RE: [Declude.JunkMail] What is the Reveiw folder for?

[John Tolmachoff \(Lists\)]

Please review the posts I made on 3.0.5.3 earlier this week.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Smith
Sent: Wednesday, September 28, 2005 5:07 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] What
is the Reveiw folder for?

 



There's a folder in the \proc folder
called "review"





 





I've got messages building up in it but
not sure what they are.

RE: [Declude.JunkMail] HiJack Deccon in 3.0.5

[John Tolmachoff \(Lists\)]

My understanding is Deccon is no longer used. A new GUI is in the works.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Lyndon Eaton
> Sent: Tuesday, September 27, 2005 6:41 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] HiJack Deccon in 3.0.5
> 
> Hi,
> 
> Just upgraded to Declude version 3.0.5 today (from 1.8!) and I'm a
> little unsure of how to monitor HiJack.
> 
> Can't get the deccon.exe to open although I know declude now runs as a
> service. Had a look at the HiJack manual but can't find anything and
> done a quick search in the archives too.
> 
> What am I missing? Could anyone point me in the right direction?
> 
> Thanks.
> Lyndon Eaton.
> 
> 
> 
> Email checked by UKsubnet anti-virus service
> To prevent email abuse & block spam
> contact [EMAIL PROTECTED]
> Tel: +44(0)9063407727 (calls cost £1.50/minute)
> Fax: +44(0)8712360300 Web: www.uksubnet.net
> 
> Powered by UKsubnet Internet Service Provider
> Business to Business Internet (ISP)
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?

[John Tolmachoff \(Lists\)]

Matt, yes they are actively working on
number 1. 

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Monday, September 26, 2005 4:47 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
Anyone have any outstanding issues with the 3.0.5 release?

 

I would hope that #1 becomes a priority as well. 
Having a program that handles spam, and especially viruses crash on parsing an
E-mail, malformed or not, is a security issue as well as a stability one,
though it appears that they might have addressed the stability thing. 
There's nothing worse than having a customer call up and ask you why you are
passing multiple spams or even viruses.  I don't however know that this
causes leakage, but it is a bug and bugs aren't always predictable.

Matt



John Tolmachoff (Lists) wrote: 

Per Bill at Declude, number 3 is fixed
and number 4 is being fixed.

 



John T

eServices For You



 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of John Tolmachoff
(Lists)
Sent: Monday,
 September 26, 2005 12:44 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
Anyone have any outstanding issues with the 3.0.5 release?

 

Current release is 3.0.5.3

 

Reactions/observations so far:

 

1. Dropping known bad d and q files, decludeproc
moves them to a new folder \proc\review. The Decludeproc did crash and stop,
but it was restarted. I am not sure if the files were moved upon restart or at
the time of the crash. I am suspecting that what happens is when decludeproc is
started, any files in the proc\work folder are moved to the proc\review folder.
I can live with this unless of course the messages that are causing this become
more prevalent. Declude is still searching for the cause and remedy for the
crash, and I have just sent a bunch more information to them regarding this
issue. Note that any files in the work folder are moved, so you should activily
monitor that folder. I am doing so by copying and modifying the script Bill has
for monitoring HOLD1 and HOLD2. If some one has a better idea, please let me
know.

2. Hijack and Confirm appear to be
working correctly now, waiting for a test.

3. During the install, the default
location is not correct at all. You must change the install location to the
Imail directory. I have responded to Declude about this recommending that the
default location be taken from the Imail install registry key. 

4. If you make a mistake during the
install like I did, (accepting the default location,) and have to uninstall,
you have to do a restart to clear the decludeproc from the services list to
complete the service deletion. (This happened to me anyways, your mileage may
vary.)

 

 



John T

eServices For You



 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Darin Cox
Sent: Monday,
 September 26, 2005 11:29 AM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
Subject: [Declude.JunkMail] Anyone
have any outstanding issues with the 3.0.5 release?

 



I see 3.0.5 was released today.  Anyone know if
this fixes the reported performance and stability issues reported here with the
3.0.x betas?






Darin.





 





 

RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?

[John Tolmachoff \(Lists\)]

Robert, may I make a suggestion?

 

Put all the logs into debug mode. Allow
it to run until you know this issue has occurred. Put the logs back the way you
had them.

 

Extract from the JM log all the lines
for a message in question. Send those along with the d and q file to Declude
support.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Grosshandler
Sent: Monday,
 September 26, 2005 2:25 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
Anyone have any outstanding issues with the 3.0.5 release?

 

I have one outstanding issue -- not
stability related.

 

We're seeing some messages that exceed our
hold or delete weights get routed to our hold or delete folders without having
their subjects altered (we prepend "spam" to the subject line). 
They route ok.

 

It does look like maybe the headers are
being munged a bit in this case.

 







From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Monday,
 September 26, 2005 1:29 PM
To: Declude.JunkMail@declude.com;
Declude.Virus@declude.com
Subject: [Declude.JunkMail] Anyone
have any outstanding issues with the 3.0.5 release?



I see 3.0.5 was released today.  Anyone know if this
fixes the reported performance and stability issues reported here with the
3.0.x betas?






Darin.





 





 

RE: [Declude.JunkMail] 3.05 upgrade

[John Tolmachoff \(Lists\)]

Did you create the file declude.cfg in
the imail\declude folder per instructions on the down load site?

 

Look at the Windows Event log, any Decludeproc
stops noted?

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Harry Vanderzand
Sent: Monday,
 September 26, 2005 2:24 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] 3.05
upgrade

 



I have followed the following steps:

Stop the Imail SMTP service

Stop the Imail Queue Manager service.

rename declude.exe to declude.old

Perform the upgrade.

Make sure the DecludeProc service is
started. (it was not)

Restart the Imail SMTP and Queue Manager
service.





 





Decludeproc service was not running and the mail accumulated
in the proc directory.





 





Had to revert back to the 2.06.16 version.  My Imail is
8.05





 





What is going wrong here.  This seemed really simple.



Harry
Vanderzand 
inTown
Internet & Computer Services 
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222



 

RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?

[John Tolmachoff \(Lists\)]

Per Bill at Declude, number 3
is fixed and number 4 is being fixed.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
Sent: Monday,
 September 26, 2005 12:44 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
Anyone have any outstanding issues with the 3.0.5 release?

 

Current release is 3.0.5.3

 

Reactions/observations so far:

 

1. Dropping known bad d and q files,
decludeproc moves them to a new folder \proc\review. The Decludeproc did crash
and stop, but it was restarted. I am not sure if the files were moved upon
restart or at the time of the crash. I am suspecting that what happens is when
decludeproc is started, any files in the proc\work folder are moved to the
proc\review folder. I can live with this unless of course the messages that are
causing this become more prevalent. Declude is still searching for the cause
and remedy for the crash, and I have just sent a bunch more information to them
regarding this issue. Note that any files in the work folder are moved, so you
should activily monitor that folder. I am doing so by copying and modifying the
script Bill has for monitoring HOLD1 and HOLD2. If some one has a better idea,
please let me know.

2. Hijack and Confirm appear to be
working correctly now, waiting for a test.

3. During the install, the default
location is not correct at all. You must change the install location to the
Imail directory. I have responded to Declude about this recommending that the
default location be taken from the Imail install registry key. 

4. If you make a mistake during the
install like I did, (accepting the default location,) and have to uninstall,
you have to do a restart to clear the decludeproc from the services list to
complete the service deletion. (This happened to me anyways, your mileage may
vary.)

 

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Monday,
 September 26, 2005 11:29 AM
To: Declude.JunkMail@declude.com;
Declude.Virus@declude.com
Subject: [Declude.JunkMail] Anyone
have any outstanding issues with the 3.0.5 release?

 



I see 3.0.5 was released today.  Anyone know if this
fixes the reported performance and stability issues reported here with the
3.0.x betas?






Darin.





 





 

RE: [Declude.JunkMail] upgrade to 3.0.5

[John Tolmachoff \(Lists\)]

Stop the Imail SMTP service

Stop the Imail Queue Manager service.

Perform the upgrade.

Make sure the DecludeProc service is
started.

Restart the Imail SMTP and Queue Manager
service.

 



John T

eServices For You



 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Bonno Bloksma
Sent: Monday, September 26, 2005
12:33 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail]
upgrade to 3.0.5

 



Hi,





 





Currently using Declude 2.0.6





Do I just stop the queue service and then performe the
Upgrade or do I have to stop more?






Groetjes,





 






Bonno Bloksma

RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?

[John Tolmachoff \(Lists\)]

Current release is 3.0.5.3

 

Reactions/observations so far:

 

1. Dropping known bad d and q files, decludeproc
moves them to a new folder \proc\review. The Decludeproc did crash and stop,
but it was restarted. I am not sure if the files were moved upon restart or at
the time of the crash. I am suspecting that what happens is when decludeproc is
started, any files in the proc\work folder are moved to the proc\review folder.
I can live with this unless of course the messages that are causing this become
more prevalent. Declude is still searching for the cause and remedy for the
crash, and I have just sent a bunch more information to them regarding this
issue. Note that any files in the work folder are moved, so you should activily
monitor that folder. I am doing so by copying and modifying the script Bill has for monitoring
HOLD1 and HOLD2. If some one has a better idea, please let me know.

2. Hijack and Confirm appear to be
working correctly now, waiting for a test.

3. During the install, the default
location is not correct at all. You must change the install location to the
Imail directory. I have responded to Declude about this recommending that the
default location be taken from the Imail install registry key. 

4. If you make a mistake during the
install like I did, (accepting the default location,) and have to uninstall,
you have to do a restart to clear the decludeproc from the services list to
complete the service deletion. (This happened to me anyways, your mileage may
vary.)

 

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Monday, September 26, 2005
11:29 AM
To: Declude.JunkMail@declude.com;
Declude.Virus@declude.com
Subject: [Declude.JunkMail] Anyone
have any outstanding issues with the 3.0.5 release?

 



I see 3.0.5 was released today.  Anyone know if this
fixes the reported performance and stability issues reported here with the
3.0.x betas?






Darin.





 





 

RE: [Declude.JunkMail] Anyone have any outstanding issues with the 3.0.5 release?

[John Tolmachoff \(Lists\)]

In a few minutes, I am going to drop the
known bad files into the proc folder and watch what happens.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster
Sent: Monday,
 September 26, 2005 11:47 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
Anyone have any outstanding issues with the 3.0.5 release?

 

we're going to try it out later tomorrow
nightfirst on IM8.15 then we'll move up to 8.21

 

 

Sincerely,

Randy Armbrecht
Global Web Solutions, Inc.
804-346-5300 x112
877-800-GLOBAL (4562) x112
http://globalweb.net

Richmond's Internet Source since 1996!
WEB HOSTING including EMAIL beginning at $29/month!
DSL Starting at $39.95/month!
Non-Profits - receive a 25% discount on most services!

"Global Web Solutions" is a registered trademark of Global Web
Solutions, Inc., Glen Allen, VA 



 







From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
Sent: Monday,
 September 26, 2005 2:29 PM
To: Declude.JunkMail@declude.com;
Declude.Virus@declude.com
Subject: [Declude.JunkMail] Anyone
have any outstanding issues with the 3.0.5 release?



I see 3.0.5 was released today.  Anyone know if this
fixes the reported performance and stability issues reported here with the
3.0.x betas?






Darin.





 





 

RE: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A

[John Tolmachoff \(Lists\)]

Yup, looks the same. If you want me to test it, send me the q file as well,
but it looks like the same formatting.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Kim Premuda
> Sent: Sunday, September 25, 2005 12:41 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A
> 
> John,
> 
> Attached is the d*.smd file that I reported to Declude last Thursday which
causes both
> the 3.0.3 and 3.0.4.4 'decludeproc.exe' services to stop. The message
content looks
> very similar to the 3 files you posted, and I thought you might want to
take a look at
> it (out of curiosity).
> 
> Kim
> 
> 
> 
> -- Original Message --
> From: "John Tolmachoff \(Lists\)" <[EMAIL PROTECTED]>
> Reply-To: Declude.JunkMail@declude.com
> Date:  Sat, 24 Sep 2005 13:25:49 -0700
> 
> >Through a time consuming process, I have apparently identified the
trigger
> >for the problem with the decludeproc stopping and messages backing up.
> >
> >Attached are text files which are D files for messages that caused this.
The
> >2 times in the last 4 days that the decludeproc has stopped. Each time,
one
> >of these files was in the work folder. After disabling the decludeproc,
> >moving the entire contents of the work folder to a temp folder, then
feeding
> >one pair of files to the proc folder at a time, I was able to isolate it
to
> >these. Each one of the 3 is identical in the included characters and body
> >formatting.
> >
> >I would ask that any one else having this problem please check and see if
> >you have any of these kind of files stuck in the work folder.
> >
> >If you need any help in figuring this out, please let me know.
> >
> >If we can all confirm this, Declude will be able to fix the problem that
> >faster.
> >
> >John T
> >eServices For You
> >
> >
> >
> >
> 
> --
> Kim W. Premuda
> FastWave Internet Services
> San Diego, CA
> 
> --

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A

[John Tolmachoff \(Lists\)]

Declude renamed the files in the spool
from smd to ~md, not Imail. When Imail was receiving, the Q was T until the
entire D file was received and created. The problem also came when the Queue
Manger did a normal timed run every 30 minutes or so depending on configuration.

 

Yes, the file was as is and the only
thing changed was the local domain.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Saturday, September 24, 2005 3:40 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
Beta 3.0.4.4 update 09/24/05A

 

John,

The idea regarding the restart is for decludeproc to handle the process
itself.  Windows isn't always successful at restarting something, and
sometimes things enter a bad state and you need something to actively monitor
the process to make sure that it functions.

The old Declude doesn't have any regular operational issues with IMail stealing
files (only happens when you restart the queue manager out of order with IMail
SMTP).  If you look in the spool on IMail, you will see files named
something like _D0A58F27011E822C.~MD.  I think that this is IMail that is
locking the files while the D* file is being received.  If I am correct,
old Declude places a lock on the Q* file (or maybe it's the D* file), and this
is what keeps the IMail Queue Manager from stealing them.  The trick here
is that if Declude crashes, the file should be released eventually, and Declude
won't reprocess it unless Declude crashed when the file was in overflow.

When Declude takes either the D* or Q* file out of the spool, it has to take
responsibility for handling the E-mail gracefully, and that includes recovery
from errors.  It might have something in there already that handles this,
but there is also the new issue of a crash in Declude stopping delivery until
it is restarted, so decludeproc needs to be able to monitor and start the
service.  Sniffer does something similar, but instead of restarting the
service, it just continues to operate as a command line application.

I did test one of the E-mails that you provided and it was successfully
processed by Declude 2.0.6.16, so the error appears to be new to the 3.0
versions as long as I can trust that the formating of these files was
maintained accurately as it was passed to the list and received by me.

On a related note, it would be really, really helpful if we knew what types of
things in Declude were modified when things go into a full release. 
Knowing what areas might have been modified, such as maybe the message parsing
routines, can help a great deal with troubleshooting.  I think that after
more than a year under the new system we know well enough to expect that
despite the best intentions, there are often issues, and I expect fully for
this to continue.  E-mail is unbelievably important to many companies,
even more so important than the telephone due to it's ability to transmit
data.  If you interrupt that process it can cost people business, their
jobs and it can even result in a lawsuit.  This isn't need-to-know
information, it is absolutely necessary information that administrators have to
know.  The community is fairly good as a whole at sharing this
information, but we definitely don't detect every issue, or share every known
issue.  I personally have a list that I am not bothering to share with
Declude because they are busy dealing with much greater issues at the moment
(supporting IMail 8.2+ users).

Matt



John Tolmachoff (Lists) wrote: 

Matt, I have the Decludeproc set to
restart in the services manager, so it does get restarted. However, everytime
it would restart, it would try running the file again and crash and so on. In
the mean time, all the other messages stacked up.

 

I have no problem having the OS restart
the service each time. I do like the idea the files are moved out of the spool
so that Imail can not touch them.

 

What I do like is your idea of renaming,
and that could be done in the work folder. Once decludeproc starts to process a
message in the work folder, it appends the extension to say .proc and then when
finished renames it back. Then program decludeproc to not start processing a
message that ends in .proc. That way, if decludeproc does crash and restart, it
will not try to process the messages that end in .proc. You could then write a
script that looks for .proc files in the work folder older than say 30 minutes
and send a notice, or move them and then send a notice.

 



John T

eServices For You



 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]
On Behalf Of Matt
Sent: Saturday, September 24, 2005 2:32 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
Beta 3.0.4.4 update 09/24/05A

 

John,

Good find on this one.  Curiously, I searched my Hold folder for examples
of this and could find none.  I would expect to have

RE: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A

[John Tolmachoff \(Lists\)]

Matt, I have the Decludeproc set to
restart in the services manager, so it does get restarted. However, everytime
it would restart, it would try running the file again and crash and so on. In
the mean time, all the other messages stacked up.

 

I have no problem having the OS restart
the service each time. I do like the idea the files are moved out of the spool
so that Imail can not touch them.

 

What I do like is your idea of renaming,
and that could be done in the work folder. Once decludeproc starts to process a
message in the work folder, it appends the extension to say .proc and then when
finished renames it back. Then program decludeproc to not start processing a
message that ends in .proc. That way, if decludeproc does crash and restart, it
will not try to process the messages that end in .proc. You could then write a
script that looks for .proc files in the work folder older than say 30 minutes
and send a notice, or move them and then send a notice.

 



John T

eServices For You



 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Matt
Sent: Saturday, September 24, 2005 2:32 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
Beta 3.0.4.4 update 09/24/05A

 

John,

Good find on this one.  Curiously, I searched my Hold folder for examples
of this and could find none.  I would expect to have seen some of these
unless possibly the patterns are well tagged and scored too high.  We have
pretty high volume over here.

I'm speculating here, but this might suggest something that could cause Declude
to crash.  In the old days where these files were mostly stored in the
spool, Declude could crash gracefully.  Now with Declude moving everything
out of the spool, if it crashes, it will then start up and crash again.  I
believe that this is probably not a good way to construct the product if at all
possible.

In the older Decludes the crash recovery was automatic unless a message landed
in overflow that could cause it to crash.  I would recommend that Declude
keep files in the spool if at all possible.  This means instead of moving
Q files to a proc folder, they just be locked and left in the spool
folder.  That way the chances of a crash taking down the system will be
much less.

I consider this to be very, very important if Declude is going to start running
as a service.  You can't create the possibility of a crash that can
repeatedly take down the service if it is avoidable.  If this crash was caused
by Declude not being able to properly parse a malformed message, there are
likely many other ways to also crash it even if this one issue is
resolved.  This might also be the reason why I am not seeing these in my
Hold file...Declude 2.0.6.16 might be crashing when trying them, but it isn't a
service so it chugs on.

There are other possible solutions besides keeping things in the spool. 
One might also be changing the name of the Q file as a first step, and not
bothering to reprocess files that don't appear with their original name. 
Naturally I'm not totally sure about how everything works, so I'm sure that
there could be even other much better ways to resolve this.

Declude as a service also could use a mechanism for restarting itself when
called by IMail so that crashes are self-recoverable.  I would imagine
that if decludeproc.exe is called and it isn't running as a service, it should
be able to start itself.

Matt




John Tolmachoff (Lists) wrote: 

Through a time consuming process, I have apparently identified the triggerfor the problem with the decludeproc stopping and messages backing up. Attached are text files which are D files for messages that caused this. The2 times in the last 4 days that the decludeproc has stopped. Each time, oneof these files was in the work folder. After disabling the decludeproc,moving the entire contents of the work folder to a temp folder, then feedingone pair of files to the proc folder at a time, I was able to isolate it tothese. Each one of the 3 is identical in the included characters and bodyformatting. I would ask that any one else having this problem please check and see ifyou have any of these kind of files stuck in the work folder. If you need any help in figuring this out, please let me know. If we can all confirm this, Declude will be able to fix the problem thatfaster. John TeServices For You     



 Received: from mail.bddtb.com [218.187.44.83] by mail.eservicesforyou.net  (SMTPD-8.20) id A77A0614; Fri, 23 Sep 2005 15:53:46 -0700Received: (qmail 31553 invoked by uid 540); 24 Sep 2005 00:55:52 +0900Date: 24 Sep 2005 00:55:52 +0900Message-ID: <[EMAIL PROTECTED]>From: [EMAIL PROTECTED]To: [EMAIL PROTECTED]Subject:  $B%-%d%s%Z!<%sCGB37hDj(B! $B!z!z!z1|MM%i%s%A(B1$B1_%-%d%s%Z!<%s!z!z!z(B $B$49%I>D:$$$F$$$k1|MM%i%s%A%-%d%s%Z!<%s(B$B;R6!C#$N2F5Y$_$b=*$o$j$h$j$$$C$=$&3hF0E*$J?M:JC#!y(B$B$=$s$J?M:JC#$K(B100pt$B!\EEOCG'&g

RE: [Declude.JunkMail] Gmail

[John Tolmachoff \(Lists\)]

Thanks.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dan
> Sent: Saturday, September 24, 2005 1:59 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Gmail
> 
> John,
> 
> The REVDNS entries I've seen all show [a letter]proxy.gmail.com, so a
> second entry shouldn't be needed but .google.com couldn't hurt.  If
> you need to use @, make it
> 
> @gmail.com.gmail.com
> 
> 
> Dan
> 
> 
> 
> On Sep 24, 2005, at 12:16, John Tolmachoff ((Lists)) wrote:
> 
> > Does any one know what the SpamDomains entries should be for
> > @gmail.com?
> >
> > John T
> > eServices For You
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] declude - cnn.com email alerts

[John Tolmachoff \(Lists\)]

Looks like it might end with .turner.com.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Travis Sullivan
> Sent: Saturday, September 24, 2005 2:05 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] declude - cnn.com email alerts
> 
> anyone know of the REVDNS server that send out CNN's email alerts?  I
wanted
> to score it -40 until I figure out why they are not getting through.
> 
> thanks,
> Travis
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

FW: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A

[John Tolmachoff \(Lists\)]

Sorry to disappoint you Joseph, but your spam filtering software obviously
needs work.

No, I will not follow the link.

Challenge/Response is just bad.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Saturday, September 24, 2005 1:46 PM
> To: John Tolmachoff (Lists)
> Subject: Re: [Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A
> 
> John Tolmachoff (Lists),
> 
> This is Joseph Trimboli, System Administrator, Cyberlink, Inc. I am
running Spam
> Interceptor to get rid of junk email. Please follow this link to verify
that the message
> you sent me isn't junk email.
> 
> http://si20.com/auth?uid=2600&mid=1260&sid=johnlist%40eservicesforyou.com
> 
> Your email was intercepted because it got a spam rating of 3.5 and I set
Spam
> Interceptor to ask everyone who sends me a message rated over 2 to
authenticate.
> When you authenticate I'll receive your email and you'll never have to
authenticate for
> me again, no matter what spam rating your emails get.
> 
> Thanks,
> Joseph Trimboli, System Administrator, Cyberlink, Inc
> 
> ___
> For more information on Spam Interceptor go to http://si20.com

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Beta 3.0.4.4 update 09/24/05A

[John Tolmachoff \(Lists\)]

Through a time consuming process, I have apparently identified the trigger
for the problem with the decludeproc stopping and messages backing up.

Attached are text files which are D files for messages that caused this. The
2 times in the last 4 days that the decludeproc has stopped. Each time, one
of these files was in the work folder. After disabling the decludeproc,
moving the entire contents of the work folder to a temp folder, then feeding
one pair of files to the proc folder at a time, I was able to isolate it to
these. Each one of the 3 is identical in the included characters and body
formatting.

I would ask that any one else having this problem please check and see if
you have any of these kind of files stuck in the work folder.

If you need any help in figuring this out, please let me know.

If we can all confirm this, Declude will be able to fix the problem that
faster.

John T
eServices For You


Received: from mail.bddtb.com [218.187.44.83] by mail.eservicesforyou.net
  (SMTPD-8.20) id A77A0614; Fri, 23 Sep 2005 15:53:46 -0700
Received: (qmail 31553 invoked by uid 540); 24 Sep 2005 00:55:52 +0900
Date: 24 Sep 2005 00:55:52 +0900
Message-ID: <[EMAIL PROTECTED]>
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject:  $B%-%d%s%Z!<%sCGB37hDj(B!

$B!z!z!z1|MM%i%s%A(B1$B1_%-%d%s%Z!<%s!z!z!z(B

$B$49%I>D:$$$F$$$k1|MM%i%s%A%-%d%s%Z!<%s(B
$B;R6!C#$N2F5Y$_$b=*$o$j$h$j$$$C$=$&3hF0E*$J?M:JC#!y(B
$B$=$s$J?M:JC#$K(B100pt$B!\EEOCG'>Z!a(B900pt$B!a(B1$B1_L5NA%]%$%s%H$r;[EMAIL
 PROTECTED](B
http://www.blazeblow.net/?num=0303
$B2F$N4V;R6!C#$N2F5Y$_$N0Y<+J,$N;~4V$,;W$&$h$&$Ke>:EPO?Cf(B!!!

$BL5NA%]%$%s%H$r>ehttp://www.blazeblow.net/?num=0303









$BG[?.5qH]$O$3$A$i$N%"%I%l%9$^$G$*4j$$$7$^$9!#(B
$B!!(B   $B"-"-"-"-(B
   $B!!([EMAIL PROTECTED]
---
Please inform the following address 
if this mail is unnecessary. [EMAIL PROTECTED]

Received: from mail.bvvnb.com [218.187.44.117] by mail.eservicesforyou.net
  (SMTPD-8.20) id AFDA0394; Fri, 23 Sep 2005 17:37:46 -0700
Received: (qmail 31945 invoked by uid 509); 24 Sep 2005 02:08:29 +0900
Date: 24 Sep 2005 02:08:29 +0900
Message-ID: <[EMAIL PROTECTED]>
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject:  $B%-%d%s%Z!<%sCGB37hDj(B!

$B!z!z!z1|MM%i%s%A(B1$B1_%-%d%s%Z!<%s!z!z!z(B

$B$49%I>D:$$$F$$$k1|MM%i%s%A%-%d%s%Z!<%s(B
$B;R6!C#$N2F5Y$_$b=*$o$j$h$j$$$C$=$&3hF0E*$J?M:JC#!y(B
$B$=$s$J?M:JC#$K(B100pt$B!\EEOCG'>Z!a(B900pt$B!a(B1$B1_L5NA%]%$%s%H$r;[EMAIL
 PROTECTED](B
http://www.blazeblow.net/?num=0303
$B2F$N4V;R6!C#$N2F5Y$_$N0Y<+J,$N;~4V$,;W$&$h$&$Ke>:EPO?Cf(B!!!

$BL5NA%]%$%s%H$r>ehttp://www.blazeblow.net/?num=0303









$BG[?.5qH]$O$3$A$i$N%"%I%l%9$^$G$*4j$$$7$^$9!#(B
$B!!(B   $B"-"-"-"-(B
   $B!!([EMAIL PROTECTED]
---
Please inform the following address 
if this mail is unnecessary. [EMAIL PROTECTED]

Received: from mail.ikura-chan.com [218.187.44.145] by mail.eservicesforyou.net
  (SMTPD-8.20) id A58C0294; Fri, 16 Sep 2005 16:30:20 -0700
Received: (qmail 27998 invoked by uid 509); 17 Sep 2005 00:07:47 +0900
Date: 17 Sep 2005 00:07:47 +0900
Message-ID: <[EMAIL PROTECTED]>
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: $B1|MM%i%s%A(B!

$B!z!z!z(B10.000$B1_%-%c%s%Z!<%s$X(B10.000$B1_J,L5NA%"%]http://www.blazeblow.net/?num=0308
$B#O#P#E#N$7$F4V$b$J$$?7;2u67$G$9!#(B

$B2F$N$3$N;~4|K;$7$=$&$J1|MM(B!$B$G$b:G6a$O$G$O3F<+$GM=Dj$rF~$l$k;~Be(B!$B1|MM$K$b2F!y$OFCJL$J5(@a(By(^$B!<(B^)y$B3Z$7$_"v$r5a$a$F1|MMJ}$,(B
$BB3!9EPO?Cf(B!
$B!!(Bhttp://www.blazeblow.net/?num=0308

10.000$B1_J,L5NA$r>eZ$,I,MW$H$J$j$^$9!#(B








$BG[?.5qH]$O$3$A$i$N%"%I%l%9$^$G$*4j$$$7$^$9!#(B
$B!!(B   $B"-"-"-"-(B
   $B!!([EMAIL PROTECTED]
---
Please inform the following address 
if this mail is unnecessary. [EMAIL PROTECTED]

[Declude.JunkMail] Gmail

[John Tolmachoff \(Lists\)]

Does any one know what the SpamDomains entries should be for @gmail.com?

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Beta 3.0.4.4 Problem

[John Tolmachoff \(Lists\)]

I would ask that you go back to 3.0.4.4 and keep running. If you have this
problem again, please do the same think and isolate the files, then send
them to Declude along with the log files.

This was seen before and was hopefully fixed, but if you are seeing it
please continue to run 3.0.4.4 and if possible put the Declude JM log into
debug.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Kim Premuda
> Sent: Thursday, September 22, 2005 4:43 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Beta 3.0.4.4 Problem
> 
> IMail 8.05 HF3
> 
> Downloaded and installed 3.0.4.4. Message file pairs were appearing in the
'proc'
> folder, subsequently moved to 'work' folder, then dispositioned as needed.
Observed
> this for 10-15 minutes, then went about business.
> 
> Checking back, I found that the 'decludedproc.exe' service was stopped,
and that
> approximately 400 messasges were sitting in the 'proc' folder. Restarted
the service
> only to have it immediately stop. Tried serveral more times and got the
same results.
> My 'declude.cfg' file contained the following:
> 
>THREADS   5
>WAITFORMAIL 1
>WAITFORTHREADS   1500
>WAITBETWEENTHREADS  1
> 
> 
> Since this was a similar situation as before, I stopped the
'decludeproc.exe' and IMail
> services, then copied those 400 messages to a temporary folder.
Uninstalled 3.0.4.4
> and re-installed 3.0.3, and started everything up. Grabbed the first 5
message file
> pairs in the temporary folder and put them in the 'proc' folder. I watched
them get
> transferred to the 'work' folder. Within 30 seconds, the 'decludeproc.exe'
version
> 3.0.3 stopped. I attempted to restart the service serveral times, but it
would
> immediately stop. Copied the 5 message pairs back to the temporary folder.
> 
> I made certain 'decludeproc.exe' version 3.0.3 had started. Then, starting
with the
> LAST set of 5 message file pairs in the temporary folder, copied them to
the 'proc'
> folder and watched them get processed. After 5 sets (and slowly working my
way
> back to the top were the original 5 message file pairs are), thought I
better post this
> to warn others.
> 
> When (and if) I determine which file is causing both versions 3.0.3 and
3.0.4.4 to
> stop, I will send it and the log files to Declude for analysis.
> 
> --
> Kim W. Premuda
> FastWave Internet Services
> San Diego, CA
> 
> --
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted

[John Tolmachoff \(Lists\)]

David, too clarify, is that THREAD or THREADS? Originally it was THREAD.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of David Barker
> Sent: Thursday, September 22, 2005 9:00 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted
> 
> WAITFORTHREADS  1500
> WAITBETWEENTHREADS  1
> 
> Are the suggested defaults
> 
> David B
> www.declude.com
> 
> PS. Darrell, I will answer your question shortly, just waiting on some
> feedback from developers.
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Robert
Grosshandler
> Sent: Thursday, September 22, 2005 11:59 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted
> 
> Are these the suggested defaults?
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
> Sent: Thursday, September 22, 2005 10:41 AM
> To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
> Subject: [Declude.JunkMail] Declude Beta 3.0.4.4 Posted
> 
> 2 new Directives
> 
> WAITFORTHREADS  1500
> Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5
seconds
> this can be changed so that when the maximum threads are in use this time
> specifics the wait before checking to launch more threads.
> 
> WAITBETWEENTHREADS 1
> Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond
> The time to wait between spawning one thread and starting to process
another
> thread.
> 
> David B
> www.declude.com
> 
> ---
> [This E-mail scanned for viruses by Declude Virus]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Way OT: Server Room Cooling

[John Tolmachoff \(Lists\)]

Sunpentown units are very good, and are supposed to be efficient on water
collection, meaning there is not supposed to be as much drainage. They do
have a tank and a drain.

www.spt-usa.com

You can usually get them at a discounted price on eBay from a reseller, but
they are all shipped directly from the manufacturers warehouse here in City
of Industry, CA. Also, if you are in Southern California, you can then will
call them.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Cris Porter
> Sent: Wednesday, September 21, 2005 7:00 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Way OT: Server Room Cooling
> 
> Can anyone recommend a portable air conditioner to
> cool a 8'x10' server closet ?
> 
> I'll have to vent it up thru a drop ceiling and I'm
> trying to find something that doesn't require frequent
> draining.
> 
> Thanks,
> Cris Porter
> JVC America
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] UPGRADE REPEAT

[John Tolmachoff \(Lists\)]

FYI, it appears the Beta may be wrapping up soon. So if you can, maybe wait
a week or two for version 3.x.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
> Sent: Wednesday, September 21, 2005 6:20 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] UPGRADE REPEAT
> 
> Kevin,
> 
> The version that is compatible with 8.2x is going to be Declude version
3.0
> which is still in beta testing.  Although others have ran the 2.0.6 train
> with no issues under 8.2x - however others have not been so fortunate.
> Upgrading to the 2.0.6 install is fairly easy.  Just run a manual install
> and copy over the new declude.exe to the imail directory.  You might also
> want to go through the global.cfg for 2.0.6 and add any of the tests to
your
> global.cfg that are missing.  The installation for 3.0 is a little more
> involved.  If you wanted to go that route you would need to sign up for
the
> beta program.  However, from reading your post it sounds like you might
not
> be interested in the beta program.
> 
> Let us know if you need anymore help,
> Darrell
>  -
> DLAnalyzer - Comprehensive reporting for Declude Junkmail and Virus.
> http://www.invariantsystems.com
> 
> Kevin Shimwell writes:
> 
> > Declude Teammates
> >
> > Well after several month of not wanting to upgrade. Here goes.
> >
> > Current Imail version  8.21. running 1 month inluding beta.
> > Colaberation Suite IM running also. ( only the IM service portion)
> >
> >
> > Currrent declude version Declude 1.79 (C) Copyright 2000-2004
Computerized
> > Horizons.
> >
> > I also have Processor issues but have been manageable.
> >
> > I have a current service agreement with declude and want to upgrade to
the
> > most current declude.exe version.
> > What should  my procedure be? and what to look out for.
> > Any helpful links or documentation including wise declude professional
> > opinions welcome.
> >
> > I'm running window 2000 server latest patches and I wan to upgrade my
> > declude.
> > I'm running version:
> > E:\IMail>declude -diag
> > Declude 1.79 (C) Copyright 2000-2004 Computerized Horizons.
> > Diagnostics ON (Declude v1.79).
> > Declude JunkMail:  Config file found (E:\IMail\Declude\global.CFG).
> > Declude Virus: Config file found (E:\IMail\Declude\Virus.CFG).
> > Declude Hijack:Not installed (no E:\IMail\Declude\Hijack.CFG file).
> > Declude Confirm:   Not installed (no E:\IMail\Declude\Confirm.CFG file).
> > 50 spam tests defined: AHBL BLITZEDALL CBL DSBL ORDB SBL SORBS-HTTP
> > SORBS-SOCKS
> > SORBS-MISC SORBS-SMTP SORBS-SPAM SORBS-WEB SORBS-BLOCK SORBS-
> ZOMBIE
> > SORBS-DUHL S
> > PAMCOP DSN NOABUSE NOPOSTMASTER BONDEDSENDER BADHEADERS BASE64
> CMDSPACE
> > COMMENTS
> >  HELOBOGUS IPNOTINMX MAILFROM NOLEGITCONTENT PERCENT REVDNS
> ROUTING
> > SPAMHEADERS
> > IPLINKED IPLINKED2 MYFILTER KILLFROM SUBJECTFILTER BODYFILTER GIBBERISH
> > ANTI-GIB
> > BERISH SNIFFER WEIGHT10 WEIGHT20 WEIGHT1-10 WEIGHT11-20 WEIGHT21-34
> > WEIGHT35-45
> > WEIGHT46-200 CATCHALLMAILS WHITLIST
> >
> > IMail reports Official Host Name as: "scooby.linkbrokers.com".
> > IMail's SendName registry seems OK:  "E:\IMail\declude.exe".
> > DNS Server: 66.153.205.8
> >
> > Declude JunkMail Status: PRO version registered.
> > Declude Virus Status:Pro Version Registered.
> > Declude Hijack Status:   NOT REGISTERED: No activation code.
> >
> >
> > Kevin Shimwell
> > Link Brokers Group, LLC  ( Support )
> > 1600 Hwy 17 South
> > North Myrtle Beach, SC 29582
> > Phone: 843-663-1004
> > Fax: 843-663-1007
> > Email:  [EMAIL PROTECTED]
> > 24/7 Help : 
> > http://www.linkbrokers.com/help_ticket.cfm
> > Support Forum:
> > http://www.linkbrokers.com/chatboard/index.cfm?CFB=1
> > Support M-F  1-888-546-5631
> >
> > This message is intended only for the use of the individual or entity
> > towhich it is addressed and may contain information that is privileged,
> > confidential and exempt from disclosure under applicable law. If the
reader
> > of this message is not the intended recipient or the employee or agent
> > responsible for delivering the message to the intended recipient, you
are
> > hereby notified that any dissemination, distribution or copying of this
> > communication is strictly prohibited. If you have received this
> > communication in error, please notify us immediately by telephone and/or
> > e-mail.
> >
> >
> 
> 
> 
>  
> Check out http://www.invariantsystems.com for utilities for Declude And
> Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG
> Integration, and Log Parsers.
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> 

RE: [Declude.JunkMail] Problem with a per domain filter file

[John Tolmachoff \(Lists\)]

Responding to 3 responses:

Thanks, I had a feeling it was the ALLRECIPS, but it appears there is no
other variable to use for the recipient. I guess I could use NOTCONTAINS
instead of NOTENDSWITH.

I was hoping for an exact match as possible.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Problem with a per domain filter file

[John Tolmachoff \(Lists\)]

I have created filter files for each domain that warrants them to counteract
tests failed because of keywords or other things some what unique to that
domain.

Here is the END line in the filter:

ALLRECIPS   END NOTENDSWITH local-domain.com

However, in the log lines below, you can see that the processing of the
filter file ended saying the END condition was meet, but it was not.

09/21/2005 00:21:41.306 q09ef03ec22c5.smd Doing filter file
C:\Imail\Declude\filters\A_Local_Domain.txt.
09/21/2005 00:21:41.306 q09ef03ec22c5.smd Triggered ALLRECIPS !ENDSWITH
filter DOMAIN_C on local-domain.com [weight->0; <[EMAIL PROTECTED]>,
<[EMAIL PROTECTED]
09/21/2005 00:21:41.306 q09ef03ec22c5.smd Filter: END command conditions
met; ending this filter.

Can some one see where I am doing something wrong?

John T
eServices For You



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude Beta Experience update

[John Tolmachoff \(Lists\)]

Hate to be the bearer of bad news, but participating in a Beta requires
active participation, meaning if you notice a problem, you need to take
steps to gather information surrounding that problem. 

Did you read my posts about the beta, and did you take any steps that I did?

The point of a public beta is for wide spread use to find bugs. Well, how
can you participate in a beta if you are not going to take steps to gather
information and logs about the issue and submit them to Declude so it can
help them find the problems, which is exactly what a beta is for.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster
> Sent: Tuesday, September 20, 2005 7:09 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Declude Beta Experience update
> 
> After previous failed attempts to install the new beta, we waited awhile
> this time after the last release of the decludeproc;  we tried to
re-install
> this morning and as soon as we did, the decludeproc service jumped to 90%+
> consistantly; I tried adjusting the THREADS value in the declude.cfg file,
> but this did not help
> 
> Mail processing was very slow; only a few messages went out; most were
kept
> in the proc directory
> 
> After 15 minutes, we had accumulated over 500 messages so we reverted back
> to the previous version of declude we were using (2.0.x) and moved all
.smd
> files back to the spool directory and service is back to normal again
> 
> 
> 
> Sincerely,
> 
> Support Department
> Global Web SolutionsR, Inc.
> 804-346-5300 x112
> 877-800-GLOBAL (4562) x112
> http://globalweb.net
> 
> 
> "Global Web Solutions" is a registered trademark of Global Web Solutions,
> Inc.,  Glen Allen, VA
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Beta 3.0.4

[John Tolmachoff \(Lists\)]

Stopped Imail SMTP and QueueManger services.
Removed all files in the proc folder to a temp folder.
Restarted the DecludeProc service
Moved 1 set of files in at a time and watched what happened.

All good ones were processed. The problem ones just sat there.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Kim Premuda
> Sent: Saturday, September 17, 2005 3:05 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Beta 3.0.4
> 
> Hi, John.
> 
> Just curious...
> 
> What method did you use to determine that those 4 messages were causing
the
> 'decludeproc.exe' service to unexpectedly stop? I would like to be able to
send
> Declude the messages in our 'proc' folder that are causing the same
problem here.
> 
> Regards,
> 
> Kim
> 
> 
> -- Original Message --
> From: "John Tolmachoff \(Lists\)" <[EMAIL PROTECTED]>
> 
> >The problem appears to be caused/centered/triggered/co-incidental to 4
spam
> >messages. Also, a large Dr Watson log file and dmp were created when this
> >happened. After isolating these messages, stopping the Imail SMTP,
> >QueueManager services, disabling and stopping the decludeproc service,
> >clearing both the proc and proc\work directories of everything, then
> >reenabling the decludeproc service and restarting the SMTP and
QueueManger
> >services, the server is running as expected.
> 
> 
> --
> Kim W. Premuda
> FastWave Internet Services
> San Diego, CA
> 
> --
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Beta 3.0.4

[John Tolmachoff \(Lists\)]

More information:

The problem appears to be caused/centered/triggered/co-incidental to 4 spam
messages. Also, a large Dr Watson log file and dmp were created when this
happened. After isolating these messages, stopping the Imail SMTP,
QueueManager services, disabling and stopping the decludeproc service,
clearing both the proc and proc\work directories of everything, then
reenabling the decludeproc service and restarting the SMTP and QueueManger
services, the server is running as expected.

I also trimmed my THREADS to 5. 

I will be sending the suspected message files, logs and dr Watson to Declude
for review.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
> Sent: Friday, September 16, 2005 4:44 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Beta 3.0.4
> 
> I am confirming this is occurring in 3.0.4.1 as well. 3.0.4.1 was sent to
me
> to hopefully fix this. In my case, I am getting error lines in the Virus
> log, left over .vir directories, misplaced log lines, (JM line in the
virus
> log and hijack log) and events in the windows event log.
> 
> John T
> eServices For You
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Kim Premuda
> > Sent: Friday, September 16, 2005 4:01 PM
> > To: Declude JunkMail Forum
> > Subject: [Declude.JunkMail] Beta 3.0.4
> >
> > IMail 8.05 HF3
> >
> > After installing JunkMail beta 3.0.4 (for IMail) this morning,
everything
> seemed to be
> > working. That is, I could see the THREAD requisite number of d*.smd and
> q*.smd file
> > pairs being moved to the 'proc\work' folder, whereupon they would get
> processed and
> > disappear. I visually monitored this for several minutes, then decided
to
> go about
> > business.
> >
> > When I returned to check, I discovered that the 'decludeproc.exe'
service
> had
> > stopped. When I restarted the service, I could see file pairs being
> processed until the
> > service again stopped. I repeated this procedure 10-15 times. Determined
> to keep the
> > service running, I set the service's recovery mode to 'Restart the
> service' on all
> > failures; this made no difference.
> >
> > There are no service stop items logged in the Event Viewer for
> 'decludeproc.exe', only
> > start items. Also, I was running JunkMail in DEBUG mode, but things look
> normal (I'm
> > not certain what to look for specifically).
> >
> > Observation: The THREADS value was initially set to 25 and this seemed
to
> keep the
> > service running for about 45 seconds or so. As I incrementally lowered
the
> THREADS
> > value, the 'decludeproc.exe' service would stop sooner, around 5-10
> seconds with a
> > THREADS value of 10.
> >
> > I ended up reverting to 3.0.3 to get things moving again.
> >
> > Kim
> >
> >
> > --
> > Kim W. Premuda
> > FastWave Internet Services
> > San Diego, CA
> >
> > --
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Beta 3.0.4

[John Tolmachoff \(Lists\)]

I am confirming this is occurring in 3.0.4.1 as well. 3.0.4.1 was sent to me
to hopefully fix this. In my case, I am getting error lines in the Virus
log, left over .vir directories, misplaced log lines, (JM line in the virus
log and hijack log) and events in the windows event log. 

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Kim Premuda
> Sent: Friday, September 16, 2005 4:01 PM
> To: Declude JunkMail Forum
> Subject: [Declude.JunkMail] Beta 3.0.4
> 
> IMail 8.05 HF3
> 
> After installing JunkMail beta 3.0.4 (for IMail) this morning, everything
seemed to be
> working. That is, I could see the THREAD requisite number of d*.smd and
q*.smd file
> pairs being moved to the 'proc\work' folder, whereupon they would get
processed and
> disappear. I visually monitored this for several minutes, then decided to
go about
> business.
> 
> When I returned to check, I discovered that the 'decludeproc.exe' service
had
> stopped. When I restarted the service, I could see file pairs being
processed until the
> service again stopped. I repeated this procedure 10-15 times. Determined
to keep the
> service running, I set the service's recovery mode to 'Restart the
service' on all
> failures; this made no difference.
> 
> There are no service stop items logged in the Event Viewer for
'decludeproc.exe', only
> start items. Also, I was running JunkMail in DEBUG mode, but things look
normal (I'm
> not certain what to look for specifically).
> 
> Observation: The THREADS value was initially set to 25 and this seemed to
keep the
> service running for about 45 seconds or so. As I incrementally lowered the
THREADS
> value, the 'decludeproc.exe' service would stop sooner, around 5-10
seconds with a
> THREADS value of 10.
> 
> I ended up reverting to 3.0.3 to get things moving again.
> 
> Kim
> 
> 
> --
> Kim W. Premuda
> FastWave Internet Services
> San Diego, CA
> 
> --
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] 3.0.4

[John Tolmachoff \(Lists\)]

Ya know, I thought about asking about that, but said nah, no one could do
some thing dumb like I did.

;)

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Kim Premuda
> Sent: Friday, September 16, 2005 11:36 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] 3.0.4
> 
> Gawck! At first, I thought "No way did I do that!", but I hadn't closed
the browser
> session to the Declude beta site. Upon checking, I was astounded to find
that I did,
> indeed, download the SmarterMail version of 'decludeproc.exe' (it was
still
> highlighted)...3 TIMES OVER THE PAST TWO DAYS and didn't even notice!
> 
> After downloading and installing the IMail version of 'decludeproc.exe'
version 3.0.4,
> things look to be running normally.
> 
> My apologies to the list (and Declude) for the 'false' reports, and thanks
to the Ncl
> admin for pointing this out.
> 
> Kim
> 
> 
> -- Original Message --
> From: Ncl Admin <[EMAIL PROTECTED]>
> 
> >If files are not moving from proc to work make sure you downloaded the
> >right version, I grabbed smartermail version this AM and it does exactly
> >nada under Imail.  Duh. Got the Imail version and of course its running
now.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc' Folder

[John Tolmachoff \(Lists\)]

Download the DecludeProc.exe again from the site. Maybe something went wrong
there. 

The version of Imail should make no difference in the processing as it is
definitely being handed to declude.exe.

Do you have a Declude.cfg file in the Imail\Declude folder? Try putting 
"WAITFORMAIL1" 
in there.

Again, try putting the log into DEBUG mode during the test.

Maybe the server needs a kick? ;)

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Kim Premuda
> Sent: Friday, September 16, 2005 8:30 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc'
Folder
> 
> Hi, John.
> 
> Yeah...did all that, except running the JunkMail log in 'HIGH' mode. So, I
re-ran the
> test this morning with the log mode set to 'HIGH'. I ran the test between
7:10A and
> 7:20A.
> 
> At the start of the test, both the 'proc' and the 'proc\work' folders were
empty. As the
> test progressed, the 'proc' folder began to fill with 'd*.smd' and
'q*.smd' files. The
> 'proc\work' folder remained empty during the entire 10 minute test. I
could also see
> the 'decludeproc.exe' service running in Task Manager, but it was running
with a
> minimum of CPU usage.
> 
> At the end of the test, reverted back to 3.0.3, and all the backlog in the
'proc' folder
> was immediately processed. That is, I could see the files in the 'proc'
folder being
> moved to the 'proc\work' folder, whereupon they would subsequently
disappear
> (presumably deleted, held, or moved to the 'spool' folder).
> 
> Upon examining the JunkMail log file, note that there is a gap of
information during
> the test time period:
> 
>09/16/2005 07:07:20.515 qd16d0f3f0048a1ec From:
[EMAIL PROTECTED]
> To: [EMAIL PROTECTED]  IP: 72.26.215.59 ID:
>09/16/2005 07:07:20.515 qd16d0f3f0048a1ec Action(s) taken for
> [EMAIL PROTECTED] = WHITELISTED [LAST ACTION=WHITELISTED]
>09/16/2005 07:07:20.515 qd16d0f3f0048a1ec Cumulative action(s) taken on
this
> email = IGNORE  [LAST ACTION=IGNORE]
>09/16/2005 07:22:55.015 qd31201ec029c0f5f Tests failed [weight=39]:
> NOPOSTMASTER=WARN[1] SNIFFER=WARN[20] CMDSPACE=WARN[8]
> IPNOTINMX=IGNORE[0] NOLEGITCONTENT=IGNORE[0] ROUTING=WARN[2]
> WEIGHT10=HOLD[10] WEIGHT17=DELETE[17] WEIGHT20=DELETE[20]
> CATCHALLMAILS=IGNORE[0] TLD-TRUSTED-MAILFROM=WARN[0] DRUGS-
> MEDICATIONS=WARN[8]
>09/16/2005 07:22:55.500 qd31201ec029c0f5f Action(s) taken for
> [EMAIL PROTECTED] = IGNORE WARN HOLD DELETE  [LAST ACTION=DELETE]
>09/16/2005 07:22:56.078 qd31201ec029c0f5f Cumulative action(s) taken on
this
> email = IGNORE WARN HOLD DELETE  [LAST ACTION=DELETE]
>09/16/2005 07:22:53.218 qd2de00f6024c43a2 Tests failed [weight=24]:
> SNIFFER=WARN[20] IPNOTINMX=IGNORE[0] NOLEGITCONTENT=IGNORE[0]
> REVDNS=WARN[4] WEIGHT10=HOLD[10] WEIGHT17=DELETE[17]
> WEIGHT20=DELETE[20] CATCHALLMAILS=IGNORE[0] TLD-TRUSTED-HELO=WARN[0]
> TLD-TRUSTED-MAILFROM=WARN[0] TLD-TRUSTED-REVDNS=WARN[0]
> 
> Is this another sign that the 'decludeproc.exe' was not doing anything?
Also, please
> remember, we are using the older IMail 8.05 HF3, and that our results can
definitely
> be different from yours.
> 
> With regards,
> 
> Kim
> 
> 
> -- Original Message --
> From: "John Tolmachoff \(Lists\)" <[EMAIL PROTECTED]>
> Reply-To: Declude.JunkMail@declude.com
> Date:  Thu, 15 Sep 2005 23:56:18 -0700
> 
> >I am sure you did, but let's check.
> >
> >Did you stop the Imail SMTP service, stop the Imail Queue Manager
service,
> >wait for both the proc and work folders to be empty, stop the DecludeProc
> >service, copy in the new decludeproc.exe file, start the DecludeProc
> >service, start the Imail Queue Manager service, start the Imail SMTP
server,
> >put the Declude JM log into Debug mode for say 15 mintues and then review
> >the log to see what happened?
> >
> >John T
> >eServices For You
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc' Folder

[John Tolmachoff \(Lists\)]

And yes, as of midnight my time, I am running 3.0.4 and it is working as
expected so far.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
> Sent: Thursday, September 15, 2005 11:56 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc'
Folder
> 
> I am sure you did, but let's check.
> 
> Did you stop the Imail SMTP service, stop the Imail Queue Manager service,
> wait for both the proc and work folders to be empty, stop the DecludeProc
> service, copy in the new decludeproc.exe file, start the DecludeProc
> service, start the Imail Queue Manager service, start the Imail SMTP
server,
> put the Declude JM log into Debug mode for say 15 mintues and then review
> the log to see what happened?
> 
> John T
> eServices For You
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Kim Premuda
> > Sent: Thursday, September 15, 2005 5:27 PM
> > To: Declude JunkMail Forum
> > Subject: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc'
> Folder
> >
> > IMail 8.05 HF3
> >
> > I installed the JunkMail beta 3.0.4, and had the same results as with
> 3.0.3.8. That is,
> > the 'decludeproc.exe' service was running (as indicated by Task
Manager),
> however,
> > nothing was being processed ('decludeproc.exe' was near the bottom of
the
> Task
> > Manager list when sorted by CPU time, and no external files like Sniffer
> running). Files
> > were being added to the 'proc' directory, but the 'proc\work' directory
> remained
> > empty. Let things run this way for approximately 15 minutes, then
reverted
> back to
> > version 3.0.3. Once 3.0.3 was up and running, the files in the 'proc'
> directory were
> > immediately processed ('decludeproc.exe' at or near the top 5 entries in
> Task
> > Manager, Sniffer executables now showing in Task Manager, backlog of
files
> in 'proc'
> > folder are gone).
> >
> > Kim W. Premuda
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc' Folder

[John Tolmachoff \(Lists\)]

I am sure you did, but let's check.

Did you stop the Imail SMTP service, stop the Imail Queue Manager service,
wait for both the proc and work folders to be empty, stop the DecludeProc
service, copy in the new decludeproc.exe file, start the DecludeProc
service, start the Imail Queue Manager service, start the Imail SMTP server,
put the Declude JM log into Debug mode for say 15 mintues and then review
the log to see what happened?

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Kim Premuda
> Sent: Thursday, September 15, 2005 5:27 PM
> To: Declude JunkMail Forum
> Subject: [Declude.JunkMail] Beta 3.0.4 not Processing Files in 'proc'
Folder
> 
> IMail 8.05 HF3
> 
> I installed the JunkMail beta 3.0.4, and had the same results as with
3.0.3.8. That is,
> the 'decludeproc.exe' service was running (as indicated by Task Manager),
however,
> nothing was being processed ('decludeproc.exe' was near the bottom of the
Task
> Manager list when sorted by CPU time, and no external files like Sniffer
running). Files
> were being added to the 'proc' directory, but the 'proc\work' directory
remained
> empty. Let things run this way for approximately 15 minutes, then reverted
back to
> version 3.0.3. Once 3.0.3 was up and running, the files in the 'proc'
directory were
> immediately processed ('decludeproc.exe' at or near the top 5 entries in
Task
> Manager, Sniffer executables now showing in Task Manager, backlog of files
in 'proc'
> folder are gone).
> 
> Kim W. Premuda
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Beta 3.0.3.8 update

[John Tolmachoff \(Lists\)]

I have been running the latest beta for about 9 hours now.

The previously reported problem by me with false triggers on External tests
appears to be resolved.

Currently, Hijack is not working reporting can not find Declude Console.
Declude is aware of this and working on it.

Windows Server 2000
Imail 8.20 hf2
F-Prot
AVG
BitDefender
1 1Ghz CPU
1 G memory

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4

[John Tolmachoff \(Lists\)]

> 1. The only Beta that should currently be running is 3.0.3.7 you should
not
> be reverting to a previous version of the Beta at this point.

I said to a pre 3.x version which is what that means. Pre means before.

> 4. Your concern of the external tests working incorrectly is currently
being
> looked at and should have a response hopefully today.

Not a concern, a fact. When in debug mode Declude logs that the exit code of
the external application was 0 but yet records that exit code of 0 as a
trigger is a factual problem.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Filter idea!

[John Tolmachoff \(Lists\)]

I do not know why I did not think of this before. Of course, knowing my
fortune, many of you probably already figured this out.

It appears that using IS to check the subject line has always been iffy.

I thought of a solution: Use ENDSWITH instead of IS.

Just an FYI.

John T
eServices For You



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4

[John Tolmachoff \(Lists\)]

An update: There is a known problem with external tests and Declude 3.0.3.x.
They are aware of it and are working on it.

It is recommended if you are using an external program, you should revert to
a pre 3.x version for now.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
> Sent: Monday, September 12, 2005 10:19 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Major problem with External tests and Beta
3.0.3.4
> 
> All tests finished within seconds.
> 
> John T
> eServices For You
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
> > Sent: Monday, September 12, 2005 9:06 AM
> > To: Declude.JunkMail@declude.com
> > Subject: Re: [Declude.JunkMail] Major problem with External tests and
Beta
> 3.0.3.4
> >
> > John,
> >
> > One of the other bugs I have seen is if a process takes more than 5
> minutes
> > to complete and is configured as a "weight" test and Declude terminates
it
> > they use the OS result code of "259" as the returned weight instead of
> > defaulting to zero.
> >
> > Darrell
> >
> >
> > John Tolmachoff (Lists) writes:
> >
> > > FYI to all running the Beta, I have reviewed and verified a problem
> brought
> > > to my attention by Kami.
> > >
> > > It appears that some times, even though the external test is reporting
> an
> > > exit code of 0, DecludeJM is treating it as a fail and adding the
> configured
> > > weight.
> > >
> > > This goes for both positive weights like Sniffer and invURIBL and
> negative
> > > weights like AutoWhite for Declude.
> > >
> > > Declude support and beta have been notified.
> > >
> > > John T
> > > eServices For You
> > >
> > >
> > > ---
> > > This E-mail came from the Declude.JunkMail mailing list.  To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.JunkMail".  The archives can be found
> > > at http://www.mail-archive.com.
> >
> >
> >
> >

> > Check out http://www.invariantsystems.com for utilities for Declude And
> > Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
> MRTG
> > Integration, and Log Parsers.
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4

[John Tolmachoff \(Lists\)]

All tests finished within seconds.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
> Sent: Monday, September 12, 2005 9:06 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Major problem with External tests and Beta
3.0.3.4
> 
> John,
> 
> One of the other bugs I have seen is if a process takes more than 5
minutes
> to complete and is configured as a "weight" test and Declude terminates it
> they use the OS result code of "259" as the returned weight instead of
> defaulting to zero.
> 
> Darrell
> 
> 
> John Tolmachoff (Lists) writes:
> 
> > FYI to all running the Beta, I have reviewed and verified a problem
brought
> > to my attention by Kami.
> >
> > It appears that some times, even though the external test is reporting
an
> > exit code of 0, DecludeJM is treating it as a fail and adding the
configured
> > weight.
> >
> > This goes for both positive weights like Sniffer and invURIBL and
negative
> > weights like AutoWhite for Declude.
> >
> > Declude support and beta have been notified.
> >
> > John T
> > eServices For You
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> 
> 
>  
> Check out http://www.invariantsystems.com for utilities for Declude And
> Imail.  IMail/Declude Overflow Queue Monitoring, SURBL/URI integration,
MRTG
> Integration, and Log Parsers.
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Major problem with External tests and Beta 3.0.3.4

[John Tolmachoff \(Lists\)]

FYI to all running the Beta, I have reviewed and verified a problem brought
to my attention by Kami.

It appears that some times, even though the external test is reporting an
exit code of 0, DecludeJM is treating it as a fail and adding the configured
weight.

This goes for both positive weights like Sniffer and invURIBL and negative
weights like AutoWhite for Declude.

Declude support and beta have been notified.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT - iMail 7.x and Windows 2003

[John Tolmachoff \(Lists\)]

> We have been running iMail 7.07 under windows 2000.  We had some input
that
> there may be some problems in this environment.  We are not keen on
> upgrading to 8.x since IPSwitch is walking away from iMail the product.

Ipswitch is not walking away from Imail. It is still alive and well, and in
fact continues to be improved and upgraded. The next version is in active
beta as we speak. The only thing that has happened is Ipswitch no longer
sells Imail as a stand alone product. SA are still available for it.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Is there any hope running Declude with IMail 8.21???

[John Tolmachoff \(Lists\)]

I am running Declude 2.0.14 consistently on my Imail 8.21 server with no
problems that would allow viruses and spam to get through. Granted, my
server only has a volume of about 5K per day.

I am going to being running the betas as soon as I can get to that.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Timothy Bohen
> Sent: Wednesday, September 07, 2005 11:36 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Is there any hope running Declude with imail
8.21???
> 
> I really don't want to downgrade imail, but spam and viruses are getting
through. Any
> hope for having declude working with imail 8.21 any time soon?
> 
> Thanks
> 
> 
> 
> 
> __ __ __ __
> Sent via the CMS Internet Webmail system at mail1.cmsinter.net
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Sniffer Question

[John Tolmachoff \(Lists\)]

In the Global.cfg, as long as the Sniffer call line is the same except for
the return code area, Declude will only call Sniffer once and compare the
exit code to those configured.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dave Doherty
> Sent: Friday, September 02, 2005 5:19 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Sniffer Question
> 
> John, does that mean sniffer runs 17 times on each mesage, or does it
return
> multiple codes?
> 
> - Original Message -
> From: "John Tolmachoff (Lists)" <[EMAIL PROTECTED]>
> To: 
> Sent: Friday, September 02, 2005 8:02 PM
> Subject: RE: [Declude.JunkMail] Sniffer Question
> 
> 
> > Best thing is to ask on the Sniffer List.
> >
> > I actually have 17 Sniffer tests based upon exit code, with weights
> > ranging
> > from 15 to 35. I hold at 25 and delete at 35.
> >
> > John T
> > eServices For You
> >
> >
> >> -Original Message-
> >> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> >> [EMAIL PROTECTED] On Behalf Of Kevin Rogers
> >> Sent: Friday, September 02, 2005 4:37 PM
> >> To: Declude.JunkMail@declude.com
> >> Subject: [Declude.JunkMail] Sniffer Question
> >>
> >> I just setup Sniffer for the first time and I'm wondering what people
> >> have their external test weight set to.  My global.cfg came with a
> >> sniffer test already configured (though it was commented out) to have a
> >> weight of 7, which actually gives it a weight of 8 for some reason I
> >> couldn't figure out.  If you haven't made up your own weighting system
> >> (some people have their weights go up to 300 or more), what's a good
> >> weight for a failed sniffer test?  At 10, I put messages into a bulk
> >> folder, at 17 I hold them.
> >>
> >> Thanks
> >>
> >> ---
> >> [This E-mail was scanned for viruses.]
> >>
> >> ---
> >> This E-mail came from the Declude.JunkMail mailing list.  To
> >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >> type "unsubscribe Declude.JunkMail".  The archives can be found
> >> at http://www.mail-archive.com.
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> >
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] EServices AutoWhite?

[John Tolmachoff \(Lists\)]

I have responded to each e-mail, including the one you sent 15 minutes ago. 

On the phone on Wednesday, I did explain that AutoWhite is not tested in a
SmarterMail configuration.

AutoWhite for Declude does indeed look at the Imail registry for the OHN.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dave Beckstrom
> Sent: Thursday, September 01, 2005 10:32 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] EServices Autowhite?
> 
> Does anyone happen to know how Eservice's autothite program validates its
> license key against the official host name?  Does it compare to an IMAIL
> registry key or does it look somewhere else?
> 
> I run smartermail and I'm wondering if I add the IMAIL registery keys that
> contain the OHN if it wouldn't fake out Autowhite and allow it to work
with
> smartermail?
> 
> I emailed John a few times but I've not heard back from him and I'd kind
of
> like to get this going.
> 
> Thanks,
> 
> Dave
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Sniffer Question

[John Tolmachoff \(Lists\)]

Best thing is to ask on the Sniffer List.

I actually have 17 Sniffer tests based upon exit code, with weights ranging
from 15 to 35. I hold at 25 and delete at 35.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Kevin Rogers
> Sent: Friday, September 02, 2005 4:37 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Sniffer Question
> 
> I just setup Sniffer for the first time and I'm wondering what people
> have their external test weight set to.  My global.cfg came with a
> sniffer test already configured (though it was commented out) to have a
> weight of 7, which actually gives it a weight of 8 for some reason I
> couldn't figure out.  If you haven't made up your own weighting system
> (some people have their weights go up to 300 or more), what's a good
> weight for a failed sniffer test?  At 10, I put messages into a bulk
> folder, at 17 I hold them.
> 
> Thanks
> 
> ---
> [This E-mail was scanned for viruses.]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Paradise.net.nz

[John Tolmachoff \(Lists\)]

Any comments about this ISP?

It was in my bad mail file and I can not find why it was put in there.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Linked in

[John Tolmachoff \(Lists\)]

Sorry, but can't resist...

>> Any one have opinions good/bad on www.linkedin.com?
>>
> Has a lot of members I know
> 
> Barry

Is that good or bad?

;-)>

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Let the scams begin (hoping not)

[John Tolmachoff \(Lists\)]

Found in 3 held messages: (Spaces inserted in the e-mail address)

Donate a 
$1 now or $1,000 - Send donation to donate @ katrinahelpfund . com on
paypal

every little bit helps

Just a paypal account up right now, but it is all i can do with internet
up 
and down.

all funds collected will be going to a New Orleans charity.
In the next week I'll get some optinos and put them up so people can
vote 
on them.


John T
eServices For You



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Linked in

[John Tolmachoff \(Lists\)]

Any one have opinions good/bad on www.linkedin.com?

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] General Filter

[John Tolmachoff \(Lists\)]

BODY filters are generally the LAST test you want to rely on for several
reasons, including problems with encoding (such as you are witnessing) and
resources used. 

However, what concerns me is why are any actions being taken on messages
sent from one person in a domain to another person in the same domain.
Aren't they authenticating to Imail, and aren't you white listing
authenticated senders?

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Orin Wells
> Sent: Wednesday, August 31, 2005 12:11 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] General Filter
> 
> I am having a problem with a client whose email to other members of her
> domain is getting trapped by the GeneralFilter (words or phrases we have
> added because they seem to mostly appear in spam).  In this particular
case
> the triggering word seems to be P*O*R*N* without the stars.
> 
> I suspect what is happening is that the encoded attached word document
just
> happens to have this set of letters in sequence in the encrypted data that
> is attached to the email file in imail.  It does not appear in the word
> document itself.  But when I look at the raw file on the server I can see
this.
> 
> I take it from this that Declude when it scans the body of the message
also
> scans any attachment that is sitting there in the encrypted mode.  If so
is
> there a way around this?  Can I tell it not to scan the encrypted
> attachments or to expand them first?  If this sort of thing is in the
> latest Declude Junkmail manual, someone just tell me to read TFM.
> 
> 
> 
> 
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Problem with Declude 3

[John Tolmachoff \(Lists\)]

Check the Hijack logs to see if the
message might have been held. When messages are held by HOLD1 of Hijack and
then released, they are directly placed back into the spool and handed to
Imail. As such, no further processing is done by Declude, including no Declude
headers.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Horne
Sent: Wednesday, August 31, 2005 5:41 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
Problem with Declude 3

 

Yes I am running Hijack.  

 

In response to Matt's post, the services
were not restarted anywhere near the time that the messages came through. 
It came in, according to the headers I posted in the OP, at 2:14 AM.  The Decludeproc
service shut down on its own around 3:45 AM.  The server didn't reboot, and the Imail services didn't
restart for any reason until I rebooted it to swap out the decludeproc.exe
later in the day.  Looking in my inbox this morning, the problem doesn't
seem to have reoccurred since yesterday afternoon.

 







From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of John Tolmachoff (Lists)
Sent: Tuesday, August 30, 2005 6:57 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
Problem with Declude 3

Also, Dan, are you running Hijack?

 



John T

eServices For You



 

RE: [Declude.JunkMail] Problem with Declude 3

[John Tolmachoff \(Lists\)]

Also, Dan, are you running Hijack?

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Tuesday, August 30, 2005
3:00 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
Problem with Declude 3

 

Dan,

Restarting IMail's Queue Manager service, or rebooting an IMail server without
stopping the SMTP service can cause spam to be grabbed and delivered by the
Queue Manager without being processed by Declude.  You might want to check
for that.

Matt



Dan Horne wrote: 

John Tolmachoff (Lists) <> wrote on Tuesday, August 30, 2005 2:11 PM:   

Dan, I am at a client right now so I do not have the time to reviewall, but could it be an old Imail issue where since the Decludeprocess was having an issue, the QueueManager did a batch run andgrabbed the message before Declude finished it?    John TeServices For You  

-Original Message-From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-[EMAIL PROTECTED]] On Behalf Of Dan HorneSent: Tuesday, August 30, 2005 10:30 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] Problem with Declude 3 Dan Horne <> wrote on Tuesday, August 30, 2005 8:57 AM:   

I received ...    

Just wanted to let everyone know that this problem occurred and thismessage was sent before I found out about the service stopping(discussed in another thread).  However, that doesn't seem to berelated to this message, which arrived and was scanned before theservice stopped this morning.  So this is still an open issue. Dan Horne---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], and type"unsubscribe Declude.JunkMail".  The archives can be found athttp://www.mail-archive.com.  

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], and type"unsubscribe Declude.JunkMail".  The archives can be found athttp://www.mail-archive.com.   

 Could be, but the strange thing is that it happened again thisafternoon.  I got a batch of about 3 messages that didn't have anyDeclude headers.  I am only assuming the same thing happened, since I amup to my neck in SCSI device problems right now and haven't had time tolook at the logs for those messages.  Anyway what is strange about it isthat I am now running Declude 1.82, not 3. I still don't understand though how the message was delivered withoutany Declude headers, but Declude had run on the message, flagged it asspam and delivered (supposedly, I haven't actually checked) it to theroot-weight80 mailbox, which stores spam between weight 80 and 90. Thanks, Dan Horne---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.    

RE: [Declude.JunkMail] Problem with Declude 3

[John Tolmachoff \(Lists\)]

Dan, I am at a client right now so I do not have the time to review all, but
could it be an old Imail issue where since the Declude process was having an
issue, the QueueManager did a batch run and grabbed the message before
Declude finished it?

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dan Horne
> Sent: Tuesday, August 30, 2005 10:30 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Problem with Declude 3
> 
> Dan Horne <> wrote on Tuesday, August 30, 2005 8:57 AM:
> 
> > I received ...
> 
> Just wanted to let everyone know that this problem occurred and this
> message was sent before I found out about the service stopping
> (discussed in another thread).  However, that doesn't seem to be related
> to this message, which arrived and was scanned before the service
> stopped this morning.  So this is still an open issue.
> 
> Dan Horne
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] D3: Service stopped on its own, files backed up

[John Tolmachoff \(Lists\)]

> It has now been an hour and the decludeproc service has only processed
> around 1000 objects, which I believe corresponds to 500 messages.  I
> created the declude.cfg and put in THREADS 25.  I also dl'ed the newer
> decludeproc.exe, but when I went to stop the service so I could replace
> it, the service would not stop.  I had to set it to manual startup and
> reboot the server (@#$#%&* Windows).  We'll see if this improves the
> speed any.

I would recommend (which is the way it has always been recommended) to first
stop the Imail SMTP service, then stop the Imail QueueManager service, allow
all Declude processing to stop, then stop the Declude process. As long as
the Imail SMTP service it running, it will keep handing messages to Declude,
therefore Declude may not stop.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude and Smartermail?

[John Tolmachoff \(Lists\)]

This is not a Declude issue, but a SmarterMail issue.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dave Beckstrom
> Sent: Wednesday, August 24, 2005 4:18 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Declude and Smartermail?
> 
> That is a big gaping hole in my opinion.  Guess I'll look for another
> solution as I don't think I can wait for declude to get around to fixing
> this oversight.
> 
> Thanks for your feedback.
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Kevin Bilbee
> > Sent: Wednesday, August 24, 2005 3:13 PM
> > To: Declude.JunkMail@declude.com
> > Subject: RE: [Declude.JunkMail] Declude and Smartermail?
> >
> > Biggest issues is the lack of WHITELIST AUTH. I confirmed last week with
> > SMarterMail that that functionality will be available in the 3.0 version
> > du
> > out later this year.
> >
> >
> >
> > Kevin Bilbee
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED] Behalf Of Dave Beckstrom
> > > Sent: Wednesday, August 24, 2005 1:00 PM
> > > To: Declude.JunkMail@declude.com
> > > Subject: [Declude.JunkMail] Declude and Smartermail?
> > >
> > >
> > > I'm looking for some feedback on using declude with smartermail.
> > > Is anybody
> > > running that combination?
> > >
> > > How is it working and how is the performance?
> > >
> > > Have you encountered any problems or shortcomings?  Would you
recommend
> > > Declude to smartermail administrators?
> > >
> > >
> > >
> > >
> > > ---
> > > This E-mail came from the Declude.JunkMail mailing list.  To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.JunkMail".  The archives can be found
> > > at http://www.mail-archive.com.
> > >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude and SmarterMail?

[John Tolmachoff \(Lists\)]

Uh, it is not a Declude issue but rather SmarterMail does not support it.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dave Beckstrom
> Sent: Wednesday, August 24, 2005 4:18 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Declude and Smartermail?
> 
> That is a big gaping hole in my opinion.  Guess I'll look for another
> solution as I don't think I can wait for declude to get around to fixing
> this oversight.
> 
> Thanks for your feedback.
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Kevin Bilbee
> > Sent: Wednesday, August 24, 2005 3:13 PM
> > To: Declude.JunkMail@declude.com
> > Subject: RE: [Declude.JunkMail] Declude and Smartermail?
> >
> > Biggest issues is the lack of WHITELIST AUTH. I confirmed last week with
> > SMarterMail that that functionality will be available in the 3.0 version
> > du
> > out later this year.
> >
> >
> >
> > Kevin Bilbee
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED]
> > > [mailto:[EMAIL PROTECTED] Behalf Of Dave Beckstrom
> > > Sent: Wednesday, August 24, 2005 1:00 PM
> > > To: Declude.JunkMail@declude.com
> > > Subject: [Declude.JunkMail] Declude and Smartermail?
> > >
> > >
> > > I'm looking for some feedback on using declude with smartermail.
> > > Is anybody
> > > running that combination?
> > >
> > > How is it working and how is the performance?
> > >
> > > Have you encountered any problems or shortcomings?  Would you
recommend
> > > Declude to smartermail administrators?
> > >
> > >
> > >
> > >
> > > ---
> > > This E-mail came from the Declude.JunkMail mailing list.  To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.JunkMail".  The archives can be found
> > > at http://www.mail-archive.com.
> > >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] PIDDEBUG

[John Tolmachoff \(Lists\)]

And back to my original question.

> Is PIDDEBUG still available to use in 2.0.6.x?

Yes, it appears to be still available. 

However, I have noticed something interesting. When a postmaster message is
created or processed, including forwards done by Imail, the PID file does
not get deleted when finished processing. In fact, the PID file is not
complete, in that it does not have a line for everything scene in the
JunkMail log on High.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] PIDDEBUG

[John Tolmachoff \(Lists\)]

> Also, John - DEBUG mode now lists PID's.

While that is true (and something I know about) leaving the log in DEBUG
mode for several days waiting for it to occur again is not acceptable.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT- APC software JAVA certificate timeout

[John Tolmachoff \(Lists\)]

No wonder I like using PowerChute Plus 5.2.1 so much. Plain simple and
easily configurable via the ini file.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dave Marchette
> Sent: Friday, August 05, 2005 11:16 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] OT- APC software JAVA certificate timeout
> 
> This is OT(sorry!) but if any of you are running APC PowerChute on your
servers to
> enable graceful shutdown on power fail, there is an issue with a
certificate expiring
> last week.  This can cause odd RDC\TS\APC\generally bizarre and
potentially
> debilitating network issues.
> 
> More info here:  http://msmvps.com/bradley/archive/2005/07/28/59861.aspx
> 
> 
> Dave
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] PIDDEBUG

[John Tolmachoff \(Lists\)]

Is PIDDEBUG still available to use in 2.0.6.x?

I am seeing a problem where after a couple days I notice there are 15
Declude processes running but not doing anything. This is on the 0xc142
error. There are no Q or D files in limbo. I can not stop the processes, I
must restart the server. (This is remotely through TS.)

I am wondering if turning PIDDEBUG will help track down the problem with
those errors.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude Woes

[John Tolmachoff \(Lists\)]

Title: Message









If you are seeing 100,000 messages
without Declude JunkMail and 200,000 messages with Declude JunkMail, that is a red
flag that something is probably wrong in the Declude JunkMail configuration.

 

How are you getting the figure 100,000
and 200,000?

 



John T

eServices For You



 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Will
Sent: Tuesday, August 02, 2005 11:31 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
Declude Woes

 

Final Update:

 

My mail server is running perfectly smooth
processing mail as soon as it arrives while running Declude Antivirus and three
DNS blacklists using Imails built-in antispam.  I have tried to re-enabled
Declude junkmail, but it immediately starts to backlog the spool directory
again and mail processing is slow.  Perhaps someone can see something that
I do not in this log file…  This is a sample connection with debug
logging on.

 

I have a service contract with Declude and
Imail for what that’s worth, but I’m not going to get anywhere with
that unless I can help point them in the right direction so they deem me worthy
to forward my issue onto someone with experience.

 

I’m currently processing what
appears to be 100,000 messages per day with 3000 accounts (90% of that incoming
mail).  My previous counts of 200,000 only appear when declude junkmail is
running, so they are not accurate.

 

Will

 

 

 

-Original
Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Will
Sent: Monday, August 01, 2005 9:05 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
Declude Woes

 

Just an update…

 

Last week I had disabled
Declude and cleaned out my spool directory.  For the next day I had not
experienced any issues.  My spooled messages are staying well under 500
and mail is flowing exactly how I want it to (without Declude).  Now, we
can get away with not having Declude Junkmail for a bit, but I really needed
virus scanning, so I re-enabled Declude Antivirus.  After I verified
everything was running smoothly I downloaded F-prot and removed Mcafee before
the weekend and things have also been running very smooth.  Just a note, I
had run Declude Antivirus for years without any issues and I only seem to run
into these overflow problems when I introduce Declude Junkmail.

 

Since the major issues I
had last week I have made three changes… I have modified the queue
manager to process 100 messages at a time.  I have disabled Declude
Junkmail.  I have now moved from Mcafee to F-Prot.  The only one of
these changes that has ensured that mail does not go into overflow and backup
is the disabling of Declude Junkmail.  I’m not so sure it’s a
DNS issue because the Imail spam filters run perfectly fine, which I am now
using in place of Declude.  They do not do as good a job identifying spam,
but they are better than nothing.

 

Things to think about:

 

I was interested in the statement
that the mail server can be setup to not bounce messages if they are detected
as SPAM.  This still confuses me, because the BOUNCEONLYIFYOUMUST
statement in the $default$.junkmail file appears to actually bounce the
messages.  As it is, all my filters are set to WARN and I don’t
understand why changing them to BOUNCEONLYIFYOUMUST will help.

 

I do not believe I have
bulk mailers on my system, but I will not discount it.  Does anyone have a
good suggestion for determining this?  After looking through my logs and
running Imail log analyzer none of my own IP’s stand out for message
counts and the invalid user entries I find are from outside sources outside of
my network.  These connections are always denied and mail does not get
processed onto our server.  I will think about Declude HiJack.

 

I still want to use
Declude Junkmail, so I will test some of the suggestions put into place such as
whitelisting my IP range and disabling outbout virus scanning, but other than
these two suggestions, I don’t see any major changes here that will
affect me.

 

Will

 

 

 

 

 

Friday:

SpamContent    13400

SpamPhrase    19107

SpamFeatures    1283

SpamUrlDomain    35018

LocalDeliver    92331

RemoteDeliver    10526

 

Saturday:

SpamContent    10089

SpamPhrase    20739

SpamFeatures    1090

SpamUrlDomain    27194

LocalDeliver    83297

RemoteDeliver    9008

 

Sunday:

SpamContent    10425

SpamPhrase    18741

SpamFeatures    793

SpamUrlDomain    25756

LocalDeliver    81033

RemoteDeliver    10142

 

 

 

 

 

-Original
Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Friday, July 29, 2005
2:03 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
Declude Woes

 

Will,

What you probably have are users bulk-mailing through your server (evidenced by
the GSE files), issues with running both IMail Antispam and Declude, and choosi

RE: [Declude.JunkMail] Declude Woes

[John Tolmachoff \(Lists\)]

Matt beat me to it. I hope you are not
using a nobody alias anywhere. The large amount of GSE files are indicative of
a misconfiguration or improper configuration within Imail.

 

Also as Matt said, some people are
becoming too quick to point a finger at Declude. I posted some questions for
you to answer and you have not yet done so.

 

You mentioned you have tried different
DNS servers. DNS servers is one of the things I have asked about. Many of use
have found that by configuring the Imail server as a CACHE only DNS server, not
using forwarders but relying on root hints, and configuring Imail and Declude
to use the local DNS server have sped things up.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Thursday, July 28, 2005 9:24 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
Declude Woes

 

The only issue known to this list regarding Declude
that can affect Declude users in this way would be an incompatibility with
IMail 8.20.  IMail 8.20 introduces a rewrite of the SMTP service which was
a major change, and sure enough this created issues for some users when they
ran up against it (seem to mostly/only affect high volume installations and
they are soon going to release a patch).

Besides this bug, there are many of us that can run into issues based on just
the sheer volume of E-mail.  One person pointed out that they had someone
bulk-mailing through their hosted mail server that was bogging everything
down.  I have seen tons of other things related to just simply sheer
volume that cause such issues, among them would be having nobody aliases for
domains that are being dictionary attacked, getting bounce messages from
another server that result from a massive mailing, all sorts of loops created
by auto-responders and forwarding loops, gatewaying E-mail for other domains
without a way to do address verification on incoming messages, being an open
relay, and the list goes on.

I think that before one assumes that it is Declude's fault, you should look at
the environment and figure out if the traffic is normal, or abnormal.  You
can generally just compare the size of the Declude and IMail logs over time in
order to figure out if there is some sort of a spike.  If you find
abnormal traffic, then chances are that one of the things that I pointed out is
the issue and that needs to be resolved.

In Robert's issue below, the fact that you are cleaning up GSE files points to
a non-Declude issue.  GSE files are generated for bounces, and it suggests
that you are accepting E-mail for addresses that don't exist.  If there is
a huge volume of these, there is a definite issue with the environment, and it
wouldn't be uncommon for Declude to get backed up.

Matt



Robert wrote: 

Hello, This has been an ongoing issue for us also,I have a minimum of test running.If I really try to run any indepth test it just falls way behind.I have a 3 ghz serverImail 7.15   Declude 1.77i31  Windows2000Even now I still get hit. It just can't keep up.I have tried 4 different DNS servers, It made no diff. This is my 3rd Mailserver within the last year. Not much help.My filter files are small. The largest has 400 lines in it. But I can't useit because it slows down thing to much. So what did I do to help? I have resorted to running a bat file to delete the .gse files. Every threehours during the day, Every hour during the nite when the spammer are atwork.This helps to keep the spool directory from over loading to the point itcan't even be veiwed with a windows explorer. No one complained, My logic was (and I am sure has hole in it) If my servercant send a bounced massage after a couple of tries ,I won't get sent atall. Run very small filter files if any at all. Run a different IP address on the firewall for the outside MX. Customers usea different IP address (dns name)Because only mail servers are supose to use the outside IP address that canhit very high on CMD Space test.I also have a test to subtract points for CMD Space test from our IP space. This seem to catch a lot of spam with out bogging down the server. Plus I can kill port 25 on the Outside MX IP address giving our server timeto catchup. This lets our users still send but incoming mail will be resentto us later. Thats about the best I can offer.. I have been looking for something better for some time now. That one reason why I haven't upgraded. Robert WhitakerThe Modem Pool517-789-56891-888-377-5689 Be sure to try the New Web Express Internet Accelerator from The Modem Poolhttp://web-express.modempool.com - Original Message -From: Nick Hayer <[EMAIL PROTECTED]>To: Sent: Thursday, July 28, 2005 10:59 AMSubject: Re: [Declude.JunkMail] Declude Woes    

Hi Will, Sorry you are having problems - Declude is a good product - it may besomething simple here. I would say the most common thing is a dns issue- stuff stacks up waiting for dns responses. 

RE: [Declude.JunkMail] Declude Woes

[John Tolmachoff \(Lists\)]

What is your daily total volume?

What server are you using for DNS?

What version of Imail?

What have you tried to tweak? (First thing that comes to my mind is AFTERJM
in the Virus.cfg file.)

Are you using the Default JunkMail configuration, or have you made changes?

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Will
> Sent: Thursday, July 28, 2005 6:36 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Declude Woes
> 
> A number of years ago I purchased Declude and ultimately abandoned it
> due to the crippling problem that would leave our spool directory
> overfilled with mail and a mail server that was delivering mail late.
> Sometimes up to 24 to 48 hours late in the worst cases.
> 
> Last year I decided to give Declude a chance again and repurchased the
> software upgrade.  It's been over a year now and I still have the same
> problem.  It's killing me.  Declude will create an overflow directory
> and mail will just pile up, customers will get angry, and we look the
> fool.  I have spoken with Declude support about this and they had me
> change a value in my virus.cfg to "MAXATONCE 1".  I still see a number
> of declude.exe processes when the overflow directory comes into use and
> the overflow directory is never used when I disable Declude.
> 
> Right now, my mail server is a couple hours behind with over a hundred
> thousand messages in cue.  I have disabled Declude so the server can
> catch up, but I still want antivirus and spam protection.  I am all out
> of ideas and resources.  I had thought the antivirus was taking too long
> to process at one point and my last concern was that DNS resolution was
> not fast enough for the SPAM tests, however, when enabled, the Imail
> integrated black lists resolve fast enough that I do not see this
> problem.
> 
> Does anyone have any suggestions?  Or better yet experience with this
> issue and know of a cause or resolution.  I've grown to fear the
> overflow directory and I would have thrown out Declude already if not
> for the lack of chatter about this issue on the list.
> 
> Will
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Strange messages (Subject: 1)

[John Tolmachoff \(Lists\)]

Even it was a test, a test of what, valid e-mail addresses?

I would think that banning txt attachments would be a little over kill.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Marc Catuogno
> Sent: Saturday, July 23, 2005 12:17 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Strange messages (Subject: 1)
> 
> I have received a few of these myself.  I have also banned 1.txt -
> considering a ban on *.txt temporarily because I get the feeling this is
> some kinda test.
> 
> Marc
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
> Sent: Saturday, July 23, 2005 1:56 PM
> To: Declude.Virus@declude.com
> Cc: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Strange messages (Subject: 1)
> 
> In the last hours a I can see some strange messages (see attached samples)
> send from different servers and obviously forged mailfrom adresses.
> 
> Each message has as Subject and as Body "1" and an attached but empty file
> named "1.txt"
> The mailfrom-adress seems to be the first part of the recipients adress +
> some random domain name.
> 
> I've added "1.txt" to the Declude Virus BANNAME-List.
> 
> Markus
> 
> ---
> [This E-mail scanned for viruses by Declude Virus]
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] SPAMDOMAIN and IPBYPASS

[John Tolmachoff \(Lists\)]

Anybody?

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
> Sent: Monday, July 11, 2005 7:44 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] SPAMDOMAIN and IPBYPASS
> 
> Does SPAMDOMAIN check the PTR of the previous IP if the servers your Imail
> server receives from are all configured as IPBYPASS, meaning you have
front
> end servers doing the receiving for the Imail server?
> 
> John T
> eServices For You
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] SPAMDOMAIN and IPBYPASS

[John Tolmachoff \(Lists\)]

Does SPAMDOMAIN check the PTR of the previous IP if the servers your Imail
server receives from are all configured as IPBYPASS, meaning you have front
end servers doing the receiving for the Imail server?

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers

[John Tolmachoff \(Lists\)]

Wow, Scott has something new to share:

http://forums.dnsstuff.com/tool/post/dnsstuff/vpost?id=522969

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Goran Jovanovic
> Sent: Friday, July 08, 2005 3:12 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Problems with Network Solutions DNS
Servers
> 
> And me not monitoring the imail list. What were the problems (in summary)?
> 
> 
> -----Original Message-
> From: "John Tolmachoff \(Lists\)" <[EMAIL PROTECTED]>
> Date: Fri, 8 Jul 2005 14:49:52
> To:
> Subject: RE: [Declude.JunkMail] Problems with Network Solutions DNS
Servers
> 
> Known problem as posted on the Imail list. I actually sent out a broadcast
> earlier informing them of possible problems.
> 
> John T
> eServices For You
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Goran Jovanovic
> > Sent: Friday, July 08, 2005 2:27 PM
> > To: Declude.JunkMail@declude.com
> > Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers
> >
> > Hi all,
> >
> > I have been having problems with Network Solutions DNS server all day.
> > Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record
> > they come back with
> >
> > > gonetworks.net
> > Server:  ns7.worldnic.com
> > Address:  216.168.228.6
> >
> > (root)  nameserver = G.ROOT-SERVERS.NET
> > (root)  nameserver = H.ROOT-SERVERS.NET
> > (root)  nameserver = I.ROOT-SERVERS.NET
> > (root)  nameserver = J.ROOT-SERVERS.NET
> > (root)  nameserver = K.ROOT-SERVERS.NET
> > (root)  nameserver = L.ROOT-SERVERS.NET
> > (root)  nameserver = M.ROOT-SERVERS.NET
> > (root)  nameserver = A.ROOT-SERVERS.NET
> > (root)  nameserver = B.ROOT-SERVERS.NET
> > (root)  nameserver = C.ROOT-SERVERS.NET
> > (root)  nameserver = D.ROOT-SERVERS.NET
> > (root)  nameserver = E.ROOT-SERVERS.NET
> > (root)  nameserver = F.ROOT-SERVERS.NET
> >
> > They will sometimes answer an A record request for cmail1.gonetworks.net
> > with the correct IP address and other times they will not.
> >
> > Has anyone else been experiencing these problems today?
> >
> > The story I get from first level phone support is that their servers are
> > down for maintenance (all day???) and that engineering will get back to
> > me in 1 to 3 days.
> >
> > Has anyone else been experiencing these problems today?
> >
> >
> >  Goran Jovanovic
> >  The LAN Shoppe
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> Goran Jovanovic
> The LAN Shoppe
> O: (416) 440-1167 x-2113
> C: (416) 931-0688
> E: [EMAIL PROTECTED]
> Sent from my Wireless Blackberry
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers

[John Tolmachoff \(Lists\)]

Don't know and have not heard that it is resolved.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Goran Jovanovic
> Sent: Friday, July 08, 2005 3:12 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Problems with Network Solutions DNS
Servers
> 
> And me not monitoring the imail list. What were the problems (in summary)?
> 
> 
> -----Original Message-
> From: "John Tolmachoff \(Lists\)" <[EMAIL PROTECTED]>
> Date: Fri, 8 Jul 2005 14:49:52
> To:
> Subject: RE: [Declude.JunkMail] Problems with Network Solutions DNS
Servers
> 
> Known problem as posted on the Imail list. I actually sent out a broadcast
> earlier informing them of possible problems.
> 
> John T
> eServices For You
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Goran Jovanovic
> > Sent: Friday, July 08, 2005 2:27 PM
> > To: Declude.JunkMail@declude.com
> > Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers
> >
> > Hi all,
> >
> > I have been having problems with Network Solutions DNS server all day.
> > Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record
> > they come back with
> >
> > > gonetworks.net
> > Server:  ns7.worldnic.com
> > Address:  216.168.228.6
> >
> > (root)  nameserver = G.ROOT-SERVERS.NET
> > (root)  nameserver = H.ROOT-SERVERS.NET
> > (root)  nameserver = I.ROOT-SERVERS.NET
> > (root)  nameserver = J.ROOT-SERVERS.NET
> > (root)  nameserver = K.ROOT-SERVERS.NET
> > (root)  nameserver = L.ROOT-SERVERS.NET
> > (root)  nameserver = M.ROOT-SERVERS.NET
> > (root)  nameserver = A.ROOT-SERVERS.NET
> > (root)  nameserver = B.ROOT-SERVERS.NET
> > (root)  nameserver = C.ROOT-SERVERS.NET
> > (root)  nameserver = D.ROOT-SERVERS.NET
> > (root)  nameserver = E.ROOT-SERVERS.NET
> > (root)  nameserver = F.ROOT-SERVERS.NET
> >
> > They will sometimes answer an A record request for cmail1.gonetworks.net
> > with the correct IP address and other times they will not.
> >
> > Has anyone else been experiencing these problems today?
> >
> > The story I get from first level phone support is that their servers are
> > down for maintenance (all day???) and that engineering will get back to
> > me in 1 to 3 days.
> >
> > Has anyone else been experiencing these problems today?
> >
> >
> >  Goran Jovanovic
> >  The LAN Shoppe
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> Goran Jovanovic
> The LAN Shoppe
> O: (416) 440-1167 x-2113
> C: (416) 931-0688
> E: [EMAIL PROTECTED]
> Sent from my Wireless Blackberry
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers

[John Tolmachoff \(Lists\)]

Correction:

"I actually sent out a broadcast to my clients earlier..."

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists)
> Sent: Friday, July 08, 2005 2:50 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Problems with Network Solutions DNS
Servers
> 
> Known problem as posted on the Imail list. I actually sent out a broadcast
> earlier informing them of possible problems.
> 
> John T
> eServices For You
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > [EMAIL PROTECTED] On Behalf Of Goran Jovanovic
> > Sent: Friday, July 08, 2005 2:27 PM
> > To: Declude.JunkMail@declude.com
> > Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers
> >
> > Hi all,
> >
> > I have been having problems with Network Solutions DNS server all day.
> > Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record
> > they come back with
> >
> > > gonetworks.net
> > Server:  ns7.worldnic.com
> > Address:  216.168.228.6
> >
> > (root)  nameserver = G.ROOT-SERVERS.NET
> > (root)  nameserver = H.ROOT-SERVERS.NET
> > (root)  nameserver = I.ROOT-SERVERS.NET
> > (root)  nameserver = J.ROOT-SERVERS.NET
> > (root)  nameserver = K.ROOT-SERVERS.NET
> > (root)  nameserver = L.ROOT-SERVERS.NET
> > (root)  nameserver = M.ROOT-SERVERS.NET
> > (root)  nameserver = A.ROOT-SERVERS.NET
> > (root)  nameserver = B.ROOT-SERVERS.NET
> > (root)  nameserver = C.ROOT-SERVERS.NET
> > (root)  nameserver = D.ROOT-SERVERS.NET
> > (root)  nameserver = E.ROOT-SERVERS.NET
> > (root)  nameserver = F.ROOT-SERVERS.NET
> >
> > They will sometimes answer an A record request for cmail1.gonetworks.net
> > with the correct IP address and other times they will not.
> >
> > Has anyone else been experiencing these problems today?
> >
> > The story I get from first level phone support is that their servers are
> > down for maintenance (all day???) and that engineering will get back to
> > me in 1 to 3 days.
> >
> > Has anyone else been experiencing these problems today?
> >
> >
> >  Goran Jovanovic
> >  The LAN Shoppe
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Problems with Network Solutions DNS Servers

[John Tolmachoff \(Lists\)]

Known problem as posted on the Imail list. I actually sent out a broadcast
earlier informing them of possible problems.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Goran Jovanovic
> Sent: Friday, July 08, 2005 2:27 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Problems with Network Solutions DNS Servers
> 
> Hi all,
> 
> I have been having problems with Network Solutions DNS server all day.
> Specifically ns7 and ns8.worldnic.com. When you ask for an SOA record
> they come back with
> 
> > gonetworks.net
> Server:  ns7.worldnic.com
> Address:  216.168.228.6
> 
> (root)  nameserver = G.ROOT-SERVERS.NET
> (root)  nameserver = H.ROOT-SERVERS.NET
> (root)  nameserver = I.ROOT-SERVERS.NET
> (root)  nameserver = J.ROOT-SERVERS.NET
> (root)  nameserver = K.ROOT-SERVERS.NET
> (root)  nameserver = L.ROOT-SERVERS.NET
> (root)  nameserver = M.ROOT-SERVERS.NET
> (root)  nameserver = A.ROOT-SERVERS.NET
> (root)  nameserver = B.ROOT-SERVERS.NET
> (root)  nameserver = C.ROOT-SERVERS.NET
> (root)  nameserver = D.ROOT-SERVERS.NET
> (root)  nameserver = E.ROOT-SERVERS.NET
> (root)  nameserver = F.ROOT-SERVERS.NET
> 
> They will sometimes answer an A record request for cmail1.gonetworks.net
> with the correct IP address and other times they will not.
> 
> Has anyone else been experiencing these problems today?
> 
> The story I get from first level phone support is that their servers are
> down for maintenance (all day???) and that engineering will get back to
> me in 1 to 3 days.
> 
> Has anyone else been experiencing these problems today?
> 
> 
>  Goran Jovanovic
>  The LAN Shoppe
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] .txt files

[John Tolmachoff \(Lists\)]

Well, I saw not attachment with that
message. The header of it shows that it only failed one test and had a weight
of 8. 

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris
Sent: Thursday, July
 07, 2005 6:44 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] .txt
files

 



Here is an example of spam I am getting lately...it is going
to everyone I presume..






Richard Farris
Ethixs Online
1.270.247. Office
1.800.548.3877 Tech Support
"Crossroads to a Cleaner Internet"

RE: [Declude.JunkMail] .txt files

[John Tolmachoff \(Lists\)]

I am really busy right now, but just a quick thought, restart the Imail
server. Are the text attachments going to all users or just a couple?

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Richard Farris
> Sent: Thursday, July 07, 2005 5:06 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] .txt files
> 
> I am getting a lot of spam with .txt files attached...anyone else seeing
> this and how do we stop it..?
> 
> Richard Farris
> Ethixs Online
> 1.270.247. Office
> 1.800.548.3877 Tech Support
> "Crossroads to a Cleaner Internet"
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] WAY OT: Anti- Identity theft advice

[John Tolmachoff \(Lists\)]

Here is a personal experience that proves the bit about initials on checks
is wrong:

Doing my monthly personal bills, I inadvertently sent my water payment check
to the mortgage company. Guess what, they processed it and applied it to our
account. 

So, if a bank does not even check to see who the check is written to, why
would you expect them to check who the check is from?

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dan Geiser
> Sent: Thursday, July 07, 2005 2:21 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] WAY OT: Anti- Identity theft advice
> 
> And here's the obligatory page from Snopes,
> http://www.snopes.com/inboxer/scams/credit.htm.
> 
> - Original Message -
> From: "Marc Catuogno" <[EMAIL PROTECTED]>
> To: 
> Sent: Thursday, July 07, 2005 10:25 AM
> Subject: [Declude.JunkMail] WAY OT: Anti- Identity theft advice
> 
> 
> I have a great deal of respect for the people on this list and I hope you
> don't feel this is a waste of time. I got this e-mail from one of my
agents
> and I am going to share it with the entire company - I thought maybe some
of
> you would care to do the same. I searched Hoasbusters.org first and called
> the numbers and they are legit.
> 
> 
> ATTORNEY'S ADVICE -- NO CHARGE Read this and make a copy for your files in
> case you need to refer to it someday. Maybe we should all take some of his
> advice!
> 
> A corporate attorney sent the following out to the employees in his
company
> 
> 1. The next time you order checks have only your initials (instead of
first
> name) and last name put on them. If someone takes your checkbook, they
will
> not know if you sign your checks with just your initials or your first
name,
> but your bank will know how you sign your checks.
> 
> 2. Do not sign the back of your credit cards. Instead, put "PHOTO ID
> REQUIRED."
> 
> 3. When you are writing checks to pay on your credit card accounts, DO NOT
> put the complete account number on the "For" line Instead, just put the
last
> four numbers. The credit card company knows the rest of the number, and
> anyone who might be handling your check as it passes through all the check
> processing channels won't have access to it
> 
> 4. Put your work phone # on your checks instead of your home phone. If you
> have a PO Box use that instead of your home address. If you do not have a
PO
> Box, use your work address. Never have your SS# printed on your checks.
> (DUH!) You can add it if it is necessary. But if you have it printed,
anyone
> can get it.
> 
> 5. Place the contents of your wallet on a photocopy machine. Do both sides
> of each license, credit card, etc. You will know what you had in your
wallet
> and all of the account numbers and phone numbers to call and cancel. Keep
> the photocopy in a safe place. I also carry a photocopy of my passport
when
> I travel either here or abroad. We've all heard horror stories about fraud
> that's committed on us in stealing a name, address, Social Security
number,
> credit cards.
> 
> Unfortunately, I, an attorney, have firsthand knowledge because my wallet
> was stolen last month. Within a week, the thieve(s) ordered an expensive
> monthly cell phone package, applied for a VISA credit card, had a credit
> line approved to buy a Gateway computer, received a PIN number from DMV to
> change my driving record information online, and more. But here's some
> critical information to limit the damage in case this happens to you or
> someone you know:
> 
> 1. We have been told we should cancel our credit cards immediately. But
the
> key is having the toll free numbers and your card numbers handy so you
know
> whom to call. Keep those where you can find them.
> 
> 2. File a police report immediately in the jurisdiction where your credit
> cards, etc., were stolen. This proves to credit providers you were
diligent,
> and this is a first step toward an investigation
> (if there ever is one.)
> 
> But here's what is perhaps most important of all : (I never even thought
to
> do this.)
> 
> 3. Call the 3 national credit reporting organizations immediately to place
a
> fraud alert on your name and Social Security number. I had never heard of
> doing that until advised by a bank that called to tell me an application
for
> credit was made over the Internet in my name. The alert means any company
> that checks your credit knows your information was stolen, and they have
to
> contact you by phone to authorize new credit.
> 
> By the time I was advised to do this, almost two weeks after the theft,
all
> the damage had been done There are records of all the credit checks
> initiated by the thieves' purchases, none of which I knew about before
> placing the alert. Since then, no additional damage has been done, and the
> thieves threw my wallet away This weekend (someone turned it in). It seems
> to have stopped them dead in their tracks.
> 
> Now, her

RE: [Declude.JunkMail] test

[John Tolmachoff \(Lists\)]

FYI, I will be around off and on Saturday and Monday.

Unless something major happens, it usually gets quite right before a holiday
and through it.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Robert
> Sent: Saturday, July 02, 2005 10:23 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] test
> 
> thanks for the reply.
> 
> 
> Robert
> 
> - Original Message -
> From: Darrell ([EMAIL PROTECTED]) <[EMAIL PROTECTED]>
> To: 
> Sent: Saturday, July 02, 2005 9:40 AM
> Subject: Re: [Declude.JunkMail] test
> 
> 
> > No, its just been unusually quiet or we both have problems :)
> >
> > Darrell
> >  --
> > DLAnalyzer - Comprehensive reporting on Declude Junkmail and Virus.  Try
> it
> > today - http://www.invariantsystems.com
> >
> > Robert writes:
> >
> > > This is the last message I received.
> > > Something going on?
> > >
> > >
> > > - Original Message -
> > > From: Matt <[EMAIL PROTECTED]>
> > > To: 
> > > Sent: Wednesday, June 29, 2005 5:57 PM
> > > Subject: Re: [Declude.JunkMail] OT: Free Microsoft telephone support
> code
> > >
> > >
> > >> It's been taken.
> > >>
> > >> Matt
> > >>
> > >>
> > >>
> > >> Matt wrote:
> > >>
> > >> > I have a card that give me one free telephone support incident with
> > >> > Microsoft, but it expires tomorrow and I have no use for it
currently
> > >> > (I should have posted this earlier).  If anyone has use for this
and
> > >> > could use it by 6 p.m. EST tomorrow, I can E-mail the code to you.
> > >> > This is free to anyone on a first come first serve basis.  E-mail
me
> > >> > off-list to request the code.  When and if someone has claimed it I
> > >> > will post a follow up to this list.
> > >> >
> > >> > Matt
> > >> >
> > >>
> > >> --
> > >>
> =
> > >> MailPure custom filters for Declude JunkMail Pro.
> > >> http://www.mailpure.com/software/
> > >>
> =
> > >>
> > >> ---
> > >> This E-mail came from the Declude.JunkMail mailing list.  To
> > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > >> type "unsubscribe Declude.JunkMail".  The archives can be found
> > >> at http://www.mail-archive.com.
> > >>
> > >
> > > ---
> > > This E-mail came from the Declude.JunkMail mailing list.  To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > > type "unsubscribe Declude.JunkMail".  The archives can be found
> > > at http://www.mail-archive.com.
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] WAY OT: Looking for Web Designer/Programmer

[John Tolmachoff \(Lists\)]

I am looking for a Web Designer/Programmer to do work for me on a project
basis. 

I currently have 2 projects pending with a possible third. The projects I
have pending are fairly small. Both are updating existing sites, the third
one would be a new webmail site. None are e-commerce or have DB involved.

I also have a client that is looking for a Web Designer/Programmer for a
project. This would be for reworking or recreating an existing site which
does have a section with a SQL back end and a news section. This project
would be in ASP and .NET.

All projects are to be run on IIS, either 5 or 6.

I am looking for dependability, reliability and honesty.

If you are interested or know some one who is, please contact me off list.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Question about load balancers and source IP

[John Tolmachoff \(Lists\)]

OOPS!

IPBYPASS

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Mark E. Smith
> Sent: Saturday, June 25, 2005 4:45 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Question about load balancers and source
IP
> 
> SKIPIP = new setting in Declude?
> Sorry... Been off the list for a while.
> 
> 
> 
> > -Original Message-
> > From: [EMAIL PROTECTED]
> > [mailto:[EMAIL PROTECTED] On Behalf Of John
> > Tolmachoff (Lists)
> > Sent: Saturday, June 25, 2005 6:52 PM
> > To: Declude.JunkMail@declude.com
> > Subject: RE: [Declude.JunkMail] Question about load balancers
> > and source IP
> >
> > Use SKIPIP
> >
> > John T
> > eServices For You
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > > [EMAIL PROTECTED] On Behalf Of Mark E. Smith
> > > Sent: Saturday, June 25, 2005 3:02 PM
> > > To: Declude.JunkMail@declude.com
> > > Subject: [Declude.JunkMail] Question about load balancers
> > and source
> > > IP
> > >
> > > We have 3 declude gateway servers that sit in front of our Exchange
> > system.
> > > We want to move the three round-robin DNS servers to a VIP on our
> > > Foundry Load Balancers.
> > >
> > > The load balancers can be setup in a source NAT
> > configuration (which
> > > is
> > > easier) or DSR (Direct Server Return).
> > > In source NAT the VIP on the Foundy Load Balancer is the source
> > > address
> > that
> > > Declude sees. In DSR the physical SMTP server is the source
> > IP address.
> > >
> > > DSR is difficult to configure.
> > >
> > > So, here's my question.
> > > Does Declude/IMAIL care about the IP address that's making
> > the connection?
> > > In other words, does it use that IP address for its tests?
> > If so, will
> > HOP=1
> > > fix this?
> > >
> > >
> > >
> > > ---
> > > This E-mail came from the Declude.JunkMail mailing list.  To
> > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
> > > "unsubscribe Declude.JunkMail".  The archives can be found at
> > > http://www.mail-archive.com.
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be
> > found at http://www.mail-archive.com.
> >
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Question about load balancers and source IP

[John Tolmachoff \(Lists\)]

Use SKIPIP

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Mark E. Smith
> Sent: Saturday, June 25, 2005 3:02 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Question about load balancers and source IP
> 
> We have 3 declude gateway servers that sit in front of our Exchange
system.
> We want to move the three round-robin DNS servers to a VIP on our Foundry
> Load Balancers.
> 
> The load balancers can be setup in a source NAT configuration (which is
> easier) or DSR (Direct Server Return).
> In source NAT the VIP on the Foundy Load Balancer is the source address
that
> Declude sees. In DSR the physical SMTP server is the source IP address.
> 
> DSR is difficult to configure.
> 
> So, here's my question.
> Does Declude/IMAIL care about the IP address that's making the connection?
> In other words, does it use that IP address for its tests? If so, will
HOP=1
> fix this?
> 
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT: Imail gateway setup not working

[John Tolmachoff \(Lists\)]

I think I can safely say that we have all been there done that.

At least it is working now.

Oh, no need to apologize.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of GlobalWeb.net Webmaster
> Sent: Monday, June 20, 2005 9:38 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] OT: Imail gateway setup not working
> 
> We found the issue; a mis-typed IP range in the relay file (one numeral
off
> in 3rd octave).  We must have looked at this 100 times over the weekend
and
> didn't catch it.
> 
> Thank you for all that responded to help - I am sorry to waste everyone's
> time
> 
> 
> 
> Sincerely,
> 
> Randy Armbrecht
> Support Department
> Global Web SolutionsR, Inc.
> 804-346-5300 x112
> 877-800-GLOBAL (4562) x112
> http://globalweb.net
> 
> Richmond's Internet Source since 1996!
> WEB HOSTING including EMAIL beginning at $29/month!
> DSL Starting at $39.95/month!
> Non-Profits - receive a 25% discount on most services!
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT: Imail gateway setup not working

[John Tolmachoff \(Lists\)]

In the HOSTS file, you do have IP address then space or tab and then the
domain, correct?

What I meant about aliases is while most of us used to do that, now we do
not because of all the dictionary type attacks. Instead, thanks to Sandy's
scripts, we now create Imail aliases for users on gatewayed domains. This
way, only messages for actual users are accepted, not for all.

I do know this is working on my server.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Webmaster - GlobalWeb.net
> Sent: Sunday, June 19, 2005 5:25 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] OT: Imail gateway setup not working
> 
> >notepad %windir%\system32\drivers\etc\hosts.
> 
> everything checks out with thisno problems opening it.
> 
> I've doubled checked again to be sure that there is a blank line after the
last entry...
> 
> I'm stumped...
> 
> 8.2 has the relay for addresses as 8.15 did.
> 
> Any one else have any problems with this?
> 
> Randy
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] OT: Imail gateway setup not working

[John Tolmachoff \(Lists\)]

I am successfully relaying for 2 Exchange servers with no problems running
8.20 HF2.

Is there a carriage return after the domain name in the HOSTS file?

Why aren't you using aliases instead of accepting all?

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Webmaster - GlobalWeb.net
> Sent: Saturday, June 18, 2005 2:35 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] OT: Imail gateway setup not working
> 
> I've posted this to the IMailo forum; no replies so far.  So I wanted to
shoot this out
> here.
> 
> We just fired up a new server on Friday with Imail 8.20hf2, JM Pro,
Declude Virus Std
> w/ FProt, Hijack and Sniffer.
> 
> (old server was 8.15hf2 and starting thursday, the QueueMgr just quit
working)
> 
> We have a couple of customers we do gateway services for and the setup is
not
> working .  We have their IP/Domain listed in the host file and have thier
IP in the
> relay addresses list.  When anyone sends email in we see this in the
logs...
> 
> 06:18 17:31 SMTPD(92b506f87dcb) [208.253.112.161] RCPT
> To:<[EMAIL PROTECTED]>
> 06:18 17:31 SMTPD(92b506f87dcb) [x] looking up vacva.com in HOSTS
> 06:18 17:31 SMTPD(92b506f87dcb) [208.253.112.161] ERR
imail.globalweb.net
> invalid user <[EMAIL PROTECTED]
> 
> Note: there is no closing "<" on the invalid user line.
> 
> Any one k now of any poroblems with this in 8.20?  I really do not want to
have to re-
> load a new setup of 8.15.
> 
> Any ideas would be greatly appreciated!
> 
> Thank you!
> 
> 
> Randy Armbrecht
> Global Web Solutions, Inc.
> 804-346-5509
> 
> -- Original Message --
> From: "Michael Thomas - Mathbox" <[EMAIL PROTECTED]>
> Reply-To: Declude.JunkMail@declude.com
> Date:  Sat, 18 Jun 2005 01:37:08 -0400
> 
> >Hi,
> >
> >No, actually they monitor specific channels to determine if
advertisements
> >appeared on that channel and at what times. They also collect information
on
> >what shows were running when the advertisements appeared. Because much of
> >cable advertising is geographically driven, they need access to cable TV
in
> >specific geographic areas.
> >
> >Mike
> >
> >
> >- Original Message -
> >From: "William Stillwell" <[EMAIL PROTECTED]>
> >To: 
> >Sent: Friday, June 17, 2005 11:42 PM
> >Subject: Re: [Declude.JunkMail] OT: Co-Location Space
> >
> >
> >> It sounds like there trying to start a service like WebVCR which was of
> >> course shutdown by the MPAA..
> >>
> >>
> >> - Original Message -
> >> From: "Michael Thomas - Mathbox" <[EMAIL PROTECTED]>
> >> To: 
> >> Sent: Friday, June 17, 2005 5:51 PM
> >> Subject: [Declude.JunkMail] OT: Co-Location Space
> >>
> >>
> >> > Hi All,
> >> >
> >> > I have a customer that is looking for co-location space in 50+
locations
> >> > all
> >> > over the US. There main requirement is a local cable TV feed. They
will
> >> > pay
> >> > to have their own drop installed from the street. Their equipment is
50%
> >> > rack-mount and 50% tower. Cabinet, rack, or wire shelf will work.
Their
> >> > requirements are:
> >> >
> >> > 10U
> >> > 128k
> >> > 2 IP's
> >> > 3-5 amps
> >> > Cable TV feed
> >> >
> >> > If you are interested, please contact me off list at
[EMAIL PROTECTED]
> >> > Below
> >> > is a list of locations.
> >> >
> >> > Thank You,
> >> > Michael Thomas
> >> > Mathbox
> >> >
> >> > Anchorage AK
> >> > Fairbanks AK
> >> > Juneau AK
> >> > Dothan AL
> >> > Jonesboro AR
> >> > Palm Springs CA
> >> > Yuma-El Centro CA
> >> > Eureka CA
> >> > Grand Junction-Montrose CO
> >> > Panama City FL
> >> > Gainesville FL
> >> > Ottumwa-Kirksville IA
> >> > Idaho Falls-Pocatello ID
> >> > Twin Falls ID
> >> > Lafayette IN
> >> > Bowling Green KY
> >> > Alexandra LA
> >> > Lake Charles LA
> >> > Bangor ME
> >> > Presque Isle ME
> >> > Marquette MI
> >> > Alpena  MI
> >> > Mankato MN
> >> > St Joseph MO
> >> > Biloxi-Gulfport MS
> >> > Hattiesburg-Laurel MS
> >> > Greenwood-Greenville MS
> >> > Meridian MS
> >> > Missoula MT
> >> > Billings MT
> >> > Great Falls MT
> >> > Butte-Boseman MT
> >> > Helena MT
> >> > Glendive MT
> >> > Minot-Bismarck-Dickinson ND
> >> > North Platte NE
> >> > Binghamton NY
> >> > Utica NY
> >> > Watertown NY
> >> > Wheeling-Steubenville OH
> >> > Lima OH
> >> > Zanesville OH
> >> > Bend OR
> >> > Rapod City SD
> >> > Jackson TN
> >> > Odessa-Midland TX
> >> > Abilene-Sweetwater TX
> >> > Laredo TX
> >> > San Angelo TX
> >> > Victoria TX
> >> > Sherman-Ada TX/OK
> >> > Harrisonburg VA
> >> > Charlottesville VA
> >> > Clarksburg-Weston WV
> >> > Parkersburg WV
> >> > Casper-Riverton WY
> >> > Cheyenne-Scottsbluff WY/NE
> >> >
> >> >
> >> > ---
> >> > This E-mail came from the Declude.JunkMail mailing list.  To
> >> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> >> > type "unsubscribe Declude.JunkMail".  The archives can be found
> >> > at http://www.mail-archive.com.
> >> > ---
> >> > T

RE: [Declude.JunkMail] Very slow Queue times...

[John Tolmachoff \(Lists\)]

I was just going to say, sounds like a DNS problem. Check all DNS servers
for response.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED])
> Sent: Thursday, June 16, 2005 4:37 PM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Very slow Queue times...
> 
> Mike,
> 
> I had the EXACT same problem today although I caught it very early to
> QueueMon.  I had to add the DNSOVERRIDE xxx.xxx.xxx.xxx where xxx... is in
> the declude.cfg file.  Ralph from Declude posted this a while back and at
> the time I did not exhibit the problem - but I sure did today...
> 
> Here is the post to the list that was archived.
> http://www.mail-archive.com/declude.junkmail@declude.com/msg24658.html
> 
> Darrell
> -
> invURIBL - Intelligent URI Filtering.  Stops 85%+ SPAM with the default
> configuration. Download a copy today - http://www.invariantsystems.com
> 
> 
> - Original Message -
> From: "Michael L. Hardrick" <[EMAIL PROTECTED]>
> To: 
> Sent: Thursday, June 16, 2005 5:57 PM
> Subject: [Declude.JunkMail] Very slow Queue times...
> 
> 
> Is there any reason the Queue times would be over three hours?
> The Queue is backed up to over 2+ and the overflow directory
> has 19000+ as well.  It's taking about four hours to deliver mail
> to and from our server even on local accounts.  I've checked the
> CPU usage and rebooted the machine twice.  We are using 2.0.6.16.
> Dual CPU 2800
> 2GB RAM
> SATA 10k Drives
> Plenty of disk space and RAM left.
> CPU Usage is about 40%
> There are about 25 to 35 Declude processes running at any given time.
> Nothing has changed in our config in about three weeks.
> This just started about 40 hours ago.
> 
> Tks,
> --Mike
> TNWEB
> 16:47cst
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Gatewayed Declude Server

[John Tolmachoff \(Lists\)]

Title: Message








There are actually a good number of
Imail/Declude installs that either are pure gateway only or do a significant
amount of their load for gateway service.

 

IMHO, for a gateway service,
Imail/Declude is and will be a great combination into the foreseeable future. 

 



John T

eServices For You



 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Wednesday, June
 08, 2005 8:20 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail]
Gatewayed Declude Server

 

HI all,

 

I am in perhaps a different position from
some/most of you in that I run Declude on a IMail server but it is just a
gateway no mailboxes are on my server. So all I have running from the IMail
services is SMTP and Queue Mgr. I have to say that I am reasonable happy with
the way things are. Now I am looking to migrate my Declude/IMail to another box
and am wondering if I should do the SmarterMail thing?

 

I know that SmarterMail and Declude had a
rocky start but that is mostly better now. I also know that there are a couple
of tests that IMail can do that SmarterMail cannot. 

 

So will I get much/some/any performance
gain by going to SmarterMail?

 

Has anyone figured out how to requeue a
held mail with a script that can be launched by the user with a link to the web
server?

 

I have a bunch of batch files that call
IMAIL1.EXE to send the results to me. Is there a corresponding ability in
SmarterMail?

 

Any other Pros/Cons that people want to
impart?

 

Thanx

 



 


Goran Jovanovic


The LAN Shoppe

RE: [Declude.JunkMail] Admin Web for Declude

[John Tolmachoff \(Lists\)]

AH, User configurable actions is different. I know at one time at least
Sandy had either a Demo or production running for a client.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Jeff Kratka
> Sent: Friday, June 03, 2005 2:38 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Admin Web for Declude
> 
> Mostly what I remember from some time ago was something to let the end
user
> modify their settings. Sorry "Admin Web" was the incorrect wording.
> 
> Jeff Kratka
> 
> TymeWyse Internet
> P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417
> tel: (541) 839-6027  -  [EMAIL PROTECTED]
> 
> 
> 
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Markus Gufler
> Sent: Friday, June 03, 2005 2:26 PM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Admin Web for Declude
> 
> 
> 
> >  Quite some time ago, there was mention about an Admin Web
> > for Declude, is this available or does anyone have something to share?
> 
> Declude is so flexible and can do so much different things that it would
be
> nearly impossible to write a "click&play"-frontend. There was already a
> discussion. The question is: Do you want as much a possible functions to
> manage your email traffic with the drawback that you must know exactly
what
> you need and what you're doing or do you want some less functions but this
> as easy as installing windows?
> 
> Also what do you mean by "admin web"? Something that will write your
> configuration file and prevent wrong settings from your side (what's
> "wrong"?) or do you need something to let end-users choose different
> settings for their own mailbox?
> 
> Markus
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Admin Web for Declude

[John Tolmachoff \(Lists\)]

In case Declude is not able to respond right now, the 2-3 projects that were
either in development or ready to go to development in the last couple of
years did not get very far AFAIK. At this time, Declude is not working on
one AFAIK.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Jeff Kratka
> Sent: Friday, June 03, 2005 2:06 PM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Admin Web for Declude
> 
> Hello,
> 
>  Quite some time ago, there was mention about an Admin Web for Declude, is
> this available or does anyone have something to share?
> 
> Thank You.
> 
> Jeff Kratka
> 
> TymeWyse Internet
> P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417
> tel: (541) 839-6027  -  [EMAIL PROTECTED]
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Insufficient system resources error

[John Tolmachoff \(Lists\)]

> I opened a ticket with Ipswitch but they blamed it on Declude, as usual.

I'll bet it was not Eric that said that.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Insufficient system resources error

[John Tolmachoff \(Lists\)]

Update: Since installing Imail 8.20 HF2 last Saturday, the problem so far
has not reoccurred.

Any one else still having this problem?

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Message not scanned

[John Tolmachoff \(Lists\)]

Did you not see my response to your earlier post?

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dan Horne
> Sent: Wednesday, June 01, 2005 10:53 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Message not scanned
> 
> I have received a couple of messages in the last two days in my inbox
> that were NOT scanned by Declude.  I thought the headers below were
> strange, since they seem to have MIME segments in them.  However,
> another message in my inbox that was spam (below my hold weight) also
> has similar MIME segments, but was scanned by Declude, evidenced by the
> Declude headers.  The Declude headers are not present (I add several
> headers with Declude) in the email below.  The line "X-Virus-Scanned:
> amavisd-new 2.3.0 (20050424) at taisweb.net" was added by my gateway
> postfix box that scans messages with clamav.
> 
> When searching the Declude logs, the queue number 9F3B01A60A71 does
> not appear.  Neither does a07e06888a82, though I wouldn't expect it
> to as that is the forward message, which should appear after Declude
> scans.  Version info: Imail v8.2 HF2, Declude Junkmail Pro/Virus
> Standard/Hijack v2.0.6.10.
> 
> For reference, I have attached a file with the headers of the other spam
> message I mentioned, so you can see what kind of headers I add that are
> missing below.
> 
> 
> IMAIL LOG
> SMTPD (9f3b01a60a71) [172.20.5.2] connect 68.118.154.7 port 60324
> SMTPD (9f3b01a60a71) [68.118.154.7] EHLO mx2.rmslink.net
> SMTPD (9f3b01a60a71) [68.118.154.7] MAIL
> FROM:<[EMAIL PROTECTED]>
> SMTPD (9f3b01a60a71) [68.118.154.7] RCPT TO:<[EMAIL PROTECTED]>
> SMTPD (9f3b01a60a71) [x] looking up taisweb.net in HOSTS
> SMTPD (9f3b01a60a71) [68.118.154.7] DATA
> SMTPD (9f3b01a60a71) [68.118.154.7]
> S:\imail\spool\D9f3b01a60a71.SMD 4808
> SMTP () Info - Adding Queue file
> S:\imail\spool\Q9F3B01A60A71.SMD
> SMTP (9f3b01a60a71) processing S:\imail\spool\Q9F3B01A60A71.SMD
> SMTP (9f3b01a60a71) ldeliver mail.taisweb.net copyall-main (1)
> [EMAIL PROTECTED] 4808
> SMTP (9f3b01a60a71) forwarded message to [EMAIL PROTECTED]
> using new file: a07e06888a82
> SMTP (9f3b01a60a71) finished S:\imail\spool\Q9F3B01A60A71.SMD
> status=1
> 
> HEADERS--
> Microsoft Mail Internet Headers Version 2.0
> Received: from mail.taisweb.net ([68.118.153.2]) by ex1.wilcoxent.net
> with Microsoft SMTPSVC(6.0.3790.211);
>Wed, 1 Jun 2005 07:48:14 -0400
> Received: from SMTP32-FWD by mail.taisweb.net
>   (SMTP32) id A9F3B01A60A71; Wed,  1 Jun 2005 07:48:14
> Received: from mx2.rmslink.net [68.118.154.7] by mail.taisweb.net with
> ESMTP
>   (SMTPD-8.20) id AF3C0298; Wed, 01 Jun 2005 07:42:52 -0400
> Received: from localhost (localhost [127.0.0.1])
>   by mx2.rmslink.net (Postfix) with ESMTP id 2F58139863
>   for <[EMAIL PROTECTED]>; Wed,  1 Jun 2005 07:20:47 -0400 (EDT)
> Received: from gatesalbert.com (81-202-101-107.user.ono.com
> [81.202.101.107])
>   by mx2.rmslink.net (Postfix) with SMTP id 46D5B39845
>   for <[EMAIL PROTECTED]>; Wed,  1 Jun 2005 07:20:40 -0400 (EDT)
> From: "Feli Ridgeway" <[EMAIL PROTECTED]>
> To: "Napier Kincaid" <[EMAIL PROTECTED]>
> Subject: Re: Really Works GGood
> Date: Wed, 1 Jun 2005 06:42:20 -0500
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>   boundary="=_NextPart_000_0057_01C5669E.F7E87600"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Unsent: 1
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
> Message-Id: <[EMAIL PROTECTED]>
> X-Virus-Scanned: amavisd-new 2.3.0 (20050424) at taisweb.net
> Return-Path: [EMAIL PROTECTED]
> X-OriginalArrivalTime: 01 Jun 2005 11:48:14.0907 (UTC)
> FILETIME=[CB72F8B0:01C5669F]
> 
> --=_NextPart_000_0057_01C5669E.F7E87600
> Content-Type: text/plain;
>   charset="us-ascii"
> Content-Transfer-Encoding: quoted-printable
> 
> --=_NextPart_000_0057_01C5669E.F7E87600
> Content-Type: text/html;
>   charset="us-ascii"
> Content-Transfer-Encoding: quoted-printable
> 
> 
> --=_NextPart_000_0057_01C5669E.F7E87600--


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Message not scanned

[John Tolmachoff \(Lists\)]

Check your server event log for Error messages Event ID 4 Source SRV.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Dan Horne
> Sent: Wednesday, June 01, 2005 5:58 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Message not scanned
> 
> I have received a couple of messages in the last two days in my inbox
> that were NOT scanned by Declude.  I thought the headers below were
> strange, since they seem to have MIME segments in them.  However,
> another message in my inbox that was spam (below my hold weight) also
> has similar MIME segments, but was scanned by Declude, evidenced by the
> Declude headers.  The Declude headers are not present (I add several
> headers with Declude) in the email below.  The line "X-Virus-Scanned:
> amavisd-new 2.3.0 (20050424) at taisweb.net" was added by my gateway
> postfix box that scans messages with clamav.
> 
> When searching the Declude logs, the queue number 9F3B01A60A71 does
> not appear.  Neither does a07e06888a82, though I wouldn't expect it
> to as that is the forward message, which should appear after Declude
> scans.  Version info: Imail v8.2 HF2, Declude Junkmail Pro/Virus
> Standard/Hijack v2.0.6.10.
> 
> For reference, I have attached a file with the headers of the other spam
> message I mentioned, so you can see what kind of headers I add that are
> missing below.
> 
> 
> IMAIL LOG
> SMTPD (9f3b01a60a71) [172.20.5.2] connect 68.118.154.7 port 60324
> SMTPD (9f3b01a60a71) [68.118.154.7] EHLO mx2.rmslink.net
> SMTPD (9f3b01a60a71) [68.118.154.7] MAIL
> FROM:<[EMAIL PROTECTED]>
> SMTPD (9f3b01a60a71) [68.118.154.7] RCPT TO:<[EMAIL PROTECTED]>
> SMTPD (9f3b01a60a71) [x] looking up taisweb.net in HOSTS
> SMTPD (9f3b01a60a71) [68.118.154.7] DATA
> SMTPD (9f3b01a60a71) [68.118.154.7]
> S:\imail\spool\D9f3b01a60a71.SMD 4808
> SMTP () Info - Adding Queue file
> S:\imail\spool\Q9F3B01A60A71.SMD
> SMTP (9f3b01a60a71) processing S:\imail\spool\Q9F3B01A60A71.SMD
> SMTP (9f3b01a60a71) ldeliver mail.taisweb.net copyall-main (1)
> [EMAIL PROTECTED] 4808
> SMTP (9f3b01a60a71) forwarded message to [EMAIL PROTECTED]
> using new file: a07e06888a82
> SMTP (9f3b01a60a71) finished S:\imail\spool\Q9F3B01A60A71.SMD
> status=1
> 
> HEADERS--
> Microsoft Mail Internet Headers Version 2.0
> Received: from mail.taisweb.net ([68.118.153.2]) by ex1.wilcoxent.net
> with Microsoft SMTPSVC(6.0.3790.211);
>Wed, 1 Jun 2005 07:48:14 -0400
> Received: from SMTP32-FWD by mail.taisweb.net
>   (SMTP32) id A9F3B01A60A71; Wed,  1 Jun 2005 07:48:14
> Received: from mx2.rmslink.net [68.118.154.7] by mail.taisweb.net with
> ESMTP
>   (SMTPD-8.20) id AF3C0298; Wed, 01 Jun 2005 07:42:52 -0400
> Received: from localhost (localhost [127.0.0.1])
>   by mx2.rmslink.net (Postfix) with ESMTP id 2F58139863
>   for <[EMAIL PROTECTED]>; Wed,  1 Jun 2005 07:20:47 -0400 (EDT)
> Received: from gatesalbert.com (81-202-101-107.user.ono.com
> [81.202.101.107])
>   by mx2.rmslink.net (Postfix) with SMTP id 46D5B39845
>   for <[EMAIL PROTECTED]>; Wed,  1 Jun 2005 07:20:40 -0400 (EDT)
> From: "Feli Ridgeway" <[EMAIL PROTECTED]>
> To: "Napier Kincaid" <[EMAIL PROTECTED]>
> Subject: Re: Really Works GGood
> Date: Wed, 1 Jun 2005 06:42:20 -0500
> MIME-Version: 1.0
> Content-Type: multipart/alternative;
>   boundary="=_NextPart_000_0057_01C5669E.F7E87600"
> X-Priority: 3
> X-MSMail-Priority: Normal
> X-Unsent: 1
> X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106
> Message-Id: <[EMAIL PROTECTED]>
> X-Virus-Scanned: amavisd-new 2.3.0 (20050424) at taisweb.net
> Return-Path: [EMAIL PROTECTED]
> X-OriginalArrivalTime: 01 Jun 2005 11:48:14.0907 (UTC)
> FILETIME=[CB72F8B0:01C5669F]
> 
> --=_NextPart_000_0057_01C5669E.F7E87600
> Content-Type: text/plain;
>   charset="us-ascii"
> Content-Transfer-Encoding: quoted-printable
> 
> --=_NextPart_000_0057_01C5669E.F7E87600
> Content-Type: text/html;
>   charset="us-ascii"
> Content-Transfer-Encoding: quoted-printable
> 
> 
> --=_NextPart_000_0057_01C5669E.F7E87600--


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Virus Getting Through AV and FProt

[John Tolmachoff \(Lists\)]

This has been covered for a couple of hours now on the Declude Virus list.

You need to update your F-Prot configuration to include the virus code 8 as
a match.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of A. Clausen
> Sent: Tuesday, May 31, 2005 1:29 PM
> To: Declude JunkMail
> Subject: [Declude.JunkMail] Virus Getting Through AV and FProt
> 
> We're getting a virus coming through and its causing some strange results
in
> Declude AV.  The file itself is a zip file called "2.zip" which contains
the
> file "02_05_2005.exe".  In the Declude AV log we're seeing lines like
this:
> 
> 05/31/2005 09:07:28 Q8bbf2a5f00800b96 MIME file: 8.zip [base64;
Length=18205
> Checksum=2348990]
> 05/31/2005 09:07:38 Q8bbf2a5f00800b96 Could not find parse string
Infection
> in report.txt
> 05/31/2005 09:07:38 Q8bbf2a5f00800b96 Error 8 in virus scanner 1.
> 05/31/2005 09:07:38 Q8bbf2a5f00800b96 Scanned: Error in virus scanner.
> [MIME: 2 18323]
> 
> Is FProt just behind in updating its definitions or is there something
nasty
> happening?
> 
> --
> Aaron Clausen
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Insufficient system resources error

[John Tolmachoff \(Lists\)]

Right idea Ralph. We need to all work together to find this, as it happened
again this morning.

> What version of Windows are you using?
Windows 2000 server standard

> What SP's are installed?
SP4

> What version of Declude are you using?
2.0.6 NOTE: I also tried 2.0.6.14 and it occurred as well.

> What version of IMail are you using?
8.20

> What hot fixes have you applied to IMail?
None yet.

> How long before you see this resource problem?
Aprox 2 days after last restart, usually between 5:30AM and 7:30 AM

> Does your scanner software automatically update itself (not definitions
but
> the software itself)
AVG and F-Prot, Yes

> When did this start happening? 
Last Friday, 05/20 was first occurrence.

> Did ANY kind upgrade happen? Win, Declude, IMail, Scanner?
No, not that I am aware of.

> Your name and phone number
On file.

> Any else you suspect or find odd.
Nothing yet.

FYI, I did try the first registry entry found in
http://support.microsoft.com/default.aspx?scid=kb;en-us;Q312362 but that has
not helped as it reoccurred. I am now trying the second entry.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Insufficient system resources error

[John Tolmachoff \(Lists\)]

A recap:

5 people including me have reported having this problem in the last week or
so.

One of those does not use AVG.

Alex has reported to me that since disabling AVG he has not seen the problem
reoccur in 1 1/2 days.

I have not disabled AVG as I do not think it is the culprit. My server has
been running since Sunday night.

Now, Sunday night I did make a registry change that has to do with kernel
page usage. I do not remember what it was right now but I can find it
easily.

I am running performance monitor on my server to see if it catches anything
when this happens again, if it happens again.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Insufficient system resources error

[John Tolmachoff \(Lists\)]

Robert, are you using AVG?

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Robert
> Sent: Monday, May 23, 2005 5:34 AM
> To: Declude.JunkMail@declude.com
> Subject: Re: [Declude.JunkMail] Insufficient system resources error
> 
> Also,
> 
> I am running 7.15 and declude 1.77131.  I haven't changed anything in my
> settings for at least a month.
> Win 2K.   I stopped all outside mail from the system for 2 hours and still
> couldn't ragain control. CPU was at 10 to 15% memory was at about the same.
> Not busy, Just Insufficient system resources .
> 
> 
> Robert Whitaker
> The Modem Pool
> 517-789-5689
> 1-888-377-5689
> 
> Be sure to try the New Web Express Internet Accelerator from The Modem Pool
> http://web-express.modempool.com
> 
> 
> 
> 
> - Original Message -
> From: Robert <[EMAIL PROTECTED]>
> To: 
> Sent: Monday, May 23, 2005 8:24 AM
> Subject: Re: [Declude.JunkMail] Insufficient system resources error
> 
> 
> > I had the same problem all weekend.
> > It gone now.
> > I couldn't even rename the log file, Insufficient system resources error,
> > even from another computer thru the network.
> > Robert Whitaker
> > The Modem Pool
> > 517-789-5689
> > 1-888-377-5689
> >
> > Be sure to try the New Web Express Internet Accelerator from The Modem
> Pool
> > http://web-express.modempool.com
> >
> >
> > - Original Message -
> > From: John Tolmachoff (Lists) <[EMAIL PROTECTED]>
> > To: 
> > Sent: Monday, May 23, 2005 5:35 AM
> > Subject: RE: [Declude.JunkMail] Insufficient system resources error
> >
> >
> > Running Imail 8.20, Declude 2.0.6 (occurred with 2.0.6.14 as well),
> F-Prot,
> > AVG, Sniffer, SpamCheck, Kiwi Syslog all on Windows 2000 Server standard.
> >
> > Nothing has changed on server in the last 3 weeks.
> >
> > Chkdsk found errors on 2 of 8 partitions, system and spool. Both are
> > mirrored on separate drives but have other partitions on those drives. I
> > will try running chkdsk /f Monday night.
> >
> > I have 2 page files on 2 separate partitions on 2 separate drives.
> >
> > John T
> > eServices For You
> >
> >
> > > -Original Message-
> > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> > > [EMAIL PROTECTED] On Behalf Of Hirthe, Alexander
> > > Sent: Monday, May 23, 2005 2:20 AM
> > > To: Declude.JunkMail@declude.com
> > > Subject: RE: [Declude.JunkMail] Insufficient system resources error
> > >
> > > Hello John,
> > >
> > > I still have the Problem, the server locked up the time I sended the
> first
> > > mail.
> > >
> > > Do you run F-Prot/Clam/AVG? Maybe it's one of them? I didn't change
> > anything
> > > on the system.
> > > (ok, some new domains, some new accounts, but the system was up since
> > > february).
> > >
> > > Alex
> > >
> > > > -Original Message-
> > > > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED]
> > > > Sent: Monday, May 23, 2005 9:42 AM
> > > > To: Declude.JunkMail@declude.com
> > > > Subject: [Declude.JunkMail] Insufficient system resources error
> > > >
> > > > Major problem on my server on 05/22/05 starting at 06:30 AM.
> > > > I do not think
> > > > this is caused by Imail or Declude as nothing has changed in
> > > > the 3 weeks.
> > > >
> > > > It appears at 6:30 AM I started getting the 2020 event error
> > > > on the server
> > > > and repeating every couple of minutes. Imail services kept working but
> > > > Declude was not always working. 1 out of 10 messages would be
> > > > scanned with
> > > > no error by Declude Virus but the Junkmail log stopped at that time.
> > > > However, both the Sniffer and SpamCheck logs show that they
> > > > were scanning
> > > > messages as called by Declude.
> > > >
> > > > Searching eventid.net finds a bunch of stuff. It appears to be leaning
> > > > towards adding a registry setting to decrease the default
> > > > amount of paged
> > > > kernel memory in use, but that is not a real solution.
> > > >
> > > > I was able to log onto the console, but not able to open
> > > > anything so not
> > > > sure what was going on a

RE: [Declude.JunkMail] Insufficient system resources error

[John Tolmachoff \(Lists\)]

Alex, are you using AVG?

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Hirthe, Alexander
> Sent: Monday, May 23, 2005 2:06 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Insufficient system resources error
> 
> Hello John,
> 
> I had a Problem on Thursday/Friday/Saturday, the Server finally locked up
> with "not enough memory".
> 
> I had a bad block on my spool drive (checkdisk said "orphaned file")
> try a chkdsk D: (or whatever it may be :)
> it will just check and will keep Imail running.
> If it will find errors you should run it with /f to fix the errors.
> 
> I think Imail and/or Declude could have caused the problem if there are too
> many parallel connections. (I THINK, I'm really not sure :)
> We where hardly hit from the german Spam (we filtered it, but the mails came
> in).
> 
> We run Imail on a Dual Xeon (Intel SR7520JR2 Board), 2 GB RAM, 3*Raid-1
> (System/Spool/Mail), 2003 SP1 (since Saturday), Imail 8.15 HF1 (since
> Saturday, before 8.14), Declude 1.8
> 
> Alex
> 
> > -Original Message-
> > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED]
> > Sent: Monday, May 23, 2005 9:42 AM
> > To: Declude.JunkMail@declude.com
> > Subject: [Declude.JunkMail] Insufficient system resources error
> >
> > Major problem on my server on 05/22/05 starting at 06:30 AM.
> > I do not think
> > this is caused by Imail or Declude as nothing has changed in
> > the 3 weeks.
> >
> > It appears at 6:30 AM I started getting the 2020 event error
> > on the server
> > and repeating every couple of minutes. Imail services kept working but
> > Declude was not always working. 1 out of 10 messages would be
> > scanned with
> > no error by Declude Virus but the Junkmail log stopped at that time.
> > However, both the Sniffer and SpamCheck logs show that they
> > were scanning
> > messages as called by Declude.
> >
> > Searching eventid.net finds a bunch of stuff. It appears to be leaning
> > towards adding a registry setting to decrease the default
> > amount of paged
> > kernel memory in use, but that is not a real solution.
> >
> > I was able to log onto the console, but not able to open
> > anything so not
> > sure what was going on at the time.
> >
> > Any one have any ideas?
> >
> > --
> > --
> > -
> > 05/22/2005 06:30:07 Q895E0253D72E Error 1450 creating
> > temp directory
> > F:\SPOOL\D895E0253D72E.vir\. [Insufficient system
> > resources exist to
> > complete the requested service.]
> > 05/22/2005 06:30:07 Q895E0253D72E Scanned: Error starting scanner
> >
> > 05/22/2005 06:33:14 Q8A16024DD77A Vulnerability flags = 0
> > 05/22/2005 06:33:14 Q8A16024DD77A MIME file: [text/html][8bit;
> > Length=2634 Checksum=216613]
> > 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 1 reports
> > exit code of 0
> > 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 2 reports
> > exit code of 0
> > 05/22/2005 06:33:15 Q8A16024DD77A 1 [1 of 2 not deleted]
> > files were
> > deleted.  You should not use an on-access virus scanner that scans the
> > \IMail directory or sub-directories.
> > 05/22/2005 06:33:15 Q8A16024DD77A Scanned: Virus Free
> > [MIME: 2 2740]
> >
> > --
> > --
> > ---
> > Event Type: Error
> > Event Source:   Srv
> > Event Category: None
> > Event ID:   2020
> > Date:   5/22/2005
> > Time:   10:42:24 PM
> > User:   N/A
> > Computer:   MAIL
> > Description:
> > The server was unable to allocate from the system paged pool
> > because the
> > pool was empty.
> > Data:
> > : 00 00 04 00 01 00 54 00   ..T.
> > 0008: 00 00 00 00 e4 07 00 c0   ä..À
> > 0010: 00 00 00 00 9a 00 00 c0   š..À
> > 0018: 00 00 00 00 00 00 00 00   
> > 0020: 00 00 00 00 00 00 00 00   
> > 0028: 02 00 00 00   
> > --
> > --
> > 
> >
> > John T
> > eServices For You
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> >
> >
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Insufficient system resources error

[John Tolmachoff \(Lists\)]

Running Imail 8.20, Declude 2.0.6 (occurred with 2.0.6.14 as well), F-Prot, 
AVG, Sniffer, SpamCheck, Kiwi Syslog all on Windows 2000 Server standard.

Nothing has changed on server in the last 3 weeks.

Chkdsk found errors on 2 of 8 partitions, system and spool. Both are mirrored 
on separate drives but have other partitions on those drives. I will try 
running chkdsk /f Monday night.

I have 2 page files on 2 separate partitions on 2 separate drives.

John T
eServices For You


> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Hirthe, Alexander
> Sent: Monday, May 23, 2005 2:20 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Insufficient system resources error
> 
> Hello John,
> 
> I still have the Problem, the server locked up the time I sended the first
> mail.
> 
> Do you run F-Prot/Clam/AVG? Maybe it's one of them? I didn't change anything
> on the system.
> (ok, some new domains, some new accounts, but the system was up since
> february).
> 
> Alex
> 
> > -Original Message-
> > From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED]
> > Sent: Monday, May 23, 2005 9:42 AM
> > To: Declude.JunkMail@declude.com
> > Subject: [Declude.JunkMail] Insufficient system resources error
> >
> > Major problem on my server on 05/22/05 starting at 06:30 AM.
> > I do not think
> > this is caused by Imail or Declude as nothing has changed in
> > the 3 weeks.
> >
> > It appears at 6:30 AM I started getting the 2020 event error
> > on the server
> > and repeating every couple of minutes. Imail services kept working but
> > Declude was not always working. 1 out of 10 messages would be
> > scanned with
> > no error by Declude Virus but the Junkmail log stopped at that time.
> > However, both the Sniffer and SpamCheck logs show that they
> > were scanning
> > messages as called by Declude.
> >
> > Searching eventid.net finds a bunch of stuff. It appears to be leaning
> > towards adding a registry setting to decrease the default
> > amount of paged
> > kernel memory in use, but that is not a real solution.
> >
> > I was able to log onto the console, but not able to open
> > anything so not
> > sure what was going on at the time.
> >
> > Any one have any ideas?
> >
> > --
> > --
> > -
> > 05/22/2005 06:30:07 Q895E0253D72E Error 1450 creating
> > temp directory
> > F:\SPOOL\D895E0253D72E.vir\. [Insufficient system
> > resources exist to
> > complete the requested service.]
> > 05/22/2005 06:30:07 Q895E0253D72E Scanned: Error starting scanner
> >
> > 05/22/2005 06:33:14 Q8A16024DD77A Vulnerability flags = 0
> > 05/22/2005 06:33:14 Q8A16024DD77A MIME file: [text/html][8bit;
> > Length=2634 Checksum=216613]
> > 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 1 reports
> > exit code of 0
> > 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 2 reports
> > exit code of 0
> > 05/22/2005 06:33:15 Q8A16024DD77A 1 [1 of 2 not deleted]
> > files were
> > deleted.  You should not use an on-access virus scanner that scans the
> > \IMail directory or sub-directories.
> > 05/22/2005 06:33:15 Q8A16024DD77A Scanned: Virus Free
> > [MIME: 2 2740]
> >
> > --
> > --
> > ---
> > Event Type: Error
> > Event Source:   Srv
> > Event Category: None
> > Event ID:   2020
> > Date:   5/22/2005
> > Time:   10:42:24 PM
> > User:   N/A
> > Computer:   MAIL
> > Description:
> > The server was unable to allocate from the system paged pool
> > because the
> > pool was empty.
> > Data:
> > : 00 00 04 00 01 00 54 00   ..T.
> > 0008: 00 00 00 00 e4 07 00 c0   ä..À
> > 0010: 00 00 00 00 9a 00 00 c0   š..À
> > 0018: 00 00 00 00 00 00 00 00   
> > 0020: 00 00 00 00 00 00 00 00   
> > 0028: 02 00 00 00   
> > --
> > --
> > 
> >
> > John T
> > eServices For You
> >
> >
> > ---
> > This E-mail came from the Declude.JunkMail mailing list.  To
> > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.JunkMail".  The archives can be found
> > at http://www.mail-archive.com.
> >
> >
> >
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Insufficient system resources error

[John Tolmachoff \(Lists\)]

Major problem on my server on 05/22/05 starting at 06:30 AM. I do not think
this is caused by Imail or Declude as nothing has changed in the 3 weeks.

It appears at 6:30 AM I started getting the 2020 event error on the server
and repeating every couple of minutes. Imail services kept working but
Declude was not always working. 1 out of 10 messages would be scanned with
no error by Declude Virus but the Junkmail log stopped at that time.
However, both the Sniffer and SpamCheck logs show that they were scanning
messages as called by Declude.

Searching eventid.net finds a bunch of stuff. It appears to be leaning
towards adding a registry setting to decrease the default amount of paged
kernel memory in use, but that is not a real solution.

I was able to log onto the console, but not able to open anything so not
sure what was going on at the time.

Any one have any ideas?


-
05/22/2005 06:30:07 Q895E0253D72E Error 1450 creating temp directory
F:\SPOOL\D895E0253D72E.vir\. [Insufficient system resources exist to
complete the requested service.]
05/22/2005 06:30:07 Q895E0253D72E Scanned: Error starting scanner

05/22/2005 06:33:14 Q8A16024DD77A Vulnerability flags = 0
05/22/2005 06:33:14 Q8A16024DD77A MIME file: [text/html][8bit;
Length=2634 Checksum=216613]
05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 1 reports exit code of 0
05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 2 reports exit code of 0
05/22/2005 06:33:15 Q8A16024DD77A 1 [1 of 2 not deleted] files were
deleted.  You should not use an on-access virus scanner that scans the
\IMail directory or sub-directories.
05/22/2005 06:33:15 Q8A16024DD77A Scanned: Virus Free [MIME: 2 2740]


---
Event Type: Error
Event Source:   Srv
Event Category: None
Event ID:   2020
Date:   5/22/2005
Time:   10:42:24 PM
User:   N/A
Computer:   MAIL
Description:
The server was unable to allocate from the system paged pool because the
pool was empty. 
Data:
: 00 00 04 00 01 00 54 00   ..T.
0008: 00 00 00 00 e4 07 00 c0   ä..À
0010: 00 00 00 00 9a 00 00 c0   š..À
0018: 00 00 00 00 00 00 00 00   
0020: 00 00 00 00 00 00 00 00   
0028: 02 00 00 00   



John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Verizon Faced With Lawsuits Over Blocking eMail From Foreign IP Addresses

[John Tolmachoff \(Lists\)]

> Lets sign him up for a lot of spam from Korea, Japan, etc and see how he
> feels about blocking foreign IPs then...
> 
> Sorry to go off on a rant here

The point is a company such as Verizon providing service to a wide and far
reaching ranged of customers can not arbitrarily make such a decision for
all of its customers. 

Example, I have a client that deals in electronics. Gee, where do a lot of
electronics get made and come from, the Orient. Therefore, I can not
arbitrarily block IPs from the Orient as I would then be blocking my
client's legitimate e-mails.

However, a public school system in Texas would probably have very little use
for e-mail communication with the Orient and therefore they could safely
block those IP ranges.

John T
eServices For You


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Declude memory issues

[John Tolmachoff \(Lists\)]

Well, since Declude.exe is called from Imail SMPTD.exe and Declude.exe
closes as soon as it is done processing it would be nearly impossible to say
that Declude.exe had a memory leak and was holding memory unless the process
never ended in which case messages processed by Declude.exe never got
delivered.

Memory leaks are caused by programs that remain running. Once a program
closes it releases all its resources. By closing, I mean it no longer is
listed in Task Manager. 

If you run Task Manager you can select columns and look and sort by Memory
Use and see what is hogging the memory.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Will
> Sent: Tuesday, May 17, 2005 6:40 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] Declude memory issues
> 
> I had noticed this with an older version and now that I am a Declude
> user again, I see we still have an issue.  There appears to be a memory
> leak when running Declude on our Imail server, which is not there when I
> remove Delcude.  My server will run for about two weeks before my memory
> gets to the point that it can no longer support the running processes
> and mail begins to get backlogged severely.
> 
> Does anyone else run into this issue or find they need to instate
> automated reboots?  I really do not want to do this.
> 
> Will
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Thoughts on why this "did not make it"

[John Tolmachoff \(Lists\)]

Yes, I would say the next step is to
review the Message Tracking logs on their Exchange server.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
Sent: Monday, May 16,
 2005 9:26 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail]
Thoughts on why this "did not make it"

 

Hi,

 

This is the IMail log for a specific message that was sent through me to
my client. The SendingDomain.com is actually whitelisted in their per domain
whitelist file. On May 10 there were 3 messages from sender to
receiver and 2 of them did not make it but one did. This is one of the
“did not make it” ones. All three of them were addressed to the
same three people. 

 

As far as I can tell we got it OK, processed it (whitelisted) and then
handed it off to the client. We got a 250 OK at the end of the data, got 250
OKs from the RCPT TO.

 

So if we gave it to the client (and it looks like we did unless I am
missing something) I guess the next step is for the client to review their
Exchange logs. Any other thoughts?

 

Thanx

 

 

05:10 10:00 SMTPD(be761384002c6f12) [10.0.0.8] connect
160.109.101.40 port 49675

05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40]
EHLO smtp.SendingDomain.com

05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40]
MAIL From:<[EMAIL PROTECTED]>

05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40]
RCPT To:<[EMAIL PROTECTED]> NOTIFY=FAILURE,DELAY

05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40]
RCPT To:<[EMAIL PROTECTED]> NOTIFY=FAILURE,DELAY

05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40]
RCPT To:<[EMAIL PROTECTED]> NOTIFY=FAILURE,DELAY

05:10 10:00 SMTPD(be761384002c6f12) [160.109.101.40]
C:\IMail\spool\Dbe761384002c6f12.SMD 14046

05:10 10:00 SMTP-() Info - Adding Queue
file C:\IMail\spool\Qbe761384002c6f12.SMD 

05:10 10:00 SMTP-(be761384002c6f12) processing
C:\IMail\spool\Qbe761384002c6f12.SMD

05:10 10:00 SMTP-(be761384002c6f12) [x] looking up
ReceivingDomain.com in HOSTS and MX

05:10 10:00 SMTP-(be761384002c6f12) [x] looking up
ReceivingDomain.com in HOSTS and MX

05:10 10:00 SMTP-(be761384002c6f12) [x] looking up
ReceivingDomain.com in HOSTS and MX

05:10 10:00 SMTP-(be761384002c6f12) Trying
ReceivingDomain.com (0)

05:10 10:00 SMTP-(be761384002c6f12) [x] Connecting
socket to service  on host  using
protocol 

05:10 10:00 SMTP-(be761384002c6f12) [x] using source IP
for mail1.gonetworks.net [10.0.0.8]

05:10 10:00 SMTP-(be761384002c6f12) Connect
ReceivingDomain.com [xxx.xxx.xxx.xxx:25] (1)

05:10 10:00 SMTP-(be761384002c6f12) 220
server.ReceivingDomain.com ESMTP Server (Microsoft Exchange Internet Mail
Service 5.5.2650.10) ready

05:10 10:00 SMTP-(be761384002c6f12) >EHLO
mail1.gonetworks.net

05:10 10:00 SMTP-(be761384002c6f12)
250-server.ReceivingDomain.com Hello [cmail1.gonetworks.net]

05:10 10:00 SMTP-(be761384002c6f12) 250-XEXCH50

05:10 10:00 SMTP-(be761384002c6f12) 250-HELP

05:10 10:00 SMTP-(be761384002c6f12) 250-ETRN

05:10 10:00 SMTP-(be761384002c6f12) 250-DSN

05:10 10:00 SMTP-(be761384002c6f12) 250-SIZE 5120

05:10 10:00 SMTP-(be761384002c6f12) 250-AUTH LOGIN

05:10 10:00 SMTP-(be761384002c6f12) 250 AUTH=LOGIN

05:10 10:00 SMTP-(be761384002c6f12) >MAIL
FROM:<[EMAIL PROTECTED]>

05:10 10:00 SMTP-(be761384002c6f12) 250 OK - mail from
<[EMAIL PROTECTED]>

05:10 10:00 SMTP-(be761384002c6f12) >RCPT
To:<[EMAIL PROTECTED]> NOTIFY=FAILURE,DELAY

05:10 10:00 SMTP-(be761384002c6f12) 250 OK - Recipient
<[EMAIL PROTECTED]>

05:10 10:00 SMTP-(be761384002c6f12) >RCPT
To:<[EMAIL PROTECTED]> NOTIFY=FAILURE,DELAY

05:10 10:00 SMTP-(be761384002c6f12) 250 OK - Recipient
<[EMAIL PROTECTED]>

05:10 10:00 SMTP-(be761384002c6f12) >RCPT
To:<[EMAIL PROTECTED]> NOTIFY=FAILURE,DELAY

05:10 10:00 SMTP-(be761384002c6f12) 250 OK - Recipient
<[EMAIL PROTECTED]>

05:10 10:00 SMTP-(be761384002c6f12) >DATA

05:10 10:00 SMTP-(be761384002c6f12) 354 Send data. 
End with CRLF.CRLF

05:10 10:00 SMTP-(be761384002c6f12) >.

05:10 10:00 SMTP-(be761384002c6f12) 250 OK

05:10 10:00 SMTP-(be761384002c6f12) rdeliver
ReceivingDomain.com multiple (3) <[EMAIL PROTECTED]> 14887

05:10 10:00 SMTP-(be761384002c6f12) >QUIT

05:10 10:00 SMTP-(be761384002c6f12) 221 closing
connection

05:10 10:00 SMTP-(be761384002c6f12) [u] closing socket
(u)

05:10 10:00 SMTP-(be761384002c6f12) finished
C:\IMail\spool\Qbe761384002c6f12.SMD status=1

 

 

 Goran Jovanovic

 The LAN Shoppe

RE: [Declude.JunkMail] Possible imail\declude issue

[John Tolmachoff \(Lists\)]

Incorrect. The missing line of the SMTPD
log is a missing line, meaning either something interrupted the session or the
lines are missing. Declude knows nothing of the message until after Imail SMTP
service has received it in its entirety.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Monday, May 16, 2005
1:17 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
Possible imail\declude issue

 

Harry,

That's what happens when Declude blocks an E-mail with an action like HOLD or
DELETE, or it gets blocked or deleted in Declude Virus.  You need to check
your JunkMail and Virus logs to determine what happened.

Matt



Harry Vanderzand wrote: 

I have a complaint from a clinet of missing e-mails that have a record inhis database but the e-mail was never received. Upon checking the logs I find entries as follows: 05:16 15:52 SMTPD(018600DC) [216.16.233.16] MAIL FROM: [EMAIL PROTECTED]05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED]05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED] When they should look like: 05:16 15:52 SMTPD(018600DC) [216.16.233.16] MAIL FROM: [EMAIL PROTECTED]05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED]05:16 15:52 SMTPD(018600DC) [216.16.233.16] RCPT TO: [EMAIL PROTECTED]05:16 15:52 SMTPD(018600DC) [216.16.233.16]D:\IMail\spool\Df9e2018600dcce43.SMD 1604 The spool line is missing I cannot find any other clues as too what is happening here. Anybody have any ideas? We run i-mail 8.05, imail v1.82 and sniffer  Harry Vanderzand inTown Internet & Computer Services 11 Belmont Ave. W., Kitchener, ON,N2M 1L2519-741-1222     

-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Scott FisherSent: Sunday, May 15, 2005 11:30 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] German political spam I cloned the subject lines and added them in this format to help combat thebounces:BODY 150 CONTAINS SUBJECT: (marcus's subjects) - Original Message -From: "Markus Gufler" <[EMAIL PROTECTED]>To: Sent: Sunday, May 15, 2005 11:41 AMSubject: RE: [Declude.JunkMail] German political spam  

Ok, I've added all subject line patterns (my, Marc's Nicks and bothSpamassassin cf-files) to one declude filter file. Please note that I've commented out "h eise.de" and "s   

piegel.de" body    

filter files and also that I usa a weight of 200. Markus   

---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com. 

  ---This E-mail came from the Declude.JunkMail mailing list.  Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail".  The archives can be foundat http://www.mail-archive.com.    





-- =MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/=

RE: [Declude.JunkMail] Graceful way to stop services

[John Tolmachoff \(Lists\)]

Title: Message









Andrew, great idea. Never thought of
disabling inbound connections on the firewall. That would indeed allow existing
to continue but prevent any new.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Friday, May 13, 2005
2:59 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
Graceful way to stop services

 



... which is why I tell my stateful
firewall instead.  Essentially, I disable the inbound SMTP rule, and the
stateful inspection does not interfere with the current transactions, just
blocks new connections.





 





Then I can do whatever maintenance
was required, including graceful shutdowns.  New connections are blocked,
and the sending server retries.  Typically, spammers don't, so there is no
tidal wave of backlogged spam that comes in with the ham once the firewall
allows inbound SMTP again.





 





 

RE: [Declude.JunkMail] Graceful way to stop services

[John Tolmachoff \(Lists\)]

Title: Message








True, there is no way to stop new
connections yet allow existing connections to complete.

 



John T

eServices For You



 



-Original Message-
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
Sent: Friday, May 13, 2005
2:36 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
Graceful way to stop services

 

But stopping the SMTP service creates the
incomplete T and D files right?

 

So there is no way to tell IMail to do not
accept any more connections and finish what you are doing so that I can stop the
process without getting the incomplete files?

 

I know that the sending server will retry
the mail again so I am not really worried about losing mail I was just trying
to prevent clutter in the spool directory. In any case I have a cleanup routing
that deletes old T, D and Q files.

 



 


Goran Jovanovic


The LAN Shoppe

 



 











From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Matt
Sent: Friday, May 13, 2005
5:09 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail]
Graceful way to stop services



 

You should only need to stop the SMTP service and then
wait about 10 seconds.

Matt



Goran Jovanovic wrote: 

Hi,

 

What is the most graceful way to stop mail
processing on an IMail/Declude process? 

 

At present when I have to stop the
services I stop the SMTP service then the Queue Manager Service, watch task
manager for all the Declude processes to stop.

 

Will this method leave T*.SMD files or
incomplete D*.SMD files? I think it does.

 



 

  




 



  
Goran Jovanovic




The LAN Shoppe





 

-- =MailPure custom filters for Declude JunkMail Pro.http://www.mailpure.com/software/=

RE: [Declude.JunkMail] Graceful way to stop services

[John Tolmachoff \(Lists\)]

Title: Message








The incomplete T and associated D files
are a result of stopping the Imail SMTP service. 

 

FYI, any such files will be retried by
the sending client or server as the session was incomplete.

 



John T

eServices For You



 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Friday, May 13,
 2005 1:42 PM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail]
Graceful way to stop services

 

Hi,

 

What is the most graceful way to stop mail
processing on an IMail/Declude process? 

 

At present when I have to stop the
services I stop the SMTP service then the Queue Manager Service, watch task manager
for all the Declude processes to stop.

 

Will this method leave T*.SMD files or
incomplete D*.SMD files? I think it does.

 



 


Goran Jovanovic


The LAN Shoppe

RE: [Declude.JunkMail] COPYALL setup

[John Tolmachoff \(Lists\)]

That is because COPYALL is an Imail configuration, not a Declude
configuration.

John T
eServices For You

> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of Chris Patterson
> Sent: Wednesday, May 11, 2005 7:06 AM
> To: Declude.JunkMail@declude.com
> Subject: [Declude.JunkMail] COPYALL setup
> 
> I cannot find an example for the global.cfg for a copyall setup.  I need
> to copy all incoming and outgoing e-mail for an account.
> 
> Thanks,
> 
> Chris Patterson, CCNA
> Network Engineer/Support Manager
> 
> 
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.