Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters
Could you post your config since the Declude page uses clamscan. What is the difference. Jeff TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] Nick Hayer wrote: Hi Gary, Gary Steiner wrote: I've never run ClamAV before. Looking at www.clamav.net, I see there are several Windows ports for it. Is anyone using one of the various Windows ports for ClamAV under W2K3? If so, which one is best? no idea! But the one I use is http://www.sosdg.org/clamav-win32/ and it seems to be fine; I also use clamd instead of clamscan. [which is included] -Nick Thanks, Gary Steiner Original Message From: "Bill Landry" <[EMAIL PROTECTED]> Sent: Wednesday, February 22, 2006 12:46 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters BTW, if you are running ClamAV, and want to take full advantage of it's phish catching capabilities, you might was to take a look at adding the phish signature file that Steve Basford put together (see the attached e-mail for details). I have been running them for a few weeks, and they are quite awesome. Steve periodically updates the phish signatures, as well, so check regularly for an updated file. Bill - Original Message - From: "Scott Fisher" <[EMAIL PROTECTED]> To: Sent: Tuesday, February 21, 2006 10:14 AM Subject: Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters Aaarrgg. Good catch Bill. - Original Message - From: "Bill Landry" <[EMAIL PROTECTED]> To: Sent: Tuesday, February 21, 2006 12:03 PM Subject: Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters - Original Message - From: "Scott Fisher" <[EMAIL PROTECTED]> You do need the Pro version to run more than one scanner. It's the best thing about Virus Pro... Also nice if you get a set of bad definitions or a scanner stops working, the other scanners will cover. With PRESCAN ON, Mcafee Virusscan catches some phish. Clamav catches most phish. Actually, you would need to have "PRESCAN OFF" in order to catch most phish e-mails with Declude. Otherwise, Declude Virus PRESCANs all messages and finds that most phish messages contain nothing worth scanning and thus bypasses the virus scanners. Bill --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Spam leak?
Yes I recived it also. Jeff Kratka On 1/13/2006, "Dave Doherty" <[EMAIL PROTECTED]> wrote: >Ummm... Did anybody else get a piece of spam this morning with subject >SPAMSPCE: that seems to have been relayed through Declude.com? > >-Dave Doherty > Skywaves, Inc. > > >--- >[This E-mail was scanned for viruses by Declude EVA www.declude.com] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Alive?
Hi, Was just wondering if the list is up. I had a power outage last night and everything seems to me working. Just checking Jeff Kratka -- TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: IMail vs. Merak
I'm not sure. The easiest thing to do would be to go to the site and ask in the forum. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Don Brown Sent: Wednesday, December 28, 2005 3:04 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] OT: IMail vs. Merak Does it support port 587 for authentication? Wednesday, December 28, 2005, 1:44:10 PM, Jeff Kratka <[EMAIL PROTECTED]> wrote: JK> Not to get anyone bent at all but I have a second mail server running that JK> is hMailServer www.hmailserver.com. It is open source for Windows and has JK> been very stable. Very good support from it's forums. I am working to a few JK> things to get my Declude system to work with it properly. Presently have JK> ASSP (it's like Spam Assassin but easier to setup) but would really like to JK> get my Declude set-up working with it. JK> Just a suggestion. JK> Jeff Kratka JK> JK> TymeWyse Internet JK> P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 JK> tel: (541) 643-2023 - [EMAIL PROTECTED] JK> JK> -Original Message- JK> From: [EMAIL PROTECTED] JK> [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser JK> Sent: Wednesday, December 28, 2005 7:35 AM JK> To: DECLUDE.JUNKMAIL@DECLUDE.COM JK> Subject: [Declude.JunkMail] OT: IMail vs. Merak JK> Hello, All, JK> We are re-architecting our e-mail hosting and are going to be upgrading from JK> IMail 6.06 to a new e-mail platform. We are familiar with IMail can do so JK> we are currently evaluating Merak e-mail server to see what else is out JK> there. Has anyone on this list done a similiar evaluation between IMail and JK> Merak? If so, did you find any clear benefits that IMail had over Merak or JK> vice versa? JK> We already know that Merak is going to be a more expensive upgrade then JK> IMail. And obviously the current version of Declude doesn't support Merak. JK> Anything else that made the decision to stay with IMail easier for you? JK> Thanks In Advance, JK> Dan Geiser JK> [EMAIL PROTECTED] JK> --- JK> E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) JK> --- JK> [This E-mail was scanned for viruses by Declude EVA www.declude.com] JK> --- JK> This E-mail came from the Declude.JunkMail mailing list. To JK> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JK> type "unsubscribe Declude.JunkMail". The archives can be found JK> at http://www.mail-archive.com. JK> --- JK> [This E-mail was scanned for viruses by Declude EVA www.declude.com] JK> --- JK> This E-mail came from the Declude.JunkMail mailing list. To JK> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JK> type "unsubscribe Declude.JunkMail". The archives can be found JK> at http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: IMail vs. Merak
Not to get anyone bent at all but I have a second mail server running that is hMailServer www.hmailserver.com. It is open source for Windows and has been very stable. Very good support from it's forums. I am working to a few things to get my Declude system to work with it properly. Presently have ASSP (it's like Spam Assassin but easier to setup) but would really like to get my Declude set-up working with it. Just a suggestion. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser Sent: Wednesday, December 28, 2005 7:35 AM To: DECLUDE.JUNKMAIL@DECLUDE.COM Subject: [Declude.JunkMail] OT: IMail vs. Merak Hello, All, We are re-architecting our e-mail hosting and are going to be upgrading from IMail 6.06 to a new e-mail platform. We are familiar with IMail can do so we are currently evaluating Merak e-mail server to see what else is out there. Has anyone on this list done a similiar evaluation between IMail and Merak? If so, did you find any clear benefits that IMail had over Merak or vice versa? We already know that Merak is going to be a more expensive upgrade then IMail. And obviously the current version of Declude doesn't support Merak. Anything else that made the decision to stay with IMail easier for you? Thanks In Advance, Dan Geiser [EMAIL PROTECTED] --- E-mail scanned for viruses by Nexus (http://www.ntgrp.com/mailscan) --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Diag issue
I have been attempting to run the diag for declude but every time I do I received the following message C:\IMail>decludeproc -diag Invalid command line parameter: -install Install Declude -diagPrint diagnostics What am I doing wrong. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] update to Declude 3.0.5.5
Thanks all. I must have missed that post. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John T (Lists) Sent: Wednesday, October 19, 2005 5:03 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] update to Declude 3.0.5.5 Hijack is working fine, what is not in use is the Declude Console, which as Randy posted is going to be reworked into a new version soon. John T eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster > Sent: Wednesday, October 19, 2005 1:31 PM > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] update to Declude 3.0.5.5 > > Barry has reported that Deccon is being re-done and will be released later. > > > Sincerely, > > Randy Armbrecht > Global Web Solutions, Inc. > 804-346-5300 x112 > 877-800-GLOBAL (4562) x112 > http://globalweb.net > > Richmond's Internet Source since 1996! > WEB HOSTING including EMAIL beginning at $29/month! > DSL Starting at $39.95/month! > Non-Profits - receive a 25% discount on most services! > > "Global Web Solutions" is a registered trademark of Global Web Solutions, > Inc., Glen Allen, VA > > -----Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Kratka > Sent: Wednesday, October 19, 2005 4:06 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] update to Declude 3.0.5.5 > > I just updated to Declude 3.0.5.5 and was wondering about a something's. > Decon will not work anymore. Is there a new version for the updated version > of Declude. I do have Hijack, AV and Junkmail and the consol is very useful. > > Jeff Kratka > > TymeWyse Internet > P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 > tel: (541) 643-2023 - [EMAIL PROTECTED] > > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] update to Declude 3.0.5.5
I just updated to Declude 3.0.5.5 and was wondering about a something's. Decon will not work anymore. Is there a new version for the updated version of Declude. I do have Hijack, AV and Junkmail and the consol is very useful. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 643-2023 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How they deal w/ Spammers in Russia
Oops,. bummer. Sucks to be him Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kim Premuda Sent: Monday, July 25, 2005 5:36 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] How they deal w/ Spammers in Russia http://www.mosnews.com/news/2005/07/25/spammerdead.shtml -- Kim W. Premuda FastWave Internet Services San Diego, CA -- --- [This E-mail scanned for viruses by Declude Virus] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
That's what I thought. Sandy, are you still here? Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Friday, June 03, 2005 2:58 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude AH, User configurable actions is different. I know at one time at least Sandy had either a Demo or production running for a client. John T eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Jeff Kratka > Sent: Friday, June 03, 2005 2:38 PM > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] Admin Web for Declude > > Mostly what I remember from some time ago was something to let the end user > modify their settings. Sorry "Admin Web" was the incorrect wording. > > Jeff Kratka > > TymeWyse Internet > P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 > tel: (541) 839-6027 - [EMAIL PROTECTED] > > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler > Sent: Friday, June 03, 2005 2:26 PM > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] Admin Web for Declude > > > > > Quite some time ago, there was mention about an Admin Web > > for Declude, is this available or does anyone have something to share? > > Declude is so flexible and can do so much different things that it would be > nearly impossible to write a "click&play"-frontend. There was already a > discussion. The question is: Do you want as much a possible functions to > manage your email traffic with the drawback that you must know exactly what > you need and what you're doing or do you want some less functions but this > as easy as installing windows? > > Also what do you mean by "admin web"? Something that will write your > configuration file and prevent wrong settings from your side (what's > "wrong"?) or do you need something to let end-users choose different > settings for their own mailbox? > > Markus > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Admin Web for Declude
Mostly what I remember from some time ago was something to let the end user modify their settings. Sorry "Admin Web" was the incorrect wording. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler Sent: Friday, June 03, 2005 2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Admin Web for Declude > Quite some time ago, there was mention about an Admin Web > for Declude, is this available or does anyone have something to share? Declude is so flexible and can do so much different things that it would be nearly impossible to write a "click&play"-frontend. There was already a discussion. The question is: Do you want as much a possible functions to manage your email traffic with the drawback that you must know exactly what you need and what you're doing or do you want some less functions but this as easy as installing windows? Also what do you mean by "admin web"? Something that will write your configuration file and prevent wrong settings from your side (what's "wrong"?) or do you need something to let end-users choose different settings for their own mailbox? Markus --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Admin Web for Declude
Hello, Quite some time ago, there was mention about an Admin Web for Declude, is this available or does anyone have something to share? Thank You. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel: (541) 839-6027 - [EMAIL PROTECTED] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSReport and DNSStuff websites
I can say for a fact that the MRE's are better than Spam John... :) Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Tuesday, February 22, 2005 10:36 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] DNSReport and DNSStuff websites Not sure about that Andy, I have heard MREs are better than Spam. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > Sent: Tuesday, February 22, 2005 10:23 AM > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] DNSReport and DNSStuff websites > > Scott: > > Thank you for your capable and prompt support throughout those years. You > will be missed. > > Best of luck in your new endeavors. > > PS: Sounds as if you'll have to adjust your thinking: Now the delivery of > Spam may actually be a good deed . > > Best Regards > Andy > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Problem with subject line in version 2.0
I had the same problem today while installing v2.0. All Declude functions stopped. I called them and went back to the old version and everything works perfect, just like before. I'm glad to see it wasn't just me. Jeff Kratka -- Original Message -- From: "John Tolmachoff \(Lists\)" <[EMAIL PROTECTED]> Reply-To: Declude.JunkMail@declude.com Date: Tue, 1 Feb 2005 17:58:06 -0800 >The latest version does not work at all, nothing, zilch, zippo. > >This is a disgrace. > >Downloaded and copied into the imail directory and ran "declude -diag" and >all I got was the declude version line and then a line saying Imail >configuration then several seconds and then back to a prompt. > >No output what so ever. > >Nothing in the logs at all. > >FIX THIS NOW! > >John Tolmachoff >Engineer/Consultant/Owner >eServices For You > > >> -Original Message- >> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- >> [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] >> Sent: Tuesday, February 01, 2005 10:21 AM >> To: Declude.JunkMail@declude.com >> Subject: RE: [Declude.JunkMail] Problem with subject line in version 2.0 >> >> The fix is in the current 2.0 download from the web site. >> >> Barry Simpson >> www.declude.com >> >> >> -Original Message- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff >> (Lists) >> Sent: Tuesday, February 01, 2005 11:33 AM >> To: Declude.JunkMail@declude.com >> Subject: RE: [Declude.JunkMail] Problem with subject line in version 2.0 >> >> And the fix will be when and in what form? >> >> John Tolmachoff >> Engineer/Consultant/Owner >> eServices For You >> >> > -Original Message- >> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- >> > [EMAIL PROTECTED] On Behalf Of R. Scott Perry >> > Sent: Tuesday, February 01, 2005 4:31 AM >> > To: Declude.JunkMail@declude.com >> > Subject: Re: [Declude.JunkMail] Problem with subject line in version 2.0 >> > >> > >> > >There appears to be a problem in version 2.0 where Declude is seeing >the >> > >first character after the word subject as the start of the subject >line. >> The >> > >first character is a colon and followed by a space and then the actual >> > >subject line. >> > >> > You are correct. I'm surprised this didn't get caught during the beta. >> > >> > -Scott >> > --- >> > Declude JunkMail: The advanced anti-spam solution for IMail mailservers >> > since 2000. >> > Declude Virus: Ultra reliable virus detection and the leader in >mailserver >> > vulnerability detection. >> > Find out what you've been missing: Ask for a free 30-day evaluation. >> > >> > --- >> > [This E-mail was scanned for viruses by Declude Virus >> (http://www.declude.com)] >> > >> > --- >> > This E-mail came from the Declude.JunkMail mailing list. To >> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> > type "unsubscribe Declude.JunkMail". The archives can be found >> > at http://www.mail-archive.com. >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". The archives can be found >> at http://www.mail-archive.com. >> >> >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". The archives can be found >> at http://www.mail-archive.com. > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > -- ** TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Outgoing mail
To prevent Declude JM from scanning outbound mail I know I can whitelist IP ranges. Can they be anywhere in the global.cfg or do they need to be at the top. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Off-Topic
Now that is just plain WRONG !! Now I can't stand Mushrooms and Badgers... !!! Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Pete McNeil Sent: Wednesday, November 24, 2004 1:52 PM To: Sean Fahey Subject: Re: [Declude.JunkMail] Off-Topic On Wednesday, November 24, 2004, 3:16:42 PM, Sean wrote: SF> Speaking of SpamReview... SF> I was scanning spam this afternoon, when I saw a message with the subject SF> "Whip It!" (for a porn site), then immediately after it was "It's not too SF> late..." - a mortgage company offer from a completely different spammer. SF> Now I've got that %&*# Devo song in my head and it won't go away. This will take care of that: <http://www.ebaumsworld.com/badgers.html> _M --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] habeas
Has anyone had better luck with habeas lately. I turned things off since the spammers jumped on. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Copy To
I would like to monitor both incoming and outgoing mail from 1 particular e-mail address on my domain. What would be the easiest/simplest way of doing it without the persons knowledge. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities
Here you go... http://www.kiwisyslog.com/ Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Maze Sent: Friday, July 16, 2004 11:27 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities Hmmm.. Have a link for Kiwi? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Friday, July 16, 2004 2:16 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities I'm still running v6.06 (mostly due to cost). One thing I found was moving the spool directory to a completely different location and using Kiwi for my syslog it helped alot. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jose Gosende Sent: Friday, July 16, 2004 6:57 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities Does anyone know of any vulnerabilities in iMail 6.06? Within a minute after turning on iMail's SMTP service my server becomes completely unresponsive and eventually goes down. I've also installed all of the 6.06 related patches from Ipswitch's site. Jose --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities
I'm still running v6.06 (mostly due to cost). One thing I found was moving the spool directory to a completely different location and using Kiwi for my syslog it helped alot. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jose Gosende Sent: Friday, July 16, 2004 6:57 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: iMail 6.06 vulnerabilities Does anyone know of any vulnerabilities in iMail 6.06? Within a minute after turning on iMail's SMTP service my server becomes completely unresponsive and eventually goes down. I've also installed all of the 6.06 related patches from Ipswitch's site. Jose --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.721 / Virus Database: 477 - Release Date: 7/16/2004 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude is now gone.
Yep, all of the files in the Declude directory were gone. I was able to restore them from a back-up so it seems to work now. Sorry that I jumped the gun, but that was just to weird. It's been mostly that type of day. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Thursday, June 10, 2004 12:49 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude is now gone. >I just moved my Imail spool directory to a different drive (which did help >with performance) and now everything in my Declude directory is gone. I did >not remove anything from there. What did I do wrong. That is odd. Are you saying that the \IMail\Declude\ directory no longer has any files in it? Declude certainly will not delete them (nor should anything else, unless of course you instruct it to). Does the \IMail\Declude\ directory still exist? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude is now gone.
I just moved my Imail spool directory to a different drive (which did help with performance) and now everything in my Declude directory is gone. I did not remove anything from there. What did I do wrong. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DNSstuff Website
Vacation? What's that Same here Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Robertson Sent: Thursday, May 20, 2004 1:29 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] DNSstuff Website >My plan B in those situations is another tech who's still on site :) want a new job? (just kidding :) I'm a 1-man shop. Works great so long as you never take a vacation or get hit by a bus. -- --- Matt Robertson, [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT - decon
Scott, I terminal serve into my Imail box often and was wondering if it is possible to run the Declude Consol from Term Serve. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Test
Yep same here. It's a never ending battle. Jeff Kratka -- Original Message -- From: "Jeff Maze - Hostmaster" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Sun, 11 Apr 2004 10:39:20 -0400 >Ok.. Got it back.. I guess just not a lot going on.. > >But have noticed an INFLUX of spam messages lately.. A lot not being caught >by the filters but also a lot being caught.. > >-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Jeff Maze - >Hostmaster >Sent: Sunday, April 11, 2004 10:32 AM >To: [EMAIL PROTECTED] >Subject: [Declude.JunkMail] Test > >Haven't received messages from here nor Declude.Virus since Friday.. Just >doing a test.. > > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, >just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe >Declude.JunkMail". The archives can be found at >http://www.mail-archive.com. > > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > -- ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Habeas Porn
That's why I stopped using it. To much junk coming in with the Habeas headers that were spam. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser Sent: Friday, February 27, 2004 12:46 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Habeas Porn Has anybody seen the crazy amount of porn spam being sent with the Habeas headers? --- Sign up for virus-free and spam-free e-mail with Nexus Technology Group http://www.nexustechgroup.com/mailscan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] TCP/UDP ports
I know I have missed something here but I'll ask, I'm still new at this one. I have been shutting down ports on my mail server leaving open only the ones needed. I leave 53 open for DNS but when I do Declude does not do any of the DNS based tests. I turn off the port filtering and it works. Any suggestions? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spammer on board
Hello all, I have an issue I have been dealing with and was wondering how others would approach it. I have a spammer on my system and am 99% sure who it is. Thanks to Scott and the wonderful tools he has supplied us with (Junkmail, Virus and Hijack) I have been able to trap the spam and log everything. I have only had to do this once before about 3 years ago which I just removed the person from the system. Now with the amount of spam that has been attempted to be sent out and trapped the person is being removed but should the authorities be contacted as well. Will anything actually be done to the spammer? Just wondering. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Help with a Spammer
Thank you, I just installed Declude Hijack and it is helping already. Being that it is showing the IP address of the outgoing mail and the amount I can check into this more. I think it will help me with this issue. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matt Sent: Wednesday, February 18, 2004 11:36 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Help with a Spammer Jeff, If you ran a log analyzer on your IMail logs and checked for high utilization senders, that might to it, or maybe grep if you have a knack for that. I would think that chances are that this person merely has a virus infected computer that is being hijacked, though you need to provide more detail about the situation probably in order to get a better response. FYI, here's what SenderBase is showing for your class C: http://www.senderbase.org/search?searchString=205.243.160.7&whichOthers=%2F2 4 Matt Jeff Kratka wrote: I have a question about Declude Hijack. I was wondering if Hijack will help me track this person down with IP addresses and logs. It looks like they are either spoofing an address since I can't see the IP addresses in the radius or I'm completely brain dead. This is the first spammer I have had to track down on my system so I am very new at it. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Kratka Sent: Wednesday, February 18, 2004 10:00 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Help with a Spammer No I have Imail 6.06 (Yeah I know..) Declude Junk Mail and Virus. I have been thinking about Hijack but right now funds are thin. I'm mostly trying to track them down. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, February 18, 2004 9:46 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Help with a Spammer Are you using Declude Hijack? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Jeff Kratka Sent: Wednesday, February 18, 2004 9:38 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Help with a Spammer Sorry for my ignorance on this but it's driving me nuts. It appears I have a spammer on my system. It is coming from one of my dialup customers. I have started to look into IP addresses for the mail and radius but would like to be alittle more sure. Does anyone have any good ideas to track someone down? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
RE: [Declude.JunkMail] Help with a Spammer
I have a question about Declude Hijack. I was wondering if Hijack will help me track this person down with IP addresses and logs. It looks like they are either spoofing an address since I can't see the IP addresses in the radius or I'm completely brain dead. This is the first spammer I have had to track down on my system so I am very new at it. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Kratka Sent: Wednesday, February 18, 2004 10:00 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Help with a Spammer No I have Imail 6.06 (Yeah I know..) Declude Junk Mail and Virus. I have been thinking about Hijack but right now funds are thin. I'm mostly trying to track them down. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, February 18, 2004 9:46 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Help with a Spammer Are you using Declude Hijack? John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Jeff Kratka > Sent: Wednesday, February 18, 2004 9:38 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Help with a Spammer > > Sorry for my ignorance on this but it's driving me nuts. It appears I have > a > spammer on my system. It is coming from one of my dialup customers. I have > started to look into IP addresses for the mail and radius but would like > to > be alittle more sure. Does anyone have any good ideas to track someone > down? > > > Jeff Kratka > * > TymeWyse Internet > P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 > tel/fax: (541) 839-6027 - [EMAIL PROTECTED] > * > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Help with a Spammer
No I have Imail 6.06 (Yeah I know..) Declude Junk Mail and Virus. I have been thinking about Hijack but right now funds are thin. I'm mostly trying to track them down. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, February 18, 2004 9:46 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Help with a Spammer Are you using Declude Hijack? John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Jeff Kratka > Sent: Wednesday, February 18, 2004 9:38 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Help with a Spammer > > Sorry for my ignorance on this but it's driving me nuts. It appears I have > a > spammer on my system. It is coming from one of my dialup customers. I have > started to look into IP addresses for the mail and radius but would like > to > be alittle more sure. Does anyone have any good ideas to track someone > down? > > > Jeff Kratka > * > TymeWyse Internet > P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 > tel/fax: (541) 839-6027 - [EMAIL PROTECTED] > * > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Help with a Spammer
Sorry for my ignorance on this but it's driving me nuts. It appears I have a spammer on my system. It is coming from one of my dialup customers. I have started to look into IP addresses for the mail and radius but would like to be alittle more sure. Does anyone have any good ideas to track someone down? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How do they do it?
Are there others suggestion for firewall software for the server. Does Zonealarm have a server version and if so does it work as well as Black Ice. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] How do they do it?
For a firewall, would the regular version of Blackice work ok or is the Server version needed. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * One product that people have talked highly of has been Blackice for blocking dictionary attacks. Regards, Kami --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Mydoom.b
When I have gone and checked my F-Prot to see if the most recent version of "Mydoom" is covered with the most recent virus definitions it only shows Mydoom.a in the virus list. Is there another way to find out if the definitions are fully up to date? I have the DOS version and it is update every couple of hours. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Junk Mail Stats
Pardon my ignorance but what are people using to get the stats from junk mail? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * HABEAS..50.04% HIL...1961.57% 5 messages with HABEAS headers - but 195 mails that failed HABEAS' infringer list. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Happy Holidays
I would like to wish everyone a Safe and Happy Holiday. EVERYONE that has helped over the past year (and I've needed it) a big THANK YOU. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Public DJM Config Files
I would also be interested in this. Is it possible to get these? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Burzin Sumariwalla Sent: Thursday, December 18, 2003 10:12 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Public DJM Config Files I don't mind doing so, but I don't want to clog the list with config files. I have sent them off list upon request. Burzin At 05:44 PM 12/17/2003, you wrote: >Hello, All, >Is there anyone on this list besides Kami who makes their Declude JunkMail >files publically viewable as he does? > >Just curious. I'm always looking for new ideas. > >Thanks, Much! >Dan Geiser <[EMAIL PROTECTED]> > >--- >Sign up for virus-free and spam-free e-mail with Nexus Technology Group >http://www.nexustechgroup.com/mailscan > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. >--- >[This E-mail scanned for viruses by Declude Virus] -- Burzin Sumariwalla Phone: (314) 994-9411 x291 [EMAIL PROTECTED] Fax: (314) 997-7615 Pager: (314) 407-3345 Networking and Telecommunications Manager Information Technology Services St. Louis County Library District 1640 S. Lindbergh Blvd. St. Louis, MO 63131 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELP PLEASE !
Hi John, Everything started when I was receiving SMTP errors and it kepy going down. I did see ALOT of spam going thru and I was updating the RAM anyways. When the server was shut down it wouldn't come back up. I set up my backup server. No there are not any there. I have noticed on this machine (it's an older machine) that if I turn off junkmail things seem to work better. I have a "DECLUDE" text file but it is just showing where the virus scanner pops up a couple of errors (mostly errors creating or opening files) . Hopefully On Friday I will be able to rebuild the broken machine and see if things work better. * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Wednesday, November 26, 2003 10:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] HELP PLEASE ! Hello Jeff. What exactly is happening? Any C:\Declude.GPx files? John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Jeff Kratka > Sent: Wednesday, November 26, 2003 9:10 PM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] HELP PLEASE ! > > Today my mail server crashed and I have been trying to get things back up > and running. I have Imail v6.06 with Declude 1.75. When I run the > smtp32.exe > it seems to be passing mail. When I have it call declude.exe it fails. > > Any ideas.. > > > Jeff Kratka > * > TymeWyse Internet > P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 > tel/fax: (541) 839-6027 - [EMAIL PROTECTED] > * > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] HELP PLEASE !
Upon further work I have shut down Junkmail and have virus running and things seems to be going ok. Any suggestion why junkmail stopped? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Kratka Sent: Wednesday, November 26, 2003 9:10 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] HELP PLEASE ! Today my mail server crashed and I have been trying to get things back up and running. I have Imail v6.06 with Declude 1.75. When I run the smtp32.exe it seems to be passing mail. When I have it call declude.exe it fails. Any ideas.. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] HELP PLEASE !
Today my mail server crashed and I have been trying to get things back up and running. I have Imail v6.06 with Declude 1.75. When I run the smtp32.exe it seems to be passing mail. When I have it call declude.exe it fails. Any ideas.. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spammer wanting servers?
I received this over the weekend and thought others may be interested. This guy wants to get servers so he can spam.. Below is the headers and the message. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * Received: from blackadder.aqhostdns.com [63.247.129.138] by mail.tymewyse.com with ESMTP (SMTPD32-6.06) id AF471FB6010E; Sun, 09 Nov 2003 22:25:11 -0800 Received: from jimer013 by blackadder.aqhostdns.com with local (Exim 4.24) id 1AJ5Rb-qo-A9 for [EMAIL PROTECTED]; Mon, 10 Nov 2003 01:22:35 -0500 To: [EMAIL PROTECTED] From: [EMAIL PROTECTED] Subject: Dedicated Servers Needed Message-Id: <[EMAIL PROTECTED]> Date: Mon, 10 Nov 2003 01:22:35 -0500 X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - blackadder.aqhostdns.com X-AntiAbuse: Original Domain - tymewyse.com X-AntiAbuse: Originator/Caller UID/GID - [32157 32157] / [47 12] X-AntiAbuse: Sender Address Domain - blackadder.aqhostdns.com X-RBL-Warning: SPAMCHK: Message failed SPAMCHK: 15. X-RBL-Warning: This E-mail failed the following tests: IPNOTINMX, NOLEGITCONTENT, SPAMCHK, WEIGHT15. X-Declude-Sender: [EMAIL PROTECTED] [63.247.129.138] X-Note: This E-mail was scanned for spam by TymeWyse Internet. X-Note: This E-mail was scanned for viruses by TymeWyse Internet. X-Note: This E-mail failed the following tests: IPNOTINMX, NOLEGITCONTENT, SPAMCHK, WEIGHT15. Hello, I need 2 dedicated windows 2000 servers with at least 2,000 ip addresses. These servers will be used to run my email campaign and send bulk email in direct mode with my own optin mailing software. If you are in a position, and have a dedicated network setup to deal with the complaints generated from my email advertising I would be willing to pay $2,000 a month for the 2 servers. I need a reliable provider to set me up immediately. If you can offer me such service please call me at: 1617-901-4129, Leave me a message and I will get back to you right away. Please dont reply back to this email, only call me. Thanks Bob --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] BYPASSWHITELIST
Thank you. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Friday, October 24, 2003 4:07 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] BYPASSWHITELIST >To ad the BYPASSWHITELIST option, would it be added to the global config in >this format: > >BYPASSWHITELIST bypasswhitelisting 30 0 0 0 It should actually be without the "ing": BYPASSWHITELIST bypasswhitelist 30 0 0 0 That would bypass the whitelisting if the weight is 30 or higher, and there are 0 or more recipients. You could instead use something like: BYPASSWHITELIST bypasswhitelist 30 10 0 0 which would be useful if some people have whitelisting, but others are getting spam as a result. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] BYPASSWHITELIST
To ad the BYPASSWHITELIST option, would it be added to the global config in this format: BYPASSWHITELIST bypasswhitelisting 30 0 0 0 Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Off topic .. maybe
I received this message from my feedback form on my web server last night which I thought was interesting. Seems that these guys will try all area to get someone to help pay for their country. *** MessageType: Suggestion Subject: Products SubjectOther: Username: Mr. Uwaifo Ogbebor UserEmail:[EMAIL PROTECTED] UserTel: 234-1-8043993 UserFAX: 17758714803 ContactRequested: ContactRequested Remote Name: 195.166.237.40 Remote User: HTTP User Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) Date: Thursday, October 23, 2003 Time: 04:52:39 AM Comments: Dear Sir, We are interested in entering into a long term business , relationship with your organization in terms of acting as your exclusive representative in the entire African continent. We are a Trading House with a high network of marketers within Africa. If this interests you, please reply promptly for further discussions to follow on terms and modalities. Hoping to hear from your promptly Yours faithfully, Mr. Uwaifo Ogbebor, Marketing Executive, E. O. B. Omo-Ogboi Investments International Ltd., 129, Okota Road, Block E, Suite 1, Okota-Isolo, Lagos, Nigeria. Tel: 234-1-8043993, 234-8042116061. Website: http://eoboi.itgo.com, http://owg.itgo.com E-mail: [EMAIL PROTECTED] Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelists
I know this has been brought up before but I have been having some problems with Whitelists. I have a test "white_to" which has a list of the users that want to be whitelisted. When some spam comes in and it happens to be addressed to one of these people in the list the spam will go thru and pass all of the test to all of the reciepients. A while ago someone mentioned using a blank config file for each user which will do the same thing as the whitelist "list" I have. Which would be best way to help prevent the spam from being distributed to all of it's receipients. Jeff * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] What's wrong with SpamCop?
Over the last couple of weeks I have gotten a couple of messages from Spamcop about problems. Looking at logs and some other things nothing went out from my IP range. I will probably drop the weight on Spamcop for a while until things settle down. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Matthew Bramble Sent: Wednesday, September 24, 2003 8:12 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] What's wrong with SpamCop? Is it me, or did SpamCop suddenly become awful when it comes to false positives with almost anything that is sent in bulk? I've recently seen them tag PayPal, ActivePDF newsletters, Match.com and even the local chamber of commerce (which only sends to members w/opt-out). If they ever start crossing FP's with MailPolice, two very important RBL's will suddenly become greatly diminished in value on my server. So the question is, does SpamCop care about this problem? Are they going to make fundamental changes in how they determine what to block based on their clearly impure input? Anyone have a scoop? Matt --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] www.declude.com down????
No problems here.. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kevin Bilbee Sent: Friday, September 19, 2003 2:34 PM To: JunkMail Declude Subject: [Declude.JunkMail] www.declude.com down I am trying to get to the manual. Is the declude website down? Kevin Bilbee Network Administrator Standard Abrasives, Inc. [EMAIL PROTECTED] (805) 520-5800 x7332 Changing the way industry works. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelisting
Scott, It was also mentioned to a blank user file with the per user config which would allow all tests to pass. Would this work also? I just wanted more options. The negative weight works. Jeff Kratka -- ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Whitelisting
Thanks I'll try this out. Jeff Kratka -- Original Message -- From: "DLAnalyzer Support" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Sat, 13 Sep 2003 22:41:45 -0400 >Jeff, > >This is similar to the issue of whitelisting the postmaster account. >Spammer's got hip to the fact that most people whitelist the postmaster >account and would include as a recipient for the spam the postmaster. > >We were getting burned by this due to the high amount of porn spam that was >dwindling in using this techinique. > >What we did to prevent this and the solution would be valid in your case is >to do the following > >(1) Setup the following test >POSTMASTER filter x:\IMail\Declude\postmaster.txt x -100 0 > >**Make sure to give it a high enough reverse weight so that no matter how >many tests it failed the reverse weight will counter that and ensure >delivery. > >(2) In the filter test file use the ALLRECIPS filter >ALLRECIPS 0 CONTAINS [EMAIL PROTECTED] > >What this will do is the following. >(1) The email will still be delivered to the user, due to the high amount of >reverse weight >(2) The message will be blocked to the other recipients, because it will >still be weighted like any other message. > >Darrell >Invariant Systems >http://www.dlanalyzer.com > > >Rich writes: > >> At 04:10 PM 9/13/2003, Jeff Kratka wrote: >>> I have a couple of customers that want to be whitelisted completely so I >>> added "WHITELIST TO [EMAIL PROTECTED]" to the global config. The only thing >>> is >>> that I have found out that if spam is sent to multiple recipients and >>> this >>> person is listed it is allowed to come to everyone on the list since the >>> one >>> person is whitelisted. >> >> We've been just giving them a blank .junkmail file, it seems to let >> everything through, and not whitelist mail sent to multiple recipients. >> >>> Am I doing something wrong or is there a way to prevent this. >>> >>> Jeff Kratka >>> * >>> TymeWyse Internet >>> P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 >>> tel/fax: (541) 839-6027 - [EMAIL PROTECTED] >>> * >>> >>> --- >>> [This E-mail was scanned for viruses by Declude Virus >>> (http://www.declude.com)] >>> >>> --- >>> This E-mail came from the Declude.JunkMail mailing list. To >>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >>> type "unsubscribe Declude.JunkMail". The archives can be found >>> at http://www.mail-archive.com. >> >> -- >> Rich Griebel >> [EMAIL PROTECTED] >> http://www.kendra.com >> Scanned for Viruses using Declude and F-Prot >> >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". The archives can be found >> at http://www.mail-archive.com. > > > > >DLAnalyzer a comprehensive reporting tool for >Declude Junkmail Logs - http://www.dlanalyzer.com > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > -- ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelisting
I have a couple of customers that want to be whitelisted completely so I added "WHITELIST TO [EMAIL PROTECTED]" to the global config. The only thing is that I have found out that if spam is sent to multiple recipients and this person is listed it is allowed to come to everyone on the list since the one person is whitelisted. Am I doing something wrong or is there a way to prevent this. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] tailing a log file
www.wintail.com Jeff Kratka * TymeWyse Internet P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Darryl Koster Sent: Saturday, September 13, 2003 8:38 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] tailing a log file Does anyone on this know of or have a tool that will allow me to tail my system files or my declude log files while they are building? Something like the tail command on a linux machine? I just loaded (this has nothing to do with above) 1.75 with the comments filter, most of the mail that I was having to sort through before is no-longer. Love this. Darryl Koster ~~ Status Technologies Inc. President/Owner "Let Us Help You Get The Status You Deserve!" http://www.statustechnologies.com P: (905) 435-0145 TF (NA) 888-909-9004 F: (905) 435-0873 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] User Interface
There was talk awhile ago about some people creating a web user interface for Declude. Did anyone come up with one? Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] New variation of PayPal Account retrieval
May be a dumb question but how are you setting up JM to block these. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kami Razvan Sent: Saturday, August 16, 2003 10:35 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] New variation of PayPal Account retrieval Hi; A new variation of the PayPal fraud is going on.. I just got this email in our spam filter... it is asking for Citibank checking account... I just thought it would be good for all to see this... in case you don't catch it.. Regards, Kami Here is the header: = Received: from cgocable.net [24.150.152.123] by foroosh.com (SMTPD32-8.02) id AC6E4C0136; Sat, 16 Aug 2003 12:31:42 -0400 Received: from d150-152-123.home.cgocable.net (d150-152-123.home.cgocable.net [24.150.152.123]) by cgocable.net (8.12.8p1/8.12.8) with ESMTP id aoelr258507 for ; Sun, 17 Aug 2003 01:34:12 -0400 (EST) Date: Sun, 17 Aug 2003 01:34:10 -0400 (EST) From: Citibank <[EMAIL PROTECTED]> X-Mailer: The Bat! (v1.61) Personal Reply-To: [EMAIL PROTECTED] X-Priority: 3 (Normal) Message-ID: <[EMAIL PROTECTED]> To: deleted Subject: [58~]Your Checking Account at Citibank. MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="--3309750874624" X-IMAIL-SPAM-VALFROM: (4981046) X-RBL-Warning: NOABUSE: Not supporting [EMAIL PROTECTED] X-RBL-Warning: IPNOTINMX: X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected. X-RBL-Warning: BASE64: A binary encoded text or HTML section was found in this E-mail. X-RBL-Warning: FILTER-HEADER-XMAIL: Message failed FILTER-HEADER-XMAIL test (59) X-RBL-Warning: SPAMDOMAINS: Spamdomain 'juno.com' found: Address of [EMAIL PROTECTED] sent from invalid d150-152-123.home.cgocable.net. X-RBL-Warning: COUNTRY: Message failed COUNTRY test (36) X-RBL-Warning: FREEEMAILS: X-Declude-Sender: [EMAIL PROTECTED] [24.150.152.123] X-Declude-Spoolname: D5c6e004c01364150.SMD X-Note: This E-mail was scanned & filtered by Declude [1.75i2] for SPAM & virus. X-Spam-Tests-Failed: NOABUSE, IPNOTINMX, NOLEGITCONTENT, BASE64, FILTER-HEADER-XMAIL, SPAMDOMAINS, COUNTRY, WEIGHT20s, WEIGHT20r, FREEEMAILS X-Weight: 58 X-Mailfrom: Fwpreg_Warden.juno.com X-Note: Sent from: [EMAIL PROTECTED] X-Note: Sent from Reverse DNS: d150-152-123.home.cgocable.net ([24.150.152.123]). X-Hello: cgocable.net X-Note: Recipient(s): deleted X-Country-Chain: CANADA->destination X-RCPT-TO: Status: U X-UIDL: 331466365 Dear Citibank customer, We are letting you know, that you, as a Citibank checking account holder, must become acquainted with our new Terms & Conditions and agree to it. Please, carefully read all the parts of our new Terms & Conditions and post your consent. Otherwise, we will have to suspend your Citibank checking account. This measure is to prevent misunderstanding between us and our valued customers. We are sorry for any inconvinience it may cause. Click here to access our Terms & Conditions page and not allow your Citibank checking account suspension. й 2003 Citibank. Citibank (West), FSB. Member FDIC. Citibank with Arc Design is a registered service mark of Citicorp. Citi.com Citigroup Privacy Promise Terms & Conditions Copyright й 2003 Citicorp ECRM_CBNA_NEW_ACTIVE --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] SUBJECTSPACES test
Scott, This has probably been mentioned but I just heard about it. The SUBJECTSPACES test, is it an undocumented test? Will it check spaced all in a row, ie: "This MessageHere" and the spaces between or does it also count the space between words. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Report System
I would be interested. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Darrell LaRock Sent: Thursday, July 31, 2003 2:06 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Report System Terry, I used delog for awhile, but I needed several other features that did not come with delog. So I developed an application that had all of the features that I needed. Below is a sample report that I generated(tab format). The reports can be in tab, csv, or html format and you have the ability to email them as well. There are many other things that dlanalyzer can report on. You can get reports on domains, users, tests, and different reporting periods. The combinations are endless. Right now I am finishing up database support and a few other miscellaneous features I wanted to add in.. If you would like to try it out let me know and I will make it available.. Darrell Start Time: 6/1/2003 12:00:00 AM End Time: 6/2/2003 12:00:00 AM Total Messages: 25935 Messages That Failed: 18252 Spam Percentage: 70.38% TEST# FAILEDPercentage BADHEADERS 373514.40% BASE64 12034.64% BLACKLIST 13255.11% COMMENTS668 2.58% DECREASEIPWGHT 40 0.15% DECREASEWEIGHT 557 2.15% DECREASEWEIGHTLOW 313 1.21% DSBL380714.68% DSN 12154.68% EASYNET-DNSBL 741828.60% FXBLACKLIST 25749.92% HELOBOGUS 477618.42% HEUR10 289911.18% IPBLACKLIST 5 0.02% MAILFROM385 1.48% NJABL 408 1.57% NOABUSE 334112.88% NONENGLISH 214 0.83% NOPOSTMASTER402015.50% OLDEMPLOYEE 29 0.11% ORDB261 1.01% OSDUL 113 0.44% OSLIST 2 0.01% OSRELAY 343 1.32% OSSOFT 326512.59% OSSRC 330812.75% POSTMASTER 12 0.05% REVDNS 423116.31% ROUTING 14875.73% SNIFFER 328512.67% SNIFFERAV 12 0.05% SNIFFERCASINO 159 0.61% SNIFFERDEBT 815 3.14% SNIFFEREXP 269 1.04% SNIFFERGETRICH 630 2.43% SNIFFERGREY 421 1.62% SNIFFERINK 196 0.76% SNIFFERINSURAN 58 0.22% SNIFFEROBFUS350 1.35% SNIFFERPHARM17276.66% SNIFFERPORN 16306.28% SNIFFERSCAM 1 0.00% SNIFFERSPAMWAR 127 0.49% SNIFFERTHEFT138 0.53% SNIFFERTRAVEL 438 1.69% SPAMCOP 417216.09% SPAMHEADERS 416016.04% WEIGHT1010482 40.42% WEIGHT5 769 2.97% WORDFILTER 782630.18% -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Terry Parks Sent: Thursday, July 31, 2003 2:26 PM To: Declude. JunkMail Subject: [Declude.JunkMail] Report System While it's quiet I'd like to know which system is best at reporting status of the email system in terms of most messages sent from/delivered to address, etc. I need a good summary reporting system that will email me these results. I've tried delog but the email feature doesn't work. Terry --- [This E-mail scanned for viruses by Surfside Internet] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Spam Attack
I first thought that but there are different messages, just bad jokes each message. There were also some viruses atteched which were caught. Jeff -- Original Message -- From: "Kevin Bilbee" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Wed, 9 Jul 2003 17:39:39 -0700 > > >> -Original Message- >> From: [EMAIL PROTECTED] >> [mailto:[EMAIL PROTECTED] Behalf Of Jeff Kratka >> Sent: Wednesday, July 09, 2003 5:29 PM >> To: [EMAIL PROTECTED] >> Subject: [Declude.JunkMail] Spam Attack >> >> >> Just to let everyone know so others don't get hit with it, I just >> had a Spam >> attack/Bomb from one particular location. As soon as I found out I blocked >> everything possible and things are working. It was so bad that it >> killed the >> server. It came from: >> >> [217.16.118.12] MAIL From:<[EMAIL PROTECTED]> >> >> Every single e-mail was to the same address and from the same address and >> IP, there were a couple of thousand that attempted this. > >My guess is there spam software is stuck in a loop and sending the the same >address over and over? > > >> >> Just thought some others would like to know. >> >> Jeff Kratka >> >> * >> TymeWyse Internet >> P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 >> tel/fax: (541) 839-6027 - [EMAIL PROTECTED] >> * >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". The archives can be found >> at http://www.mail-archive.com. >> > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > -- ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Spam Attack
Just to let everyone know so others don't get hit with it, I just had a Spam attack/Bomb from one particular location. As soon as I found out I blocked everything possible and things are working. It was so bad that it killed the server. It came from: [217.16.118.12] MAIL From:<[EMAIL PROTECTED]> Every single e-mail was to the same address and from the same address and IP, there were a couple of thousand that attempted this. Just thought some others would like to know. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Log Analyzer - Comments Needed
Same here, I would be interested. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Darrell L. Sent: Friday, February 28, 2003 6:15 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Log Analyzer - Comments Needed Keith, I have a beta available and I am looking for individuals to test it out. If you are interested the beta will be made available as early as Monday. Please let me know if you are interested. Darrell LaRock -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Thursday, February 06, 2003 4:35 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Log Analyzer - Comments Needed Darrell, That is awesome. I get those same requests from our clients weekly. I appreciate your time in writing it. Keith > -Original Message- > From: Darrell L. [mailto:[EMAIL PROTECTED] > Sent: Thursday, February 06, 2003 11:35 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Log Analyzer - Comments Needed > > > *Sorry if this is outside the realm in which the forum should be used. > > Several of my customers have started asking me for reports on > what Declude is blocking for their domain or a certain user. > Obtaining this information was challenging manually sifting > through the logs - to say the least. I then decided to write > an analyzer that could accomplish what I needed. > > It's a good portion of the way wrote, and I am thinking about > making it public at some point when it is completely finished. > > However, I was looking for features that people would like > that I may not have thought of at this point. > > Currently right now it can do the following > > 1.) Report on Number of messages that fails each test. > 2.) Comprehensive reporting on each individual tests. > Reports can be generated based on (to, from, domain, > subjects, date, time). > 3.) Report on individual domains and which messages failed which tests > 4.) Report on individual users and which messages failed which tests. > 5.) It is a console application written in C# (.net). It is > self contained and does not need any external databases like > SQL Server or MSDE. > > Things Still to be added > 1.) Ability to email the reports > > > Thanks > Darrell > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude JunkMail v1.66 (beta) released
I have a question about the per user whitelist. It was said to create a user .junkmail file for this and add a to and from list. Is it necessary to add all of the other tests or do you just add the to and from addresses. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] PostFixGate
Somehow I got listed on PostFixGate and have sent several e-mails and several of their "unblock me" notices and have never received any type of info. I am still listed, does anyone know how to get in touch with these guys so I can get removed. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Happy Holidays
Thanks to everyone on the list for excellent help this past year. Happy Holidays. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist per user
John, Is it possible to try this out? Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John Tolmachoff Sent: Thursday, December 19, 2002 4:13 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Whitelist per user > Is it possible to set-up a whitelist per user. I have it running per user > but there are a couple of people that haven't received mail from friends so > I have whitelisted in the Global.cfg. I would rather whitelist for the > particular user. We have a program that we created that is in the final beta test stage that will help in this kind of situation. It checks the from address and to address and if it finds both matches in the from.txt and to.txt files, it "fails" which you could then add a negative fail weight to "white list" the message. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist per user
Is it possible to set-up a whitelist per user. I have it running per user but there are a couple of people that haven't received mail from friends so I have whitelisted in the global.cfg. I would rather whitelist for the particular user. Jeff Kratka * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: MS update
I apologize for my "mis-readings" Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Smart Business Lists Sent: Tuesday, December 17, 2002 2:06 PM To: Jeff Kratka Subject: Re: [Declude.JunkMail] OT: MS update Tuesday, December 17, 2002 you wrote: JK> Reading a message from last week, someone said this also effected the JK> WS_FTP Server. No. I said the patch DID NOT change WS_FTP_SERVER's gui. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: MS update
Yes. I had the same problem here. Being that I really don't plan on updating to 7.x (for a couple of reasons) you can either install the patch (and live with everything off) or upgrade to the newest version. Reading a message from last week, someone said this also effected the WS_FTP Server. So is (was) this something that has been there for some time with Ipswitch, just like the "hello" message not being RFC compliant. (Sorry, venting) Jeff Kratka ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Michael Lauritzen Sent: Tuesday, December 17, 2002 1:35 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] OT: MS update Has anyone else seen this? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Scott MacLean Sent: Tuesday, December 17, 2002 11:26 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: MS update Slightly off this topic, but I just learned the hard way that if you have intentions of continuing to use the server-based IMail 6 administration program, do NOT install Microsoft update Q328310. You'll get something like this as a result: http://www.nerosoft.com/Test/IMail.gif --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Habeas Test
Just as a curiosity, is anyone using the Habeas test and if so does it help? Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Are spammers idiots??
Well, if you haven't seen it here is an article about a spammer in Florida. http://online.wsj.com/article_email/0,,SB1037138679220447148,00.html Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com]On Behalf Of Glenn \ WCNet Sent: Thursday, November 14, 2002 12:39 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Are spammers idiots?? I've been clearing some mail accounts that customers have abandoned, haven't checked their mail for a couple months or longer. It's not unusual to find 4000 messages or more, 20 MB or more, ALL of it spam. No one on a dial-up connection is going to wait for all that mail to download, and nobody using WebMail has the patience to wade through all that debris. My point being that spammers can easily overload a mail server, sap up all the drive space if some kind of spam control isn't in place. What would be the point? They're cutting their own throats, so to speak. Glenn Z. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Listed in Spam databases
Hi Scott, Yes I did send to [EMAIL PROTECTED] 2 different times. it just becomes annoying that you can be listed without being notified. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Wednesday, October 16, 2002 10:38 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Listed in Spam databases > I have found that I am listed on both Fiveteningnore and Postfixgate. I >have attempted to contact both locations several time and even tried to >contact Spamhaus (listed under Fiveteningnore) but have not received any >answers back. Fiveteningnore shows the listing because my backbone (Sprint) >is there but I have no idea why I am listed on the other. > Does anyone have any other suggestions on how to contact these people and >get removed. Did you send E-mail to the special address at the FIVETEN site? There is one E-mail address ('blacklist@', I think) that you can send to where they will not block your mail. As for Postfixgate, well... I think we're listed in there too. Needless to say, I don't really care too much. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Listed in Spam databases
Hello, I have found that I am listed on both Fiveteningnore and Postfixgate. I have attempted to contact both locations several time and even tried to contact Spamhaus (listed under Fiveteningnore) but have not received any answers back. Fiveteningnore shows the listing because my backbone (Sprint) is there but I have no idea why I am listed on the other. Does anyone have any other suggestions on how to contact these people and get removed. Thanks, Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] listed on Postfix Gate
I just came in this morning and was doing a check on things and noticed my mail server is now listed on PostfixGate. It wasn't that way yesterday and nothing has changed. There shows no reason for this so I went to have my mail server removed from the list. I did have one person that sent spam out on Wednesday but that account was deleted, could it be listed that quick? I went to the PostfixGate site and put in a request to be removed so we'll see. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] five-ten
Sorry about being brain dead and not checking. The first two were rejected for being listed but I did send to blackhole and it showed that it went thru. The ol' brain isn't functioning to much today, my wife started going into labor and I haven't been thinking straight... Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Friday, October 04, 2002 3:54 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] five-ten >I have sent mail Five Ten to try to get my IP block removed from their list >(All Sprint blocks are listed I guess) and mail keeps coming back unknown >user. I have sent to info (the link off the web page) and carl(listed with >Whois). > Does anyone know where else I can send mail to? Did you check the IMail log files to see why the E-mail was not delivered? Did you send it to the blackhole@ address? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] five-ten
I have sent mail Five Ten to try to get my IP block removed from their list (All Sprint blocks are listed I guess) and mail keeps coming back unknown user. I have sent to info (the link off the web page) and carl(listed with Whois). Does anyone know where else I can send mail to? Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Web Site ?
Is anyone else having difficulties with the Declude Web Site? Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] FYI
Just to let people know, I received this e-mail from a guy looking for a copy of Declude. I e-mailed him back that I was able to get the funds together and so can he. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * Dheeraj Mewani [[EMAIL PROTECTED]] Use Declude. I have been using it with their Junk Mail Dear Sir, My self dheeraj, I am from India, I need a copy of declude antivirs.. i have no capablity to purchase it can u help me and send a copy of it I have mail u with ref. of below web page regards Dheeraj Mewani - --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Word filter
Hopefully a simple question. In the word filter will it pick up every word on the line of if it is set up as a phrase will it just do that. Do quotation marks make a difference? SUBJECT 20 CONTAINS Lowest Mortgage Rates Around <- every word? SUBJECT 20 CONTAINS "Lowest Mortgage Rates Around" <- phrase? Thanks, Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude and Sniffer
Thanks for the info. Would it be possible to get your config files to compair to mine. I have gotten alot to caught but am interested in what others are using also. Thanks again for the info. Jeff -- Original Message -- From: "Todd Ryan" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Sun, 28 Jul 2002 15:27:01 -0400 >Jeff, > >I just purchased Message Sniffer this past week. Before that, I ran >the trial version for 30 days and then produced some statistics to >prove to myself and my boss that it was worth buying. What it boiled >down to was that I was catching 12.5% more definite spam with Message >Sniffer than without it. > >A couple things that are worth mentioning... > >By "definite spam", I'm being very conservative. I don't consider >anything that has a legitimate unsubscribe method to be spam. Many >would disagree. We're a higher education institution so free speech >is a very important factor. So you may find it even more effective >than I do because it will also block some of the "newsletters" that we >as mail administrators find to be at the top of the spam scale. > >I was using the demo for 30 days so that means no updates. Using it >with frequent updates will probably produce even better results. > >Also, I have some very tweaked JunkMail weights and rules. I only use >Message Sniffer only in the weighting system. It blocks some things >that I don't consider junkmail like newsletters from emazing.com and >beliefnet.com. So if a message ONLY fails sniffer, I don't bounce it. >It has to fail one or two other tests. > >Hope this helps. For me, I expect a 12%-15% increase in accuracy and >that is worth it. I now have what I think is a VERY accurate >weighting system. I've only had two instances in about 6 months where >a remote postmaster said their mail was bouncing. In both cases they >were legitimate companies sending work-related things, but they both >were listed in one of the open relay databases so the filters worked >correctly. > >--Todd. > > > >- Original Message - >From: "Jeff Kratka" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Friday, July 26, 2002 4:08 PM >Subject: [Declude.JunkMail] Declude and Sniffer > > >> Just curious. How many people are using both Declude Junk Mail and >the >> sniffer add-on and has it made a difference if yes. I have been >completely >> pummeled with Spam and am looking for more options. >> >> Thanks. >> >> Jeff >> >> * >> TymeWyse Internet >> P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 >> tel/fax: (541) 839-6027 - [EMAIL PROTECTED] >> * >> >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] >> >> --- >> >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". You can E-mail >> [EMAIL PROTECTED] for assistance. You can visit our web >> site at http://www.declude.com . >> > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- > >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". You can E-mail >[EMAIL PROTECTED] for assistance. You can visit our web >site at http://www.declude.com . > -- ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** -- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Declude and Sniffer
Just curious. How many people are using both Declude Junk Mail and the sniffer add-on and has it made a difference if yes. I have been completely pummeled with Spam and am looking for more options. Thanks. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] AOL Mail Problems
Hi All, Sorry for the cross post. Over the past weekend I have noticed more people having difficulties receiving mail from AOL. Looking in my logs it connects but shows nothing else. They can send mail to AOL just fine but receiving it goes into space. Has anyone else see any AOL mail problems this weekend? Running Imail v6.06 with Win2k AS. Never had a problem until this past weekend. Nothing has changed here. Jeff * TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] * --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Black Listing
I have been receiving ALOT of Spam from people using my users e-mail addresses. Most of the IP addresses resolve back to "Asia Pacific Network Information Center" and "European Regional Internet Registry". What is the best way to block the IP blocks from there. I have set up a "Spam" blacklist with IP addresses but I have gotten so sick of my customers complaining about this I wanted to block everything from that area. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] consensus
Well I have been using Declude Virus and Junk Mail for some time now. It did take me some time before I purchased them but boy am I glad I did. Since I have deployed Declude virus (November) I have caught about 6000 viruses (a few files that I have banned also) and on an average Declude Junkmail catches and removed in the area of 1000 pieced of known spam a day. As Aaron said, if it wasn't for Scott and the others on this list I would have seen about changing mail server some time ago, but Declude has made my life so much easier. My 2 cents worth, the BEST money I have spent for my business. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "Kevin Crawford" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, April 27, 2002 3:14 PM Subject: [Declude.JunkMail] consensus > Hello - I have taken my credit card out of my wallet two or three times now, > headed to buy declude junkmail - on the fence so to speak. I know how well > declude works for AV - and I am very impressed with Scott as a helpful and > courteous individual - and he seems real smart too - lots of knowledge on > the workings of mail etc I am trying to drum up support (funds) for it > from a few of my business customers. I would like some reviews if possible - > what kind of kill rate some of you get without paying some of the db's > services out there - just using the free stuff. Cold hard percentages would > be good. I am using imgate at the moment, but the ability to just mark spam > would be so much better than deleting it - and weighting sounds immensely > better that pass or fail on one test, then on to the next. I have gone down > to only blocking open relays (since no reason exists to have one - and if > you are legit, you shouldn't want one anyway) > > Also, what kind of performance hits do you take - > > sorry to break in on such a quiet day - > thanks > Kevin > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] DORKZTL:DNS Report Down?
Everything's looking good on this end. Jeff Kratka ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "Don Schreiner" <[EMAIL PROTECTED]> To: "Declude List" <[EMAIL PROTECTED]> Sent: Tuesday, April 02, 2002 11:59 AM Subject: [Declude.JunkMail] DORKZTL:DNS Report Down? > Can anyone bring up DNSReport.com and DNSStuff.com? Are they down? > Anyone experiencing regional connectivity errors? > > -Don S. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] ORBZ - More info
You're right... made me feel better.. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "Scott Phelps" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, March 21, 2002 12:08 PM Subject: RE: [Declude.JunkMail] ORBZ - More info > > Please!!! > > Everyone sign that (click the bottom link). I did, and I feel much better. > > ___ > | > | Scott Phelps > | NT Systems Administrator > | WebKorner Internet Services > | [EMAIL PROTECTED] > | www.webkorner.com > | MCDTP (Microsoft Certified > | duct tape professional) > |___ > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Mike Nice > Sent: Thursday, March 21, 2002 3:00 PM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] ORBZ - More info > > > Here's some more information behind the big mystery. > > http://www.wired.com/news/business/0,1367,51218,00.html > > "The small city of Battle Creek, Michigan, wants to lock up an anti-spam > activist who it believes crashed its mail server. > > Never mind that the town government was using a buggy version of the Lotus > Domino e-mail server, and that newer releases have fixed the problem. And > never mind that anti-spammers may have been conducting a routine scan for > possible sources of bulk e-mail. " > > > I suspect they will regret this actionTee hee!! > http://216.117.150.42/battlecreekmichcom/cgi-bin/battlecreek/guestbook.cgi#s > ign > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- > [ This E-mail scanned for viruses by www.WebKorner.com ] > > > --- > [ This E-mail scanned for viruses by www.WebKorner.com ] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Declude console
Did the same exact thing here. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 19, 2002 11:22 AM Subject: Re: [Declude.JunkMail] Declude console > > >Could it be that I was in a terminal server session? > > That could account for why you didn't see any information in it. > -Scott > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Comparing Weight Configurations
Mike, Would it be possible for you to send me your global and your default files so I can compare them to mine. I do like that setup that you have and want to check on more. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "Mike Nice" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, February 01, 2002 7:26 AM Subject: Re: [Declude.JunkMail] Comparing Weight Configurations > OSRELAY5 0 > OSDUL 5 0 > OSSRC 5 0 > OSSMART5 0 > OSSOFT 5 0 > OSLIST 5 0 > OSFORM 5 0 > ORDB 5 0 > SPAMCOP 5 0 > DSN 5 0 > NOPOSTMASTER5 0 > NOABUSE 5 0 > BADWHOIS3 0 > IPWHOIS 3 0 > > MAILFROMenvfrom x x 2 0 > BADHEADERS badheaders x x 0 0 > SPAMHEADERS spamheaders x x 3 0 > ROUTING spamrouting x x 9 0 > REVDNS revdnsexists x x 5 0 > CATCHALLMAILS catchallmails x x 0 0 > > WEIGHT15 weight x x 15 0 > > > > ALONG WITH WHITELIST for Microsoft (king of the RFC-Ignorant) passport and > expedia mailers - > > WHITELIST FROM [EMAIL PROTECTED] > WHITELIST FROM @msnnewsletters.customer-email.com > WHITELIST FROM @expedia.com > > >My goal is to minimize the number of false-positives to near zero. I had > to back down the BADHEADERS and SPAMHEADERS because they mostly represent > automated mailing programs. There are many of these in use all over for > legitimate purposes - shopping carts, confirmations, signups, etc that > people want to receive. I'm sure Spammers monitor this list and have > already made their mailblaster headers to mimic MS Outlook and be > RFC-Compliant. But admittedly, there are still a bunch of losers running > the old spam blasting software though. > > The only remaining false positives are related to the obligitory self-run > E-mail system that many small companies want to run. Of course they have no > reverse DNS, they are open relay, and because of the open relay they end up > in the Spamcop database. Normally, this 3-strikes would be considered spam. > There have been a number of these from local companies that I had to > whitelist because the E-mail customer would expect delivery or a bounce > message. > >I could back down ORDB weighting if I add the sniffer technology to the > mix. > > > - Original Message - > From: "Don Schreiner" <[EMAIL PROTECTED]> > To: "Declude List" <[EMAIL PROTECTED]> > Sent: Friday, February 01, 2002 8:11 AM > Subject: [Declude.JunkMail] Comparing Weight Configurations > > > > Anyone want to compare/share some of their successful weighting > > configurations? > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Spam Review Software
So far things seem to be working fine on this end. This will be a nice add-on/enhancement to use. Thanks. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "Tom Schwarz" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, January 26, 2002 11:28 AM Subject: RE: [Declude.JunkMail] Spam Review Software > Either will work. > > \\myserver\imail\spool > > or > > c:\imail\spool > > > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of Jim Jones, Jr. > Sent: Saturday, January 26, 2002 1:25 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Spam Review Software > > > can i use a unc to get to the spooled files or does it have to be mapped? > > thanks!! > > Jim > - Original Message - > From: "Tom Schwarz" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Saturday, January 26, 2002 12:48 PM > Subject: [Declude.JunkMail] Spam Review Software > > > > Exactly 15 hours after I sat down at a computer to write a program to > review > > spam email I have a first release. I tell you this so you won't yell at > me > > if you find a bug. Feel free however to report bugs and suggest > > enhancements. > > > > You can locate this software at http://www.slsoft.com/spamreview.htm. > > Please read the page carefully before downloading. > > > > Tom > > > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". You can E-mail > > [EMAIL PROTECTED] for assistance. You can visit our web > > site at http://www.declude.com . > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Re:Declude Virus
Ok, I'm a dork. I just answered my own question. I read the manual on-line. yes it does. Thanks Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "Jeff Kratka" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, January 18, 2002 5:07 PM Subject: [Declude.JunkMail] Declude Virus > Scott, > > In Declude Virus, if you add in BANEXT .xxx will Declude treat the e-mail > as a virus and move the e-mail to a quarantine area just like a virus. I > have noticed since I have added a couple of these lines that directory has > received more files but I have not been notified. > > Jeff > ** > TymeWyse Internet > P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 > tel/fax: (541) 839-6027 - [EMAIL PROTECTED] > ** > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Declude Virus
Scott, In Declude Virus, if you add in BANEXT .xxx will Declude treat the e-mail as a virus and move the e-mail to a quarantine area just like a virus. I have noticed since I have added a couple of these lines that directory has received more files but I have not been notified. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail]
Oops... sorry ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "Jeff Kratka" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, December 13, 2001 4:45 PM Subject: [Declude.JunkMail] > help > ** > TymeWyse Internet > P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 > tel/fax: (541) 839-6027 - [EMAIL PROTECTED] > ** > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail]
help ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Product Info Questions
Excuse the ignorance here, but what is needed to set up this ADULT test. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, October 18, 2001 1:17 PM Subject: RE: [Declude.JunkMail] Product Info Questions > > >Along the lines of undocumneted tests, is ADULT another test in beta? I saw > >it on your recently cught spam page. > > Yes, that is another undocumented test, designed to catch E-mail with adult > content. > -Scott > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Tests
Forgive me Scott but I forgot this. What is the command line to check to see what tests Declude is running. Amount active etc.. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] ByPassing IP's
Hello, This may be a stupid question but I can't figure it out. I would like Declude to bypass a certain amount of IP addresses. These are mostly feedbacks and e-mail forms coming from some web pages I host. When people receive the forms it fails the SPAMHEADERS test and gets a note. I attempted to put then in the WhiteLists but it doesn't do it. Am I just brain dead ( Lately I am ) Thanks for any help.. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
REVDNS:Re: [Declude.JunkMail] Declude JunkMail v1.24
Hi Scott, Where would you go to from your web site to upgrade. Sorry for the dumb question. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, August 09, 2001 1:56 PM Subject: [Declude.JunkMail] Declude JunkMail v1.24 > We have just released Declude JunkMail v1.24 (beta). It consists mostly of > minor bugfixes from problems discovered in v1.23. Anyone who was running > 1.23 should upgrade to 1.24. > -Scott > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail]
Sorry for the ignorance but here it goes. I am using Norton Av v5 for Windows NT4 on a machine that does virus scan, backup and network monitor. Will Declude Virus work with Norton Anti Virus v5? Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: REVDNS:[Declude.JunkMail] Declude.JunkMail
Thanks Scott, that seemed to do it. I am very pleased the way Declude Junkmail works. It has filtered out so much junk since I installed it. Thanks, Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, May 24, 2001 7:38 PM Subject: Re: REVDNS:[Declude.JunkMail] Declude.JunkMail > > >Everything looks to be running correctly, mail flowing and > >Declude is doing it's job, but in the declude.log file I have > >"05/24/2001 00:21:45 Warning, misconfiguration in IP; expecting action". > > Actually, that is a bit misleading. There isn't a problem with the IP > address. The problem is with either the \IMail\Declude\global.cfg file or > the \IMail\Declude\$default$.JunkMail file. One of them has the word "IP" > where Declude isn't expecting it. > > I'm guessing that you are using the WHITELIST option ("WHITELIST IP > 127.0.0.1", for example). If so, you should make sure you are running > Declude v1.20 or higher ( http://www.declude.com/junkmail/manual.htm > ). Versions before 1.19 won't recognize the WHITELIST option, so they > would think it was a test name, so it would think that IP was an action it > was supposed to take. So, it just ignores that line and places the warning > message in the log file. > -Scott > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
REVDNS:[Declude.JunkMail] Declude.JunkMail
Hopefully a simple question. I just finished up-grading my mail server and took the old machine out of service. Imail v6.06 and Declude Junkmail. I moved all information from one machine to another and user the same IP addresses. Everything looks to be running correctly, mail flowing and Declude is doing it's job, but in the declude.log file I have "05/24/2001 00:21:45 Warning, misconfiguration in IP; expecting action". I have the same IP addresses, just changed the OS (from Windows NT4 to Windows 2000AS). I'm sure it's something simple but my brain won't catch it. Thanks, Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Declude Hijack beta testers wanted...
This sounds good to me. If you are still looking for Beta testers I would be interested. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 08, 2001 10:41 AM Subject: [Declude.JunkMail] Declude Hijack beta testers wanted... > We are now looking for beta testers for our new program, Declude > Hijack. Declude Hijack is designed to prevent your mail server from being > hijacked (a spammer sending out huge volumes of mail through it). It is > designed to protect you from both external users (if you are running an > open relay) as well as internal users (people who you have given permission > to use your mail server, but they have decided to send spam or have had > their account stolen). > > It works by sensing when someone is sending too much mail in a given time > period. You can control how much is too much. > > Please let me know if you are interested in helping beta test this program, > or if you would like more information about it. Thanks. > -Scott > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .