunkMail 3.0.5 100% CPU Usage

IMail 8.05 HF3
JunkMail 3.0.5.5

We are still seeing times when 'decludeproc.exe' will burst the CPU usage to
100% for 20-30 seconds up to a minute or two. We've adjusted the
WAITFORTHREADS and WAITBETWEENTHREADS to various values, and it doesn't seem
to make any difference. The current values we are using are:

WAITFORTHREADS   1
WAITBETWEENTHREADS   1

As an example, the 'work' folder will have several messages in process, so
you would expect to see the CPU usage go up for the first thread, then down
to minimal levels for 10 seconds, then back up again for each additional
message thread processed. But, what we see is the CPU usage hitting 100% and
staying there while processing the messages in the 'work' folder. If
additional messages show up in the 'proc' folder and are transferred to the
'work' folder before the current THREAD run has completed, they are
immediately processed thereby keeping the CPU usage at 100%. When everything
is eventually processed, the CPU usage returns to normal levels. This only
seems to be a problem under heavy load. Is anyone else experiencing this
behavior?

Also, does anyone know if the THREADS value can be reduced to a number below
the Declude recommended minimum of 5 (and not break anything)? My thinking
here was 

Thanks!


--
Kim W. Premuda
FastWave Internet Services
San Diego, CA

--
---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Ver 3.0.5 What is the Proc Directory and why is all the mail going to it.

[David Lewis-Waller]

Fred,

It's documented in the in declude 3.05 link under myaccount.asp section of
the web site .

All the best, 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Frederick Samarelli
Sent: 28 September 2005 05:26
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] Ver 3.0.5 What is the Proc Directory and why is
all the mail going to it.

I just upgraded to the latest posted version of declude.

Now all my mail goes to a directory. \imail\spool\proc

Why.

Fred

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude 3.05

[David Lewis-Waller]

Darell,

Yes I'm running a dual processor Xenon Dell server.

All the best,

 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Darrell
([EMAIL PROTECTED])
Sent: 27 September 2005 17:43
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude 3.05

David, 

Are you running a dual proc box - you did not say exactly?  If you are let
me know and I can help you verify if you are having the same dual proc issue
I see. 

Darrell 

David Lewis-Waller writes: 

> I didn't take part in the beta of v3 but upgraded yesterday from 1.8x.
> However, I do notice a considerable CPU usage penalty some 100% more 
> usage than in the previous version and commonly long queues in \proc 
> waiting to be serviced.
> 
> I have also seen a couple of emails from users with dual procesor 
> boxes having issues. Is this what others are seeing?
> 
> David
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
 


 
Check out http://www.invariantsystems.com for utilities for Declude And
Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG
Integration, and Log Parsers. 


---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Declude 3.05

[David Lewis-Waller]

I didn't take part in the beta of v3 but upgraded yesterday from 1.8x.
However, I do notice a considerable CPU usage penalty some 100% more usage
than in the previous version and commonly long queues in \proc waiting to be
serviced. 

I have also seen a couple of emails from users with dual procesor boxes
having issues. Is this what others are seeing?

David

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude 2.0b status

[David Lewis-Waller]

I'm waiting as well. I emailed Declude who say they will issue a key in due
but I've heard nothing for about a month. 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Jim
Sent: 25 January 2005 22:28
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] Declude 2.0b status

Andy Schmidt wrote:
> Is there now a 2.0 beta that's robust enough to install?

And is there a 2.0 beta that we can use with SmarterMail?

Inquiring minds want to know! :)

Jim

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] NOABUSE test

[David Lewis-Waller]

This email (part headers) failed the NOABUSE test, yet dnsreport show the
domain as accepting [EMAIL PROTECTED] Any ideas?

David
WiSS Ltd

> Disposition-Notification-To: "TM Services" <[EMAIL PROTECTED]>
> X-RBL-Warning: MTLDB: "IP is listed in MTLDB"
> X-RBL-Warning: NOABUSE: "Not supporting [EMAIL PROTECTED]"
> X-Note: This E-mail was scanned by Declude JunkMail for evidence of spam.
> X-Note: This E-mail was scanned by F-Prot for viruses.
> X-Note: SPAM tests failed:[MTLDB, NOABUSE, SNIFFER, SPAM-VHIGH,
NOLEGITCONTENT]
> X-Spam-Weight: 38.
> X-Note: This E-mail was sent from c2bapps19.btconnect.com
([193.113.154.35]).
> X-Note: Remote host: btconnect.com
> X-Note: Sender host: btconnect.com
> X-Note: Queue file: D393107f4011055f1.SMD

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Hotmail not accept inbound mail?

[David Lewis-Waller]

This looks like it's an ongoing, long term issue. DNReports MX connection
problems.

http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com


> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson
> Sent: 11 May 2004 20:29
> To: [EMAIL PROTECTED]
> Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail?
> 
> Yep hotmail is not accepting from us either, I am seeing 
> connection resets from them
> 
> Rick Davidson
> National Systems Manager
> North American Title Group
> -
> - Original Message -
> From: "Colbeck, Andrew" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Tuesday, May 11, 2004 2:44 PM
> Subject: [Declude.JunkMail] Hotmail not accept inbound mail?
> 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] X-RBL-Warning:

[David Lewis-Waller]

I just received this this from a mail admin of another ISP, Anyone care to
comment...

>Your outgoing mail server adds the header:
> > X-RBL-Warning: SPAM-NONE: Total weight between 0 and 4.
>
> Our filter software scans incomming mesages for a line that starts
> X-RBL-Warning:
> This is used as an indicator of spam. In your case it is saying that 
> this message is not spam, but our software only picks up the first 
> half of the tag.
>
> RBL stands for Real Time Blacklist. Normally that tag is used to 
> indicate that the sender of the mail has an IP address that is listed 
> at a RBL. It should not be used to tag mail as non spam, because 
> people block on the X-RBL-Warning part. As you've found out.
>
> Contact your mail admin and ask him to either change the tag or even 
> remove it all together. In theory it is a good idea to have a tag 
> along the lines of :
> X-spam-scanned: ok
> But dont use the RBL tag unless your IP is on a RBL, or else you will 
> be blocked as spam.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Hardware Recommendation's

[David Lewis-Waller]

Not all. I initiated a recent posting on this topic and its fine as long as
the server can handle all requests made of it. 

We're running SimpleDNS on our IMail server, others will choose Windows DNS
etc.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Burzin Sumariwalla
Sent: 12 December 2003 16:33
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Hardware Recommendation's

I thought it was a no-no to have DNS running on your Imail server.  Is it?

At 09:50 AM 12/12/2003, you wrote:

>This server will have Imail installed, Windows 2000 Server, Windows 
>DNS, Declude Junkmail Pro and Declude Virus Pro, Fprot.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] revdns weight question

[David Lewis-Waller]

negative rDNS scores 5. No hold or delete. Subject line maker SPAM-VHIGH @
30+.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of System
Administrator
Sent: 11 December 2003 13:01
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] revdns weight question

I'm curious as to what others are doing concerning the weight assigned to
the revdns test. How much weight do you assign to your revdns test, as a
percentage of your hold or delete limit? Our percentage is currently at 25%
(10/40). 

Thanks,
Greg

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] New EU Laws come into force - just for info

[David Lewis-Waller]

http://news.bbc.co.uk/1/hi/technology/3308989.stm

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Autogenerated response

[David Lewis-Waller]

Title: Message



Kami,
 
I know this sounds 
a little primitive but you could forewarn users at the point when they make 
a payment that an automated acknowledgment will be sent but may be blocked if 
challenge/response is implemented by their ISP/IT dept.
 
What happens in 
challenge/response when you have two challenge/response mechanisms talking to 
each other, each wanting a challenge/response to a challenge/response? 
Table tennis?
 
David

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
  On Behalf Of Kami RazvanSent: 29 May 2003 
  10:27To: [EMAIL PROTECTED]Subject: 
  [Declude.JunkMail] Autogenerated response
  Hi..
   
  I have not been 
  able to figure out how I can have a message delivered and yet an automatic 
  response also be sent to the sender with the original 
  email.
   
  I thought we can 
  do this with JM but the only action that I see can send the email with the 
  original message is bounce.  What if we don't want to bounce the message! 
  
   
  For 
  example:
   
  An email is sent 
  to support address.  to send an auto-response through IMail will not 
  include the original message.  In Declude we have the added option to 
  create an email the way we want and include the original message in the body 
  but how do you still deliver it and reply at the same 
time?
   
  This would be a 
  great option to have if we don't have it already..
   
  [still battling 
  the automation of challenge/response systems for automatic web 
  responses]
   
  Regards,
  Kami

[Declude.JunkMail] Off Topic - Dell 2650

[David Lewis-Waller]

Anyone runing Declude/Imail on a Dell 2650 suffering from random reboot
problems or server not rebooting properly? 

David

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] I know I'm doing some wroing but can't put my finger on it.

[David Lewis-Waller]

A - I thought the FROM address was the labelled From: not the return
address. Should have sussed that one.

Thanks v.much for pointing this out

David

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: 24 March 2003 15:01
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] I know I'm doing some wroing but can't
put my finger on it.



>The answer is going to be obvious and simple but I can't spot it.

You're not the first to be fooled by this:

> From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>

The problem here is that the return address of the E-mail isn't 
[EMAIL PROTECTED] (nor is the From: address either, which is 
[EMAIL PROTECTED]).  Declude only looks at the return address, which can't
be 
seen in this case (it is often different than the From: or Reply-To: 
addresses).  You can find the return address in the X-Declude-Sender: 
header, or the "MAIL FROM:" line in the IMail SMTP log file.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] I know I'm doing some wroing but can't put my finger on it.

[David Lewis-Waller]

The answer is going to be obvious and simple but I can't spot it.

I have a filter file:

MAILFROMLISTfilter  d:\IMail\declude\mailfrom.txt
x   0   0

That contains the line (mailfrom.txt)

MAILFROM 30 CONTAINS @ideal.co.uk

(I've checked that there isn't a space at the end of the line)

Email from (info from headers)

From: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>

Doesn't get detected:

X-Note: SPAM tests failed:[HEUR10, SPAM-VLOW]


To help with organisation I have comment lines in mailfrom.txt e.g.

# POSITIVE WEIGHTS

Any help appreciated

David


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Sniffer

[David Lewis-Waller]

I recommend SNIFFER. Results will vary depending on your settings but we
rarely get false positives. We don't hold customer emails and we hold
our own email at 30 Sniffer is weighted at 20. If you're holding then
you should always check for false positives anyway so Sniffer in that
respect won't necessarily reduce your work load but it will dramatically
increase your confidence in catching only junk email.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ron Harris
Sent: 13 March 2003 06:17
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Sniffer


We have been testing the evaluation copy of SortMonsters Message Sniffer
and I would like some opinions from people in this forum.

I am considering purchasing the product if I can set it up per domain
(we use JunkMail Pro) and not spend much time sifting through e-mail to
make sure it does not catch false positives.

Is Message Sniffer reliable at catching only spam and not legitimate
e-mail? Our eval copy of Message Sniffer has treated many legitimate
e-mail as spam, particularly messages from the Declude forum, the Nanog
forum and an Exchange forum.

I am very interested in learning your opinions.

Ron

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] f-prot

[David Lewis-Waller]

Chuck,

F-secure isn't F-Prot (not as far as I'm aware anyway)

Windows/ODS pricing details are here
http://www.f-prot.com/products/pricecomwin.html

Note Linux and FreeBSD versions are far more expensive than Windows
versions.

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Charles Frolick
Sent: 18 February 2003 15:17
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] f-prot


Ok, I do not see F-prot on the F-secure site at all, and F-secure
antivirus is $80 for personal edition, $424 for the server edition, and
I so not see mention of 20 user license.

Thanks,
Chuck Frolick

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Tuesday, February 18, 2003 8:36 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] f-prot



>Hate to sounds like the idiot butcould someone answer a couple
>questions on F-prot
>
>It anti-virus?
>Does in run at the server level?
>Does it run at the client level also, or only at client level?

It is an anti-virus program that a lot of people use with Declude Virus,
as 
it is reliable and very inexpensive.  F-Prot can run both on servers and

client machines (as opposed to many other AV programs that are set up
not 
to install on servers).  It comes with a minimum of 20 licenses, so a
lot 
of people buy it to use with Declude Virus, but then use the extra
licenses 
on workstations.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] f-prot

[David Lewis-Waller]

Title: Message



F-Prot? I recommend it! If you install it to work with Declude ensure 
that it doesn't autostart otherwise Declude can't call it because it's 
already running (you'll see errors in the logs saying this)
 

"You need to remove 
F-Stopw from startup.
You have to do that in the registry.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run"
 
David
WiSS 
Limited

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
  On Behalf Of Doris DeanSent: 17 February 2003 
  19:52To: DecludeSubject: [Declude.JunkMail] 
  f-prot
  Is anyone using f-prot with Imail and Declude ?? 
  I'm presently using Mcafee net shield but I am always looking for alternatives 
  ...
   
  TIA
  Doris

RE: [Declude.JunkMail] Tuning Declude

[David Lewis-Waller]

I don't pretend to fully understand Declude (others are far more wise
than I). However, I use fairly standard settings with the exception of
using SNIFFER (weight 17) for enhanced spam detection. I weight HOLDs
(for our domain and few others only) at 30+ and have found that I get no
false positives. Other domains get all email and marked using the
following:

GLOBAL.CFG
SPAM-NONE   weightrange x   x   0   4
SPAM-VLOW   weightrange x   x   5   9
SPAM-LOWweightrange x   x   10  14
SPAM-MIDweightrange x   x   15  19
SPAM-HIGH   weightrange x   x   20  29
SPAM-VHIGH  weight  x   x   30  0

$default$.junkmail
SPAM-NONE   WARN
SPAM-VLOW   WARN
SPAM-LOWWARN 
SPAM-MIDSUBJECT SPAM-MID 
SPAM-HIGH   SUBJECT SPAM-HIGH 
SPAM-VHIGH  SUBJECT SPAM-VHIGH

However, these are my settings others will differ in their approach and
implementation.

All in all the system works exceedingly well. For the not so techie a
utility that wrote config files would be a useful addition (in the same
way that Hunter Stone as an app that creates/modifies web.config file
for asp.Net applications)

Treat GLOBAL.CFG as the place where tests and outgoing actions are
defined. Treat $default$.junkmail as the place where incoming actions
are defined either globally for all domains or on a per domain basis.

David
WiSS Limited

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Off topic - recommendations for RAID config for new mail server

[David Lewis-Waller]

Thanks all for the suggestions. Most appreciated.

David

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Off topic - recommendations for RAID config for new mail server

[David Lewis-Waller]

Sorry about the off topic topic but seeking advice on the best RAID
configuration for our new twin Xeon processor server, it hast 3x 36GB
drives at present though more can be added and 1GB RAM. It'll be running
Win2k, Imail and Declude AV/JM and currently processing only about 7k
emails a day though this figure will increase to 50k+ a day (hopefully).
Looking for performance (email throughput) and reliability (operating
system), any advice or recommendations much appreciated.

David

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] New feature

[David Lewis-Waller]

http://support.ipswitch.com/kb/IM-20021105-DM01.htm :)

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Uhte, Russ
Sent: 28 January 2003 17:26
To: '[EMAIL PROTECTED]'
Subject: RE: [Declude.JunkMail] New feature


> It should be mentioned that Imail auto folder creatation
> within a users
> login is only available with Imail 7.1x. correct?

Is it possible to use a POP3 client (Specifically Netscape Mail) to view
these auto-created folders, or can they only be viewed via web and Imap?

-Russ


---
CONFIDENTIALITY NOTICE: This email and any attachments are for the
exclusive and confidential use of the intended recipient. If you are not
the intended recipient, please do not read, distribute or take action in
reliance upon this message. If you have received this in error, please
notify us immediately by return email and promptly delete this message
and its attachments from your computer system.
---
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] New feature

[David Lewis-Waller]

The example Scott quoted is a function of IMail rather than Declude.
http://support.ipswitch.com/kb/IM-19980116-JB04.htm KB demonstrates this
well.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Adam Hobach
Sent: 28 January 2003 14:30
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] New feature


Thanks Scott!!

One question, will the folder be automatically created or would we have
to create a folder for each user? And if we have to create each folder
what happens if the folder is not there???

Thanks...

Adam



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Tuesday, January 28, 2003 8:09 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] New feature



>Did you have any comments on this or is this not possible???

This will be available in the next release.  Instead of:

 WEIGHT1 ROUTETO [EMAIL PROTECTED]

you should be able to use:

 WEIGHT1 ROUTETO [EMAIL PROTECTED]

This will route the E-mail to the appropriate folder, based on the name
of the recipient.  For example, is "[EMAIL PROTECTED]" gets spam, it would
get sent to "[EMAIL PROTECTED]" (the "joe" folder of the user
"spam").
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Results with our configuration

[David Lewis-Waller]

Title: Message



You 
could use domlist http://www.declude.com/tools/index.html. 
This will analyse your SMTP log file generate by Imail as opposed to those 
generated by Declude.
 
David
WiSS 
Limited

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
  On Behalf Of Kris McElroySent: 24 January 2003 
  15:39To: [EMAIL PROTECTED]Subject: Re: 
  [Declude.JunkMail] Results with our configuration
  My log level is set to low and 
  yesterday I ran 130 MB?  This brings me to ask a question How can I see 
  the total number of Emails that Declude processed for that day?  
  This way I can analyze or get an idea of how much traffic this machine is 
  seeing?
   
   
  Thanks, 
   
  Kris McElroy[EMAIL PROTECTED] Internet 
  Systems EngineerDuracom, INC.www.duracom.net 
   
  “I'm retired 99.9%. Of course, there always is that 
  .1%.”--Michael Jordan, February 18, 1999 
  
- Original Message - 
From: 
Craig 
Gittens 
To: [EMAIL PROTECTED] 

Sent: Friday, January 24, 2003 6:18 
AM
Subject: RE: [Declude.JunkMail] Results 
with our configuration

LOL My log level is MID and I run at >100MB a 
day.
 
Craig.

  -Original Message-From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]]On Behalf Of John 
  TolmachoffSent: Thursday, January 23, 2003 6:39 
  PMTo: [EMAIL PROTECTED]Subject: 
  RE: [Declude.JunkMail] Results with our configuration
  
  Currently, our 
  log level is set to HIGH and run about 4.5 mg on 
  weekdays.
   
  Once I have 
  added one more set of files, Kami’s, and watch that for about a week, then 
  I may go back down to MID. I will always be at MID or 
  above.
   
  
  John Tolmachoff 
  MCSE, CSSA
  IT Manager, 
  Network Engineer
  RelianceSoft, 
  Inc.
  Fullerton, 
  CA  
  92835
  www.reliancesoft.com
   
  
  -Original 
  Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]] On Behalf Of Darrell L.Sent: Thursday, 
  January 23, 2003 
  2:00 
  PMTo: 
  [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] 
  Results with our configuration
   
  John,
   
  From your post I gathered that your 
  log level is atleast “mid”.  Is this a normal configuration or just a 
  one time deal to look at the mail.
   
  Darrell
   
   
  
  Darrell LaRock
  Information Systems Analyst
  Gannett Television
  716-849-2272
  -Original 
  Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]] On Behalf Of John 
  TolmachoffSent: 
  Thursday, 
  January 23, 2003 
  1:22 
  PMTo: 
  [EMAIL PROTECTED]Subject: [Declude.JunkMail] Results 
  with our configuration
   
  I wanted 
  to post yesterdays results of Declude Junkmail:
   
  We hold 
  on a weight of 20 and delete at 40.
  Messages 
  held are reviewed using Spam Review software.
   
  There 
  were no False Positives in the messages deleted. This was reviewed by 
  manually going through the Declude Junkmail log for all messages deleted 
  and looking at the subject line and sender and 
recipient.
   
  3485 
  messages were processed by Declude Junkmail.
   
  889 were 
  deleted.
  85 were 
  held.
  Of the 
  held, 16 were False Positives.
   
  Total 
  found and deleted: 958 (27.49%)
   
  Individual 
  tests like SPAMCHECK and NOXMAIL generate a number of false positives, but 
  that is what the while filters and MATCH program is for. However, those 
  tests are also responsible for the majority of the messages 
  deleted.
   
  Tests 
  used: (numbers after action is weight we use)
   
  ORDB    
    WARN  
  2
  OSDUL  
    WARN  
  2
  OSFORM  
  WARN  2
  OSLIST   
  WARN  2
  OSPROXY    
  WARN  2
  OSRELAY 
  WARN  2
  OSSMART    
  WARN  2
  OSSOFT 
   WARN  
  2
  OSSRC   
   WARN  
  10
  SPAMCOP    
  WARN  12
  DSN  
    WARN  
  10
  NOABUSE    
  WARN  3
  NOPOSTMASTER   
  WARN  3
  BADHEADERS  
    WARN  
  5
  BASE64   
  WARN  12
  HELOBOGUS   
    WARN  
  3
  IPNOTINMX    
    
  LOG    0    
  -3
  MAILFROM    
     WARN  15
  PERCENT 
  WARN  15
  REVDNS  
  WARN  2
  ROUTING 
  WARN  10
  SPAMHEADERS

RE: [Declude.JunkMail] CPU Usage

[David Lewis-Waller]

Title: Message



Gareth,
 
We 
sometimes see Declude using 100% CPU however, this is normal when someone is 
sending a lot of mail through the server i.e a large mail shot. It normally 
doesn't pose a problem, except mail delivery might be slower than normal until 
the queue is cleared. You can fine tune your system a little by modifying Imail 
queue timer to a higher value during peak usage and then bring it back to 30 
mins. although I'm not sure it'll make a huge difference. The problem is most 
likely a user pushing through large volumes of email, you may want to check that 
your mail server isn't acting as an open relay. Use domlist.exe to provide a 
usage report for starters. 
 
Regards,
 
David
WiSS 
Limited

  
  -Original Message-From: 
  [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] 
  On Behalf Of Gareth CamplingSent: 23 January 2003 
  13:11To: '[EMAIL PROTECTED]'Subject: 
  [Declude.JunkMail] CPU Usage
  Hi 
  Were seeing Declude today take up loads of CPU 
  Usage and making Imail unstable Has 
  anyone seen this before or a way of limiting how many processes Declude will 
  open Cpu usage it will use 
  Cheers in advance 
  _ 
  Gareth Campling 
      
      Technical Support Engineer  
      Tel: 0870 000 7100 ext 63 
  
  http://www.griffin.net.uk 
  Internet Email Confidentiality Footer: 
  This E-Mail may contain confidential and/or 
  privileged information. It is only intended for the use of the addressee 
  indicated in this message. If you are not an intended addressee of this email 
  (or responsible for delivery of the message to such person), the disclosure, 
  copying or delivering of the contents of this email to anyone else is strictly 
  prohibited and may be unlawful. If you receive this e-mail by mistake destroy 
  the message and please notify us immediately by e-mail, 
  [EMAIL PROTECTED] Please advise immediately if you or your 
  employer do not consent to Internet E-Mail for messages of this type. 
  Information or opinions in this message that do not relate to the business of 
  Griffin Internet shall be treated as neither given or endorsed by 
  it.

RE: [Declude.JunkMail] Total weight as X-header

[David Lewis-Waller]

Scott,

Thanks just the ticket, I couldn't see the wood for the trees.

David


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: 16 January 2003 13:14
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Total weight as X-header



>Is it possible to add an X-HEADER that shows the total weight of the 
>email without using a zero weighted action?

I think what you are looking for is a variation on:

 XINHEADER   X-Spam-Tests-Failed: %TESTSFAILED% [%WEIGHT%]

You could change this to something like:

 XINHEADER   X-Spam-Weight: %WEIGHT%.

   -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Total weight as X-header

[David Lewis-Waller]

Is it possible to add an X-HEADER that shows the total weight of the
email without using a zero weighted action?

For instance if a WARN action is applied then the total weight range is
shown:

X-RBL-Warning: SPAM-NONE: Total weight between 0 and 4.

If a SUBJECT action is used only test failures are listed:

X-Note: SPAM tests failed:[SPAMCOP, REVDNS, SPAM-MID]

I have an action of WEIGHT0 that gives a result of:

   X-RBL-Warning: WEIGHT0: Weight of 5 reaches or exceeds the limit
of 0.

My aim is to give clients the option of filtering locally using a total
weight as well as the defined weight ranges we use.

WEIGHT0 weight  x   x   0   0
SPAM-NONE   weightrange x   x   0   4
SPAM-VLOW   weightrange x   x   5   9
SPAM-LOWweightrange x   x   10  14
SPAM-MIDweightrange x   x   15  19
SPAM-HIGH   weightrange x   x   20  29
SPAM-VHIGH  weight  x   x   30  0

A total weight header would be useful that didn't involve creating a
weight test and setting the action to WARN. Unless I've missed something
that does this.

David
WiSS Limited


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] single user exclusion

[David Lewis-Waller]

Create a directory for the domain e.g. a directory called 'mydomain.com'
under the Declude directory. Copy $default$.junkmail into this folder.
You now have domain specific filters. For single users copy
$default$.junkmail to user.name.junkmail and edit accordingly.

e.g. 

 x:\imail\declude
 |
 |- 'Declude config files etc
 |
 \mydomain.com ' new directory
|
|
 $default$.junkmail   'domain specific file
 users.name.junkmail  'user specific specific file


Declude Pro only.

I think this is what you implied!


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of andyb
Sent: 15 January 2003 17:46
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] single user exclusion


Hi,

I'm sure this has been answered before...

How do I exclude one user from the spam filter?

If you could head me in the right direction, I'd appreciate it.

thanks, Andrew


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] No reverse dns

[David Lewis-Waller]

Jim,

Check with your ISP that you have the relevant records for your IP
address range in place

>From dnsstuff.com

"You could also contact [EMAIL PROTECTED], who is in charge
of the 225.75.168.in-addr.arpa. zone."

David

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jim Rooth
Sent: 09 January 2003 18:36
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] No reverse dns


Possibly...the error my client received just said no reverse dns but it
does have one even if it doesn't match the wording.  Thanks.

Jim Rooth
Klotron, Inc.
214.244.0979
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Mark Smith
Sent: Thursday, January 09, 2003 12:27 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] No reverse dns

This shouldn't fail REVDNS as there is a REVDNS entry. Maybe HELOBOGUS.



> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Jim Rooth
> Sent: Thursday, January 09, 2003 1:24 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] No reverse dns
> 
> 
> Problem is there are 57 domains using one ip address.   
> Reverse lookup shows
> the domain the server is and not the other domains.  But if
> you do a reverse lookup for mail.standardhardware.com it will 
> give you 168.75.225.197 mail.klotron.com.  Thus it fails the 
> reverse dns test.  The IP is correct but the domain name is 
> that of the main mail record.
> 
> Jim Rooth
> Klotron, Inc.
> 214.244.0979
> [EMAIL PROTECTED]
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of John
> Tolmachoff
> Sent: Thursday, January 09, 2003 12:17 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] No reverse dns
> 
> Jim, only one PTR record per IP address needed.
> 
> Should only be for the mail record domain.
> 
> John Tolmachoff MCSE, CSSA
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA  92835
> www.reliancesoft.com
> 
> 
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the
> Declude.JunkMail mailing list.  To unsubscribe, just send an 
> E-mail to [EMAIL PROTECTED], and type "unsubscribe 
> Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> ---
> 
> 
> ---
> Incoming mail is
> certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003
>  
> 
> ---
> Outgoing mail is certified Virus Free.
> Checked by AVG anti-virus system (http://www.grisoft.com).
> Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003
>  
> 
> ---
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the
> Declude.JunkMail mailing list.  To unsubscribe, just send an 
> E-mail to [EMAIL PROTECTED], and type "unsubscribe 
> Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> ---
> [This E-mail scanned for 
> viruses by F-Proto Virus Scanner]
> 
> 

---
[This E-mail scanned for viruses by F-Proto Virus Scanner]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003
 

---

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] No reverse dns

[David Lewis-Waller]

John,

dnstsuff shows that 168.75.225.197 (ip for mail.standardhardware.com)
doesn't have a PTR record. Set one up and you shouldn't fail REVDNS.

http://www.dnsstuff.com/tools/ptr.ch?ip=168.75.225.197

David


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jim Rooth
Sent: 09 January 2003 18:24
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] No reverse dns


Problem is there are 57 domains using one ip address.   Reverse lookup
shows
the domain the server is and not the other domains.  But if you do a
reverse lookup for mail.standardhardware.com it will give you
168.75.225.197 mail.klotron.com.  Thus it fails the reverse dns test.
The IP is correct but the domain name is that of the main mail record.

Jim Rooth
Klotron, Inc.
214.244.0979
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
Sent: Thursday, January 09, 2003 12:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] No reverse dns

Jim, only one PTR record per IP address needed. 

Should only be for the mail record domain.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com




---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003
 

---

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] No reverse dns

[David Lewis-Waller]

Jim,

All our domains, some 400, or so share a single IP address - this
shouldn't fail the Reverse DNS test.

David

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jim Rooth
Sent: 09 January 2003 18:24
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] No reverse dns


Problem is there are 57 domains using one ip address.   Reverse lookup
shows
the domain the server is and not the other domains.  But if you do a
reverse lookup for mail.standardhardware.com it will give you
168.75.225.197 mail.klotron.com.  Thus it fails the reverse dns test.
The IP is correct but the domain name is that of the main mail record.

Jim Rooth
Klotron, Inc.
214.244.0979
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of John Tolmachoff
Sent: Thursday, January 09, 2003 12:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] No reverse dns

Jim, only one PTR record per IP address needed. 

Should only be for the mail record domain.

John Tolmachoff MCSE, CSSA
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA  92835
www.reliancesoft.com




---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003
 

---

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Filtering on file extension

[David Lewis-Waller]

I'm attempting to set up a system to filter on file extensions per
domain. Delcude Virus can ban per file extension but for per domain. I
can't do it via Imail Web messaging as the customer uses SMTP/ETRN. I've
set up a ATTACHMENT test that looks for: 

HEADERS 0 CONTAINS Content-Type: multipart

to detect an attached file and configured a subject warning.

Is there anyway to detect a particular extension e.g. .exe so I put it
on HOLD?

Thanks

David 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] No reverse dns

[David Lewis-Waller]

Jim,

Create a reverse zone in DNS that covers the IP address used in IMail.

i.e. we have 

xxx.xxx.xxx.xxx.in-addr.arpa

With entries that cover from xxx-xxx-xxx-0.domain to
xxx-xxx-xxx-255.domain

This ensures that we have a reverse DNS for all possible IPs on that
class C.

David

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Jim Rooth
Sent: 09 January 2003 17:56
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] No reverse dns


How odes one correct the reverse DNS on Imail if using virtual domains?
For instance I have 57 domains all using the same IP...doing a reverse
lookup will not show the correct server name.

Jim Rooth
Klotron, Inc.
214.244.0979
[EMAIL PROTECTED]

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Mark Smith
Sent: Thursday, January 09, 2003 11:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Hotmail, Yahoo, MSN, etc...

That's the problem... Hotmail is on and off of Spamcop every other day.
We bounce at 12 and delete at 20. Spamcop is at 8 so I'll put in -8 for
hotmail which will adjust for the nopostmaster and noabuse.

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of John 
> Tolmachoff
> Sent: Thursday, January 09, 2003 11:59 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Hotmail, Yahoo, MSN, etc...
> 
> 
> The way I have it configured, they will end up with a weight
> of 8 and we hold at 20, so they would have to fail a test 
> like SPAMCOP or NOXMAIL or one of our major filters to be held.
> 
> John Tolmachoff MCSE, CSSA
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA  92835
> www.reliancesoft.com
> 
> 
> 
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the
> Declude.JunkMail mailing list.  To unsubscribe, just send an 
> E-mail to [EMAIL PROTECTED], and type "unsubscribe 
> Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> ---
> [This E-mail scanned for 
> viruses by F-Proto Virus Scanner]
> 
> 

---
[This E-mail scanned for viruses by F-Proto Virus Scanner]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003
 

---

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Hotmail, Yahoo, MSN, etc...

[David Lewis-Waller]

We use Declude standard weights and add 15 for ones that fail
SortMonster tests. We hold on weights over 30 and I don't think we've
caught legitimate mail from these sources for sometime. Our only real
fine tuning was to negative weight some email domains (below). We don't
use any kill lists at all.

MAILFROM -10 CONTAINS @talk21.com
MAILFROM -10 CONTAINS @passport.com
MAILFROM -30 CONTAINS @economist.com
MAILFROM -100 CONTAINS .ft.com
MAILFROM -30 CONTAINS @bbc.co.uk
HEADERS 15 CONTAINS charset="GB2312"

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Mark Smith
Sent: 09 January 2003 16:32
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Hotmail, Yahoo, MSN, etc...


What is everyone doing about Hotmail, Yahoo, Juno and other web-based
mail systems? It's really a catch-22. Hotmail is so frequently listed on
RBL's and is a large source of spam but it's also a large source of
legitimate email.

They all seem to fail postmaster and abuse so they're already at 6-8
points on most peoples Junkmail. You can't whitelist them, and the RBL's
usually send them over the edge.

I use Sniffer so I've thought about adding a rule for hotmail, yahoo,
etc to subtract the sum of postmaster and abuse and let message sniffer
do some magic on these sites.

Thoughts?

---
[This E-mail scanned for viruses by F-Proto Virus Scanner]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Completely off topic

[David Lewis-Waller]

Terry,

I was hoping you weren't going to say that. I only has TS access the
server is 280 miles away.

Cheers anway

David

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Smart Business
Lists
Sent: 05 January 2003 16:50
To: David Lewis-Waller
Subject: Re: [Declude.JunkMail] Completely off topic


David,

Sunday, January 5, 2003 you wrote:
DLW> Does anyone know how to get this service (World Wide Web Publishing

DLW> Service) back?

1st Try  net start "world wide web publishing service"

If that doesn't work I think you probably will have to reinstall -
Start->Settings->Control Panel->Add/Remove Programs->Window Components

 


Terry Fritts

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Completely off topic

[David Lewis-Waller]

Sorry about this but am in a bit of a pickle and a panic. A key service
in Win2k has been removed accidently by clicking the remove service ican
(red cross). Does anyone know how to get this service (World Wide Web
Publishing Service) back?

David

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Filter on HEADERS

[David Lewis-Waller]

Can I just check that the following is legal in myfilter.txt:

HEADERS 15 CONTAINS charset="GB2312"

or should I use

HEADERS 15 CONTAINS GB2312

?

Thanks in advance

David
WiSS Limited

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] relays.osiriusoft.com

[David Lewis-Waller]

Just as a note to this, we have a DNS (Simple DNS plus) on the same
machine as Imail/Declude and point to this DNS. Another DNS server sits
on the same 10Mb network whilst the primary is elsewhere. Cuts down on
internet look ups.

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: 19 December 2002 23:49
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] relays.osiriusoft.com



>Declude does a seperate DNS lookup "for each IP4r test for each email" 
>it is set to check.  So if you do 12 different ip4r type tests, 12 DNS 
>queries are done for each email.  Declude either uses the DNS server 
>you hand code in global.cfg, or it uses the one defined in Imail's SMTP

>tab.

Correct.

>Declude does NOT cache any results from these lookups, but the DNS 
>server that Declude references DOES cache these lookups - just like any

>other DNS lookup - up to it's TTL.  Most DNS servers will cache both 
>positive ("I found an answer") and negative ("no answer was found at 
>the DNS server") results.

Correct.

The one catch here is when a single E-mail results in two or more
identical 
queries (for example, with the OSSRC, OSFORM, OSRELAY, etc. tests).  In 
this case, Declude JunkMail makes 3 identical queries (in this case, all

would be "1.0.0.127.relays.osirusoft.com", if the IP was 127.0.0.1),
which 
the DNS server may end out 3 times (even though it only needs to be sent

out once).  The next release of Declude JunkMail will only send out 1
query 
in this case, which will cut down on DNS traffic slightly.

>If your DNS server is local - and your declude is busy - your local DNS

>server will have a rich cache of recent lookups it's already done. 
>relays.osirusoft.com's default TTL is 2 DAYS.  That means unless you 
>set a lower TTL in your resolver, if you recieve 1000 emails from a 
>certain spammer IP within that two day period, your server will answer 
>999 of the queries from it's local cache.  Declude does not cache, but 
>if a good percentage of Decludes lookups only involve your 100/1000 LAN

>(and not external lookups over the Internet) - performance will greatly

>improve.

Correct.  And a very good explanation, by the way!
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT: MS update

[David Lewis-Waller]

It happend to us on our 7.13 installation, we had to uninstall the
update to get the IMail interface back to something usable. Not clever.

IMail have confirmed to me that this is a problem and suggested the
removal of Q328310, whether this is a problem with IMail or MS I know
not - no other apps seems affected.

Q328310 overcomes a flaw in wm_timer message handling.

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Mark Smith
Sent: 17 December 2002 23:33
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OT: MS update


Not me but then again, I'm running 7.13 (or whatever the latest version
is). This seems to be more of a screen paint issue than anything else. I
can't even find MSKB article Q328310 so I'm not sure what it is.


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Michael
Lauritzen
Sent: Tuesday, December 17, 2002 4:35 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] OT: MS update


Has anyone else seen this?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Scott MacLean
Sent: Tuesday, December 17, 2002 11:26 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] OT: MS update


Slightly off this topic, but I just learned the hard way that if you
have intentions of continuing to use the server-based IMail 6
administration program, do NOT install Microsoft update Q328310. You'll
get something like this as a result:

http://www.nerosoft.com/Test/IMail.gif

At 11:09 AM 12/17/2002, Craig Gittens wrote:

---
[This E-mail scanned for viruses by F-Proto Virus Scanner]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] An optional web interface for Declude JunkMail?

[David Lewis-Waller]

The Declude users lobby group!!! Count me in.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Mark Smith
Sent: 17 December 2002 16:56
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] An optional web interface for Declude
JunkMail?


Say the word and I'm sure that we'll be more than happy to start
campaigning Ipswitch to do it! :)

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of R. 
> Scott Perry
> Sent: Tuesday, December 17, 2002 11:06 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] An optional web interface for 
> Declude JunkMail?
> 
> 
> 
> >Is there any hook into the iMail web interface/server?
> 
> No.
> 
> With about 10-20 lines of code, IMail could do it, but they
> don't seem to 
> think there is a need.  :(
> 
> If they had, we likely would have had a web interface within
> a week or so 
> after they added the interface (yes, it would be very easy if 
> they had a 
> web interface).
>  -Scott
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> This E-mail came from the
> Declude.JunkMail mailing list.  To unsubscribe, just send an 
> E-mail to [EMAIL PROTECTED], and type "unsubscribe 
> Declude.JunkMail".  The archives can be found at 
> http://www.mail-archive.com.
> ---
> [This E-mail scanned for 
> viruses by F-Proto Virus Scanner]
> 
> 

---
[This E-mail scanned for viruses by F-Proto Virus Scanner]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] An optional web interface for Declude JunkMail?

[David Lewis-Waller]

My preference would be for IIS/ASP. PHP adds another installed
application into the equation on a box that really should only be
running IMail. However, I would trust a webserver app from Declude that
would do the job - it would be less prone to vulnerabilities than
IIS/Apache/CF etc. as the internal workings wouldn't be known outside of
Scott's team - i.e. not common and not open source. My 2p's worth.

David
WiSS LImited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Craig Gittens
Sent: 17 December 2002 16:10
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] An optional web interface for Declude
JunkMail?


I don't mean to cross you and it is a question out of it's time seeing
as you haven't made any decisions yet but what about functionality and
extensibility of your "proprietary" platform? Are we in for another
IWEBMSG and are you going to hire a whole new team to support coding
features/upgrades for this? I see this as being your expense where you
would have almost none using existing "free" technologies such as IIS.
Remember that you are dealing with Win32 admins here and yes you can't
please all the people all the time but you can sure come close by
injecting your new project into our Win32 subset of experience. What you
could do is just forward to the list the new found bugs and patches for
IIS from Microsoft and other 3rd party security companies for those who
don't keep up-to-date.
*guilty*

Craig.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Tuesday, December 17, 2002 11:47 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] An optional web interface for Declude
JunkMail?



>I agree that the flat files work well for Junkmail itself. However, a 
>web GUI will be very hard to do without the 'masters' kept in a 
>database. Without a database you'll run into file locking problems and 
>it will be harder to deal with single records.

That's why we try stay away from the bleeding edge technology -- there's
a reason they use the word "bleeding".  It will actually be easier for
us to use a flat file than to use a database.

> >  use IIS (a lot of people don't want to use it, for security 
> > reasons).
>
>This is pretty much a moot point as both IIS and Apache have the same 
>security risks. IIS just gets more press.

  We won't use Apache either.

> >  or any special technologies (such as dot NET, ASP, CF, etc.).  We
> would need to create something
> > that would work on all servers, and not have any special 
> > requirements.
>
>That's going to be hard.

Not for us.  

>You really only have two choices that could cover most of the bases. 
>ASP or PHP both are available in the Win and Unix worlds. Win32 admins 
>will prefer ASP.

Sorry, I should have included PHP in that list (which is amazingly
flexible, BTW).  We're not talking about something the typical
pre-bubble "We need to show them something to collect our $10 million
funding" company would produce.  We actually wrote a web scripting
language well before ASP was available, and wrote our first web server
back when people thought that dynamic content on a web page was a web
page that was updated by hand every few hours.

If we require ASP or PHP, we're going to require something that a number
of our customers either don't have or won't have.  Many of our customers
would not even think of installing IIS or Apache on a mailserver.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] An optional web interface for Declude JunkMail?

[David Lewis-Waller]

This is something we would buy into rather than develop ourselves (we
already started) as I rather rely on those who know Declude inside out
rather than us making mistakes and getting things wrong (I'm making the
assumption that Scott will tend to make a one or two less errors than we
would with this technology ;)). I don't mind users having to work out on
another port either. My only concern is authentication and how that is
transacted, if it integrates with Imail and registry settings then even
better as we wouldn't need to maintain a user base and keep that secure.

For those that see it as a benefit then great, for those that don't like
the thought of user/domain based spam configuration then they don't need
to use it or offer to their customers. For me it would make my life
simpler and have less to worry about especially as we offer spam
filtering at no extra cost. At the moment I think we've made a rod for
our own back with Declude and the power it has given us (we're making a
few mistakes on the learning curve which doesn't help).

For info we run IIS on the same box as Imail undertaking admin tasks and
passing virus info back to a remote web server.

Regards to all,

David
WiSS Limited

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] An optional web interface for Declude JunkMail?

[David Lewis-Waller]

A definite yes.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: 17 December 2002 00:50
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] An optional web interface for Declude
JunkMail?


A lot of our customers seem to want a web interface to Declude JunkMail,

mostly so that customers can turn their spam settings on or off.

We haven't come up with something in the past, because it is very 
complicated without a hook into web messaging, and it doesn't look like 
Ipswitch is planning to add an interface to web messaging any time soon.

However, we are at the point where we are considering a web interface.
If 
we do it, it would probably need to be done as an addon to Declude 
JunkMail, mainly because the development and support costs would be
fairly 
high.  It would also have some drawbacks, being separate from web 
messaging.  For example, it would require installing a separate service,

using a different port than 80 or 8383 for web access (which may cause 
firewall problems), and having users enter their username/password a
second 
time (if they are already using web messaging).

Is this something that is important enough that it would be worthwhile?
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] FW: Filters

[David Lewis-Waller]

Scott,

Would a regular expression be appropriate for this type of specific
filtering? E.g.

BODY 100 REGEXP (regular expression) 

If so, could it be added to the wish list as an option? Just an idea.

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: 30 November 2002 00:26
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] FW: Filters



>spaces are not allowed.

Spaces are actually fine in the filters; the problem is that you can't
have 
spaces before or after what you are filtering.  For example, you can
have:

BODY 100 CONTAINS Foreign Liaison Officer of the board of trustee of RWA

Agency ( Relief West Africa)

but, that would function identically to:

BODY 100 CONTAINS Foreign Liaison Officer of the board of
trustee 
of RWA Agency ( Relief West Africa)

(which has spaces before and after the filter text).  This is typically
a 
problem when trying to match words, so that "word" won't catch
"crossword".
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Unable to get filter to work

[David Lewis-Waller]

I have added MYFILTER   WARN to $default$.junkmail.txt and removed the
double quotes around the text file leaving

MYFILTERfilter  c:\imail\declude\myfilter.txt x 0 0

In global.cfg

I'm sent a few more test emails and the MYFILTER test isn't appearing in
the headers

I am quite puzzled.

David

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: 28 November 2002 13:52
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Unable to get filter to work



>I have in my global.cfg file the line
>
>MYFILTER filter "c:\imail\declude\myfilter.txt" x 0 0

You'll need to remove the quotes.  If you do that, the filter should
work.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Unable to get filter to work

[David Lewis-Waller]

Any help appreciated...

I have in my global.cfg file the line

MYFILTER filter "c:\imail\declude\myfilter.txt" x 0 0

myfilter.txt has the following lines

MAILFROM -10 CONTAINS @talk21.com
MAILFROM -10 CONTAINS @passport.com
MAILFROM -10 CONTAINS @economist.com
MAILFROM -10 CONTAINS .ft.com
MAILFROM -10 CONTAINS .bbc.co.uk

I hold email on a weight of 30.

I have a test account with talk21.com which normally fails a number of
tests resulting in a total weight of 33. I would have expected the
weight to drop to 23 because of myfilter.txt but it doesn't. I tried
silly numbers as well e.g. -60 but still end up with a total weight o
33. I'm obviously missing something fundamental.

Sent email headers:

Received: from wmpmta04-app.mail-store.com [194.73.242.6] by
mail.nthost.co.uk with ESMTP
  (SMTPD32-7.13) id ACAC128E00CC; Thu, 28 Nov 2002 13:39:56 +
Received: from wmpmtavirtual ([10.216.84.18])
  by wmpmta04-app.mail-store.com with SMTP
  id
<20021128133955.RBKO6682.wmpmta04-app.mail-store.com@wmpmtavirtual>
  for <[EMAIL PROTECTED]>; Thu, 28 Nov 2002 13:39:55 +
Received: from 62.189.235.109 by t21web08-lrs ([10.216.84.18]); Thu, 28
Nov 02 13:30:20 GMT+00:00
X-Mailer: talk21 v1.26 - http://talk21.btopenworld.com
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
X-Talk21Ref: none
Date: Thu, 28 Nov 2002 13:30:20 GMT+00:00
Subject: SPAM: (No Subject)
Message-Id:
<20021128133955.RBKO6682.wmpmta04-app.mail-store.com@wmpmtavirtual>
X-RBL-Warning: NOPOSTMASTER: Not supporting postmaster@domain
X-RBL-Warning: BADHEADERS: This E-mail was sent from a broken mail
client [804f].
X-RBL-Warning: REVDNS: This E-mail was sent from a mail server
194.73.242.6 with no reverse DNS entry.
X-RBL-Warning: SNIFFER: Message failed SNIFFER: 4.
X-RBL-Warning: WEIGHT10: Weight of 33 reaches or exceeds the limit of
10.
X-Declude-Sender: [EMAIL PROTECTED] [194.73.242.6]
X-Note: This E-mail was scanned by Declude JunkMail for evidence of
spam.
X-Note: This E-mail was sent from [No Reverse DNS] ([194.73.242.6]).

Thanks in advance.

David




-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Dan Patnode
Sent: 28 November 2002 08:57
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] BASE64 usage


I have John.  While Base64 is a great test, a number of newsletters and
normal emails have come across using it.  I have weakened my system to
let these types of messages through and pull my hair out every time a
spam gets through because of it.

Dan


On Wednesday, November 27, 2002 8:02, John Tolmachoff
<[EMAIL PROTECTED]> wrote:
>Even thought it has been determined that there is no legit REASON to 
>use BASE64 encoding in the body, I am finding and increasing use of it.
>
>Most of these are junk, but it has caught a number of legit messages.
>
>Therefore, I have downgraded BASE64 from 15 to 12.
>
>Any one experiencing similar?
>
>John Tolmachoff MCSE, CSSA
>IT Manager, Network Engineer
>RelianceSoft, Inc.
>Fullerton, CA  92835
>www.reliancesoft.com
>
>
>
>---
>[This E-mail was scanned for viruses by Declude Virus 
>(http://www.declude.com)]
>
>---
>This E-mail came from the Declude.JunkMail mailing list.  To 
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
>"unsubscribe Declude.JunkMail".  The archives can be found at 
>http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Problem with ATTACH

[David Lewis-Waller]

Scott,

I'm using Outlook 2002. I'll see if there are any settings that can be
changed to cure this.

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: 22 November 2002 14:26
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Problem with ATTACH



>I've been using Declude for more than a year now and I've only just 
>tried the ATTACH option. However, I don't get the spam email as an 
>attachment it is simply embedded in the email itself - any ideas?

Most likely, that just means that you mail client can't properly support

RFC822 attachments ("E-mails within E-mails"), which aren't commonly
used.

With some versions of Eudora, for example, it will appear as an
attachment 
if the original E-mail was text-only, but will show the body of the
E-mail 
if it contained any non-text (IE HTML) segments.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Problem with ATTACH

[David Lewis-Waller]

I've been using Declude for more than a year now and I've only just
tried the ATTACH option. However, I don't get the spam email as an
attachment it is simply embedded in the email itself - any ideas?

Extract from email below:

Subject: FSC - Our Top Pick For Making Money!
From: [EMAIL PROTECTED]
Tests Failed: SPAMCOP, NOABUSE, NOPOSTMASTER, BADHEADERS, REVDNS,
SPAMHEADERS, WEIGHT10, WEIGHT15, WEIGHT20, WEIGHT25, WEIGHTSUBJECT

To view the E-mail, just click the attachment.Received: from
61.183.38.81 [218.104.199.195] by mail.nthost.co.uk
  (SMTPD32-7.13) id A97B20600E2; Fri, 22 Nov 2002 14:04:43 +
From: Marcia <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: 
Subject: FSC - Our Top Pick For Making Money!
Sender: Marcia <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset="iso-8859-1"
Date: Fri, 22 Nov 2002 00:44:27 -0600
X-Mailer: AOL 7.0 for Windows US sub 118
Message-Id: <[EMAIL PROTECTED]>

For those wanting to earn money without having to talk on the phone,
recruit, or bug family and friends this is it!

You can earn from 2k  up to 10K per month fairly quickly. 
No selling... 
No recruiting... 
No explaining or answering difficult questions... 
No 3-way calling... 


Etc
Etc
etc

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: RE: [Declude.JunkMail] subscribe message

[David Lewis-Waller]

The domain that Declude was registered to has to be the same as the
official host in Imail or Declude won't work.  

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of Tom
Sent: 15 November 2002 07:47
To: [EMAIL PROTECTED]
Subject: RE: RE: [Declude.JunkMail] subscribe message



>
> I have just purchased my copy of declude and I am getting this in my 
> log files? Does anyone know why?
>
>
> 11/14/2002 22:54:40 Q7e100b79021ad390 Declude JunkMail NOT Registered 
> for media14.mediaresolutions.com; not scanning E-mail.

I believe that your Declude registration is not for that domain, please
check the domain name that you used to register Declude with.  I could
be wrong, but I'm sure I read something about it someplace when I
purchased Declude.

Regards,
Tom
Image`fx

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Imail upgrade and Declude

[David Lewis-Waller]

Sharyn,

Not as far as I've experienced. An Imail upgrade can sometimes disable
Declude (I've not seen this happen by the way) but run declude.exe to
reinstate (always advise doing this if running Declude Virus then send a
test virus from www.declude.com).

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of Sharyn Schmidt
Sent: 05 November 2002 14:58
To: Declude Junkmail List
Subject: [Declude.JunkMail] Imail upgrade and Declude


Morning,

I'm contemplating upgrading my IMAIL installation from 6.05 to 7.13

Anything special need to be done with Declude before or after the
upgrade?(I'm running Junkmail and Virus)

TIA,
Sharyn



We are the worldwide producer and marketer of the award winning Cruzan
Single Barrel Rum, judged "Best in the World" at the annual San
Francisco Wine and Spirits Championships. For more information, please
click (go to) http://www.cruzanrums.com";>www.cruzanrums.com
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Two JunkMail questions please...

[David Lewis-Waller]

Many thanks for this and other responses regarding message sniffer -
looks like they have another client.

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of Madscientist
Sent: 04 November 2002 17:46
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Two JunkMail questions please...


Our test server does not show any significant difference between Declude
alone and Declude w/ Message Sniffer. Performance logs report average
processing times of about 170ms per message - and this includes the time
it takes to load the rule base and the message under test. Our test bed
server sees about 450ms on average - but most of that is IO rather than
CPU and our test server is intentionally underpowered. Our production
Linux gateway running Message Sniffer processes messages in less than
40ms per message consistently.

Hope this helps,
_M

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Two JunkMail questions please...

[David Lewis-Waller]

Has anyone found MessageSniffer to add any significant CPU load
before/after implementation?

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of Uhte, Russ
Sent: 04 November 2002 17:06
To: '[EMAIL PROTECTED]'
Subject: RE: [Declude.JunkMail] Two JunkMail questions please...


Joe,
I can't comment for anyone else, but I'd like to give my $.02 on
question 1. We've recently purchased MessageSniffer, and its results
have been outstanding.  We use a weight of 20 as our breaking point on
when a message can no longer be delivered.  I've set MessageSniffer with
a weight of 17. We've almost completely eliminated spam!!! -Russ

-Original Message-
From: Joe Wolf / CompuService [mailto:joe@;csgo.com] 
Sent: Monday, November 04, 2002 11:54 AM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Two JunkMail questions please...


First I'm still a newbie to JunkMail so forgive my ignorance.  Two
issues to
cover:

#1I am basicly using the default settings for JunkMail.  I have had
a
few valid messages marked as spam, but I still get quite a bit of spam
thru that I wish to get rid of.  Does anyone have a template, or
suggestion on what settings work the best for JunkMail?  I know that I
can customize anything I want, but at the same time I don't want to make
it my life to investigate which database is best, etc.  Any help would
be appreciated.

#2My mail server does quite a bit of list serving.  I've noticed
that
since I installed JunkMail my server is running further and further
behind. I've gone from nearly immediate delivery of messages to nearly
an hour behind.  Is the Declude replacement to the Ipswitch mail handler
that much more inefficient, or does JunkMail just take alot more
processing?  My CPU utilization chart is not too high, but it take so
long to process messages.

Thanks,
Joe

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]


---
CONFIDENTIALITY NOTICE: This email and any attachments are for the
exclusive and confidential use of the intended recipient. If you are not
the intended recipient, please do not read, distribute or take action in
reliance upon this message. If you have received this in error, please
notify us immediately by return email and promptly delete this message
and its attachments from your computer system.
---
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Blacklist

[David Lewis-Waller]

Scott,

Are blank lines okay in a blacklist file? I ask because it's makes it
easier to distinguish different types of email/domains we want to block.

Regards,

David 
WiSS Limited

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] client Question

[David Lewis-Waller]

We're developing an ASP solution for this as well, initially just
modifying the users $default$.junkmail file and providing WARN/SUBJECT
changes initially, then progressing onto WEIGHT change etc. later. If we
offer too much at first otherwise we make a rod for our own back and
drown in client support questions.

The difficult bit is ensuring it's done in a secure manner. We're toying
with a ASP.NET solution using web services. Will keep you informed of
progress if interested.

David
WiSS Limited

-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of grb
Sent: 25 October 2002 07:21
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] client Question


At 08:15 PM 10/24/02, you wrote:
>Thats correct...It reads it each time a message is received.  We plan 
>to work on a similar tool using ASP here in the next month or two.
>
>Bill



ASP?arg... just kiddin'

I'll do the CF thingy

sounds like a good test..I like it.(if said
correctly, it sounds coo)...


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

HELO:RE: [Declude.JunkMail] win 2K server

[David Lewis-Waller]

Bob,

I can only reassure you that it's very doubtful to be a Win2k problem, we
run almost exactly the same set up as your selves except that our server is
a humble 1Ghz with only 128MB RAM but with 350 domains and ~3000 users. CPU
usage is very low ~2-5% peaking at 50% very occasionally.

If the log file is filling with "[EMAIL PROTECTED] Illegal
IMail List Server Command" it might be a problem with the list server, or
someone is repeating send the same illegal command a kind of DOS attack -
possibly.

David



-Original Message-
From: bbloise [mailto:[EMAIL PROTECTED]] 
Sent: 03 August 2002 18:40
To: Declude List
Subject: [Declude.JunkMail] win 2K server 


Greetings everyone, 

I HAD a Windows NT 4.0 machine running Imail version 6.xx (latest patches,
etc) with Declude anti-spam and anti-virus with sniffer from sortmonster.
Everything ran fine until last friday morning when BOTH mirrored drives
crashed.  When I went to the shop both drives were "clank, clank, clank"


I build a new machine with Windows 2000 advanced server and installed Imail
and all the latest patches.  I have installed declude and sniffer.  I am
using F-prot for the virus scan through the declude program.  On the NT 4.0
machine running an AMD 750 processor the cpu usage on the task manager
showed between 2 - 5% with peaks around 40%. 

On the new 2000 machine running a 1.8 Ghz intel 4 it will also run about the
same cpu usage.  Then it starts showing usage averaging about 45% with peaks
to about 90%.  The performance monitor shows the "File control bytes/sec" is
showing about 250,000 per second.  Normally this is 400 -500 with peaks to
4000-5000.   

This is driving me nuts as I can't seem to find what is causing the problem.
The "sys0803.txt" shows ALL the same entry - "08:03 12:55 1884 LST
imailsrv->[EMAIL PROTECTED] Illegal IMail List Server
Command!"  The ENTIRE log file contains the above entries showing the only
differences to be the date and time.  NO OTHER NORMAL ENTRIES are in there!
The daily logs are over 25 meg with nothing but that entry.

I have turned OFF the logging and the problem still exists.  If I reboot the
computer the cpu usage goes back to the normal 5% usage.  Then all of a
sudden it jumps to 35 - 50% usage.  There is no pattern to the amount of
time before it happens.  Last night it took almost an hour before it
happened.   

I have approximately 100 domains running on the computer with about 4760
users.  Keep in mind that the windows NT 4.0 running the same domains and
users did NOT do this.  It started with the Windows advanced 2000 server.   

The declude anti-spam and anti-virus program is STILL catching about 25,000
pieces of spam per day as it did on the NT 4.0 machine.  I even have the
declude set to DELETE the spam and virus instead of holding it to save disk
writes.   

Any assistance with this problem will be greatly appreciated. 

bob bloise 
system administrator 
trellis technologies, inc. 

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: KITHRUP:RE: [Declude.JunkMail] HELO:Declude Console

[David Lewis-Waller]

We use VNC, pcAnywhere and TS, VNC is very slow over a 64kbps leased line to
our remote servers but okay over a local lan, pcAnywhere is okay but has a
licence fee, TS is excellent aside from some apps (very few) won't open in
GUI mode.

Sorry for being out of scope.

David
WiSS Limited

-Original Message-
From: Todd Holt [mailto:[EMAIL PROTECTED]] 
Sent: 16 July 2002 17:10
To: [EMAIL PROTECTED]
Subject: RE: KITHRUP:RE: [Declude.JunkMail] HELO:Declude Console


I am a M$ fan, but they were right when they named the product "terminal"
services.  It sure is terminal. I have found many things that don't work as
expected when using terminal services, so beware.

One product that we use is VNC. It is a very effective remote control
console, it uses very little bandwidth (as compared to other products) and
is free!!  You can even run it as a service on your servers.  I never go
into the computer room any more!  It also has an web browser client which
works surprisingly well across HTTP.  The product is a testbed for AT&T
labs.

http://www.uk.research.att.com/vnc/download.html

Todd


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jim Rooth
Sent: Tuesday, July 16, 2002 6:59 AM
To: [EMAIL PROTECTED]
Subject: KITHRUP:RE: [Declude.JunkMail] HELO:Declude Console


Yes, I believe you are right.  After hooking up with pcAnywhere, I could see
it but not through Terminal Service.


Jim Rooth
Klotron, Inc.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of David Lewis-Waller
Sent: Tuesday, July 16, 2002 1:39 AM
To: '[EMAIL PROTECTED]'
Subject: [Declude.JunkMail] HELO:Declude Console

Am I right in thinking that the Declude console can't run when looged in via
Terminal Service as it can't interact with the desktop?

David
WiSS Limited
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---


---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.377 / Virus Database: 211 - Release Date: 7/15/2002


---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.377 / Virus Database: 211 - Release Date: 7/15/2002


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

[Declude.JunkMail] HELO:Declude Console

[David Lewis-Waller]

Am I right in thinking that the Declude console can't run when looged in via
Terminal Service as it can't interact with the desktop?

David
WiSS Limited
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

ROUTING:RE: [Declude.JunkMail] European Union bans spam

[David Lewis-Waller]

Initially, this will give us very little protection as most of the SPAM most
we receive is from Asia or the US and it won't protect us from spoofing (we
may even see innocents being prosecuted or litgated unduly).

Ho hum

David (GB)


the Americas
-Original Message-
From: Kami Razvan [mailto:[EMAIL PROTECTED]] 
Sent: 06 June 2002 14:08
To: JunkMail List
Subject: [Declude.JunkMail] European Union bans spam


thought it could be of interest...

Kami

 - 
* European Union bans spam

GLOBAL INTERNET COMMUNITY APPLAUDS EUROPEAN ANTI-SPAM VOTE

May 31, 2002 - The Coalition Against Unsolicited Commercial E-Mail
(CAUCE), EuroCAUCE, CAUCE India, CAUCE Canada and the Coalition Against
Unsolicited Bulk E-Mail, Australia (CAUBE.au) today applauded the decision
by the European Parliament to protect European Internet users from the
practice of unsolicited e-mail advertisements. Yesterday's vote will turn
Europe into a virtual "spam-free zone" after the formal adoption of the
directive, making it illegal to send unsolicited e-mail, text message or
other similar advertisements to individuals with whom companies do not
have a preexisting business relationship.

"This is a tremendous day for European Internet users," said EuroCAUCE
Chairman George Mills. "We are extremely pleased that the European
Parliament has listened to the citizens of its member countries and added
the right to be left alone by spammers to its efforts to protect the
privacy of Europeans."

While six European Union member countries had already formalized "opt-in"
in their national laws and regulations, yesterday's vote should turn all
of Europe into a spam-free zone by the end of 2003.

"Unfortunately, the rest of the world's Internet-using countries,
including the United States, now lag behind Europe in their protection
of Internet users," said CAUCE Chairman Scott Hazen Mueller. "This is
a tremendous first step, but the rest of the world now needs to follow
Europe's lead and unite behind protection of Internet users and
network owners from abusive and costly unsolicited e-mail
advertising."

"This decision is the direct result of Internet users throughout the
European Union standing up for their rights, and Members of the
European Parliament listening to their constituents," said Mills. "Our
members and our volunteers performed an integral part of this process,
translating, lobbying and educating their representatives."

More information on the E.U. directive is available on the European
Parliament's Web site ,
and a EuroCAUCE analysis is available at
. More information on
the international CAUCE network of affiliate organizations is
available at .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] AV Recommendations

[David Lewis-Waller]

We used F-PROT only, updated once every hour, and advise clients this is
just a first line of defence and advise them to keep their AVs up to date as
well. 

-Original Message-
From: Bill Newberg [mailto:[EMAIL PROTECTED]] 
Sent: 28 May 2002 21:32
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] AV Recommendations


I added McAfee a couple of months ago as Scanner 2. Everything is working
well. I don't think it is absolutely necessary, but the extra protection
can't hurt.



> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Timm Jasper
> Sent: Tuesday, May 28, 2002 12:50 PM
> To: Declude. JunkMail@declude. com
> Subject: [Declude.JunkMail] AV Recommendations
>
>
> Currently we are running declude+f-prot, does anyone have a 
> recommendation for another av scanner to compliment what we already 
> have. Is it even necessary?
>
> -- Timm Jasper
> -- Systems Administrator
> -- TQCI
> -- Phone: 301-863-6121
> -- Fax: 301-863-7544
>
> ---
> [This E-mail was scanned for viruses at tqci.net]
>
> ---
> [This E-mail was scanned for viruses by Declude Virus 
> (http://www.declude.com)]
>
> ---
>
> This E-mail came from the Declude.JunkMail mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type 
> "unsubscribe Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] 
> for assistance.  You can visit our web site at http://www.declude.com 
> .
>

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] Message-ID

[David Lewis-Waller]

Scott,

Declude reports that an email sent by CDONTS has 

>X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam
[420f].

According to declude/tools the error given is that of not having a
Message-ID yet the same email shows

>Message-Id: <[EMAIL PROTECTED]>

Does/can 420f describe other errors?

Thanks

David
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] Message-ID

[David Lewis-Waller]

Sorry, I think I've got it. It's likely that we're sending out mail using
.BCC rather than .To when sending to a large list of users.

-Original Message-----
From: David Lewis-Waller [mailto:[EMAIL PROTECTED]]
Sent: 26 May 2002 18:57
To: '[EMAIL PROTECTED]'
Subject: [Declude.JunkMail] Message-ID


Does anyone know haow to add a message id to email sent from CDONTS to avoid
being picked up as having SPAM HEADERS?

Thanks in advance.

David
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

[Declude.JunkMail] Message-ID

[David Lewis-Waller]

Does anyone know haow to add a message id to email sent from CDONTS to avoid
being picked up as having SPAM HEADERS?

Thanks in advance.

David

-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]]
Sent: 26 May 2002 17:41
To: [EMAIL PROTECTED]
Subject: Re: DSN:Re: [Declude.JunkMail] False positives for Spamheaders



>We're getting SPAMHEADERS failing that have a Message-ID: header, like
this;
>
>Message-Id: <200205220850921.SM01366@shared1>
>
>Is there something wrong with this Message-Id: header, or is this failing
>for some other reason?

There are a lot of other reasons that the E-mail could fail the SPAMHEADERS 
test (you can use the BADHEADERS Lookup tool at 
http://www.declude.com/tools to find out why).  In this case, it looks like 
the E-mail was indeed sent without a header, but IMail later added it.

>We also get a lot of BADHEADERS failures on email we
>programmatically generate - what typically causes these?

There are quite a few reasons -- but the most common is a non-RFC-compliant 
Date: header.
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: DSN:Re: [Declude.JunkMail] Bounce strategies?

[David Lewis-Waller]

As a matter of reference we're using Rules in Outlook Express 6 and Outlook
2000/2, I can't say what the level of support for rules is in Outlook for
older verions.

David
WiSS Limited

-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]] 
Sent: 20 May 2002 21:02
To: [EMAIL PROTECTED]
Subject: RE: DSN:Re: [Declude.JunkMail] Bounce strategies?



> >That's because Outlook and/or Outlook Express don't have useable 
> >filters.
>
>That's not entirely true. While Outlook doesn't have "built-in" filters 
>to look for "X-RBL-Warning:", it can be configured to look in the 
>headers for this string and be filtered.

By "usable filters", I mean being able to filter on headers (which *any* 
mail client with filters should allow for).  It sounds like there are some 
versions of Outlook and/or Outlook Express that can filter on headers, but 
there are also many that can not.

I don't have a list of which versions do and which do not.  However, I have 
heard from a lot of people (admins) that say that they can't find any way 
for (some versions of) Outlook and/or Outlook Express to filter on headers.

It sounds like Microsoft may not have allowed header filtering in the past, 
but perhaps more recent versions do.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: DSN:Re: [Declude.JunkMail] Bounce strategies?

[David Lewis-Waller]

We use Rules in Outlook and Outlook Express to filter on X-RBL-Warning in
the header, it works well enough, users seem to find it pretty easy to set
up as well. 

David
WiSS Limited

-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]] 
Sent: 20 May 2002 20:20
To: [EMAIL PROTECTED]
Subject: Re: DSN:Re: [Declude.JunkMail] Bounce strategies?



>Maybe I misunderstood your comment but Eudora and Pegasus will filter 
>on an X-Header.

True, but you have to give people special instructions for those mail 
clients ("Go to Tools, then select Filters, click "New Filter", choose 
"Incoming Messages", "Any Header"...).

What they are lacking is a "How do you want to handle spam?  ( ) Deliver 
it, ( ) Delete it, (.) Move to 'spam folder'" option, defaulting to "Move 
to 'spam folder'".  End users wouldn't have to do a thing, and their spam 
would be handled automatically for them.

>Outlook and Outlook Express do not seem to allow for this. At least I 
>have not figured out how to do it.

That's because Outlook and/or Outlook Express don't have useable filters.
:)
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: Re[2]: [Declude.JunkMail] Reverse DNS

[David Lewis-Waller]

Thanks to everyone. I had to reinstall the DNS server to get it working
again, no amount of config changes/restarting would work.

-Original Message-
From: Smart Business Lists [mailto:[EMAIL PROTECTED]] 
Sent: 17 May 2002 15:22
To: David Lewis-Waller
Subject: Re[2]: [Declude.JunkMail] Reverse DNS


David,

Make certain you are offering recursion to your own server.


Terry Fritts

Friday, May 17, 2002 you wrote:

DLW> I does appear that that DNS isn't responding corectly, the other 
DLW> two are - so thanks for the detective work. Now to find out why...

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] Reverse DNS

[David Lewis-Waller]

I does appear that that DNS isn't responding corectly, the other two are -
so thanks for the detective work. Now to find out why...

-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]] 
Sent: 17 May 2002 14:37
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Reverse DNS



>We're not running win2k DNS, we're using Simply DNS. I am puzzled by 
>this as this DNS server is hosting 300-400 domains without any apparent 
>problems. If you run a DNS report agaisnt any of the hosted domains it 
>responds correctly.

The key is realizing that (like an SMTP server), DNS goes two ways.  The 
DNS for those 100's of domains is similar to incoming E-mail:  Anyone can 
look up those DNS entries.  However, what you are trying to do (looking up 
any DNS entry, even if it isn't a local domain) is like relaying mail 
through a server:  In some cases, only certain people are allowed to do it.

Something definitely isn't working correctly, as your DNS server is 
claiming that the DNS entries do not exist (if it was acting properly, 
Declude would see that no access was allowed to the DNS server, and would 
not fail the REVDNS test).  But, that may be a new "security feature" (kind 
of like accepting relayed mail, but then deleting it instead of delivering
it).
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] Reverse DNS

[David Lewis-Waller]

We're not running win2k DNS, we're using Simply DNS. I am puzzled by this as
this DNS server is hosting 300-400 domains without any apparent problems. If
you run a DNS report agaisnt any of the hosted domains it responds
correctly.

-Original Message-
From: Mark Smith [mailto:[EMAIL PROTECTED]] 
Sent: 17 May 2002 14:20
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Reverse DNS


FWIW,
If that server is W2k and DNS was configured without an active Internet
connection, then DNS will not download the root servers and nothing will
work.

You might want to try un-installing the W2k DNS service and re-installing
with an active Internet Connection.

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of R. 
> Scott Perry
> Sent: Friday, May 17, 2002 9:09 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Declude.JunkMail] Reverse DNS
> 
> 
> 
> >Our primary DNS is 213.210.8.110
> 
> That's the problem.  You DNS server is saying that nothing
> exists (reverse 
> DNS lookups, MX record lookups, etc.).  That's a serious 
> problem that needs 
> to be fixed.
>  -Scott
> 
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
> 
> ---
> 
> This E-mail came from the
> Declude.JunkMail mailing list.  To unsubscribe, just send an 
> E-mail to [EMAIL PROTECTED], and type "unsubscribe 
> Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for 
> assistance.  You can visit our web site at http://www.declude.com .
> 

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] Reverse DNS

[David Lewis-Waller]

Scott,

This is also marked as failing REVDNS check 194.82.139.3 but it has a PTR
record

 194.82.139.3 PTR record: mail.stokecoll.ac.uk. [TTL = 270984 seconds]

Our primary DNS is 213.210.8.110

Thanks

David




-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]] 
Sent: 17 May 2002 13:15
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Reverse DNS



>I've just included the reverse DNS test WARN in the $default$.JunkMail 
>file later I received an email from a software vendor that had the X 
>header
>warning:
>
>X-RBL-Warning: REVDNS: This E-mail was sent from a mail server 
>207.33.16.83 with no reverse DNS entry.
>
>When I checked 207.33.16.83 using the Declude web tools I found that it 
>did have a PTR record.
>
>Am I missing something?

It looks like 207.33.16.83 definitely has a correct reverse DNS entry set 
up (sometimes one DNS server will return a response, while another says 
there is no entry).

Is this happening for other IPs, or just this one?  There's always a chance 
that the reverse DNS entry was just added, but that's a long shot.  If it 
is happening with other domains as well, it could be that your DNS server 
is always returning "does not exist" to PTR queries (quite a few DNS 
servers are broken and do this).

If you give me the IP address of your DNS server (the first one listed in 
the IMail SMTP settings, unless you have a "DNS" line in your global.cfg 
file), I can take a look to make sure that it is responding properly.
   -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

[Declude.JunkMail] Reverse DNS

[David Lewis-Waller]

I've just included the reverse DNS test WARN in the $default$.JunkMail file
later I received an email from a software vendor that had the X header
warning:

X-RBL-Warning: REVDNS: This E-mail was sent from a mail server 207.33.16.83
with no reverse DNS entry.

When I checked 207.33.16.83 using the Declude web tools I found that it did
have a PTR record.

Am I missing something?

David 
WiSS Limited
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] Declude in front of exchange servers.

[David Lewis-Waller]

Why not use an SMTP feed? Declude will still scan.

-Original Message-
From: Grant Griffith [mailto:[EMAIL PROTECTED]] 
Sent: 16 May 2002 16:31
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude in front of exchange servers.


We have a client that uses exchange and what we did was setup an nobody
alias that catches all the email, then they pull the information via some
POP3 tool and then Exchange sends the emails to the correct user on its end.
Works really well for them, but I have no idea how they have it setup on the
Exchange end.

Sincerely,
Grant Griffith, Vice President
EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com
877-483-3393

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Mark Smith
Sent: Thursday, May 16, 2002 10:21 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude in front of exchange servers.


We're testing it right now and it works well.

The only problem that I've seen (and this isn't a Junkmail problem) is that
there's no way in Imail to set a max message size for a front end server. On
our Exchange server we set the max message size to 3mb so when the inbound
message hits Imail, it tries to forward to Exchange. Exchange won't let it
in so it sites in the iMail queue and doesn't bounce back to the original
sender.

> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of Johnson, Mike
> Sent: Thursday, May 16, 2002 11:05 AM
> To: [EMAIL PROTECTED]
> Subject: [Declude.JunkMail] Declude in front of exchange servers.
>
>
> Has anyone used declude (with iMail) infront of exchange servers to 
> filter mail? How well does this option work?
>
>
>I~
>I~   II~
>   )_)  )_)  )_)
>)___))___))___)\
>  )))_)\\
>   _III\\\__
>  -\ Venture Computer  /-
>^^^ \ Systems / ^  ^^
>^ ^   ^^^
>     ^^^^^
>
>  Michael Johnson, MCSE
>  (507) 252-5944
>   [EMAIL PROTECTED]
>
>
> ---
> [This E-mail was scanned for viruses by Declude Virus 
> (http://www.declude.com)]
>
> ---
>
> This E-mail came from the
> Declude.JunkMail mailing list.  To unsubscribe, just send an E-mail to 
> [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail".  You 
> can E-mail [EMAIL PROTECTED] for assistance.  You can visit our web 
> site at http://www.declude.com .
>

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] Migrating to new hardware

[David Lewis-Waller]

Why not convert your static IP to virtual by editing the IMail options in
the registry (back up registry and IMail first)and changing DNS for each
domain to a default IP on the old server then when all done move all domains
across to new server? Worked fine for us but took a long time. 

-Original Message-
From: The Park Net [mailto:[EMAIL PROTECTED]] 
Sent: 15 May 2002 14:40
To: Declude. JunkMail@declude. com
Subject: [Declude.JunkMail] Migrating to new hardware


Hi all,

Soon I will be migrating three IMail installations on different servers onto
one new server. Currently, one of the old servers has Declude installed and
this host will be transferred as the primary host so I can retain Declude,
of course. (That's the whole point of this exerciseeveryone wants their
email protected by Declude, so I am dedicating a hot, new machine to
IMail/Declude!)

One issue I foresee is converting many email hosts that use static IPs to
virtual servers. It will be a customer service pain, but I think I can
handle it.

The problem will be I can't afford to transfer ALL the existing static IP
hosts to the new server all at once, converting them to virtual hosts as
they are transferred. I think that would be a nightmare. I'd much prefer to
do them one at a time over several days or weeks. But that would mean having
two installations of Declude running while I've only purchased one.

So, basically, my question is how to transfer an existing IMail/Declude
installation to a new server so Declude is running on BOTH servers until the
migration is complete and I can retire the old server?






---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] F-Prot Updater

[David Lewis-Waller]

'// This file is marked as read only

'// Author: David Lewis-Waller 
'// Date : 6/12/2001

VBS script to automate the updater via Task Scheduler

'// Set the shell object
Set Shell = CreateObject("wscript.shell")

'// Run the F-Prot Updater to update definition files
'// Switch /internet - update from the internet
'// Switch /quit - quit updater after running

Shell.Run "C:\Progra~1\FSI\F-Prot\FP-Updater\Updater.exe /internet /quit"

'// Clean up

Set Shell = Nothing

David
WiSS Limited

-Original Message-
From: Hank Townsend [mailto:[EMAIL PROTECTED]] 
Sent: 09 May 2002 18:22
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] F-Prot Updater


I have F-Prot Updater set to run daily. Everytime it runs, it stays open. I
have to go to the server daily and close it or the next time it's scheduled,
it won't run. Is there a way to schedule the Updater and force it to close
itself when completed?

Thanks.

Hank

---
[This E-mail has been scanned for viruses.]
[MGT of America, Inc.]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] Help required with AV and encrypted email

[David Lewis-Waller]

Scott,

What can I say? All is sunshine and light. A major worry and headache cured
in 20 mins. from across the pond.

You're a veritable genius and the most helpful person I know.

Best regards

David
WiSS Limited



-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]] 
Sent: 02 May 2002 18:45
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Help required with AV and encrypted email



>We're running IMail 7.07 and Declude 1.51 beta with F-Prot, today we 
>discovered that encrypted email sent using ASPEncrypt and ASPEmail 
>through our remote mail server prevents Outlook and Outlook Express 
>from decrypting the encrypted email. The error in Outlook 2002 was 
>"Can't open this item. Your digital ID name can not be found by the 
>underlying security system"

You may need to disable the footers (by removing the FOOTER lines from the 
\IMail\Declude\virus.cfg file).  If the E-mail is sent as a single 
attachment without a message body, the software receiving it may think that 
the footer is supposed to be part of the content of the attachment.

>I have to surmise that the av scan by F-Prot is the possible the cause 
>of the problem but as I need to use encryption and av for our clients 
>I'm in a bit of a catch 22 situation.

F-Prot shouldn't be at fault -- it won't do anything to alter the original 
E-mail.  I'm guessing the footers are getting in the way.
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail scanned for viruses by WiSS using Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

[Declude.JunkMail] Help required with AV and encrypted email

[David Lewis-Waller]

We're running IMail 7.07 and Declude 1.51 beta with F-Prot, today we
discovered that encrypted email sent using ASPEncrypt and ASPEmail through
our remote mail server prevents Outlook and Outlook Express from decrypting
the encrypted email. The error in Outlook 2002 was "Can't open this item.
Your digital ID name can not be found by the underlying security system"

After spending all afternoon concentrating on certificates, ASPEncrypt and
ASPEmail without success (every thing worked locally but not on the live
servers) I turned my attention to our remote mail server as this was the
common denominator, mail sent through our local server arrived and was
decrypted okay. 

I turned off Declude AV for our own domain (so others remained protected)
and lo and behold I could once again decrypt email. Turned Declude back on
and the problem came back with the same error.

I have to surmise that the av scan by F-Prot is the possible the cause of
the problem but as I need to use encryption and av for our clients I'm in a
bit of a catch 22 situation. F-Prot is undated automatically by a VB script
every hour.

If anyone can shed any light on this I would be grateful.

David
WiSS Limited
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

RE: [Declude.JunkMail] NJABL:HELP Declude has stopped working

[David Lewis-Waller]

Terry,

That makes perfect sense. Lesson learned.

Thanks for this.

Best regards

David

-Original Message-
From: Smart Business Lists [mailto:[EMAIL PROTECTED]] 
Sent: 26 April 2002 10:59
To: David Lewis-Waller
Subject: Re: [Declude.JunkMail] NJABL:HELP Declude has stopped working


David,

Your declude code was assigned when you bought the product and is run
against the host name you submitted at that time.  So changing the host name
will invalidate the code.  You can ask Scott for a new code for the new host
name.


Terry Fritts

Friday, April 26, 2002 you wrote:

DLW> I have discovered the problem. A system administrator had changed 
DLW> the host name in IMail to the domain we normally use for email. 
DLW> This change prevented Declude (for what reason I know not) from 
DLW> working. Changing the domain back to it's original cured the 
DLW> problem instantly.

DLW> If anyone has a handle on why this would happen I would be grateful 
DLW> for the info.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  You can E-mail [EMAIL PROTECTED] for assistance.  You
can visit our web site at http://www.declude.com .
---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

[Declude.JunkMail] NJABL:HELP Declude has stopped working

[David Lewis-Waller]

I have discovered the problem. A system administrator had changed the
host name in IMail to the domain we normally use for email. This change
prevented Declude (for what reason I know not) from working. Changing
the domain back to it's original cured the problem instantly.

If anyone has a handle on why this would happen I would be grateful for
the info.

Best regards,

David Lewis-Waller
Technical/Managing Director

WiSS Ltd
Intec
Ffordd y Parc
Parc Menai
BANGOR
Gwynedd, LL57 4FG 

0870 4329477 (general enquiries)
0870 4329478 (support desk)
0870 4329479 (fax) 

http://wiss.co.uk - Design
http://wisshost.com - Hosting, email and domain services

==
A Welsh Company Serving Business Worldwide
==


---
This email has been scanned for viruses
by the WiSS mail server. 

See http://wisshost.com for further
information.
---

WEB design : WEB development : WEB hosting

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

[Declude.JunkMail] NJABL:HELP Declude has stopped working

[David Lewis-Waller]

I just discovered that Declude Virus and Junk has stopped working. I
think it was after upgrading to Imail 7.07 but not sure. F-Prot is
installed and appears to be working but it seems declude.exe is not
being executed -no AV protection and no Spam detection. I've tried v1.49
and 1.49 beta but nothing in Declude works anymore.

Any help GREATLY appreciated

David
WiSS Limited

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .