RE: [Declude.JunkMail] Insufficient system resources error
John, I had the same problem for the about three days last week. I would get on the server and couldn't open a thing error initializing .dll Not enough system resources, etc... I had been running the same setup as you for a while, but two weeks ago I added AVG as a second scanner and started seeing this issue last week after an update I had received from AVG. I uninstalled AVG and the issue went away. Thanks, Kris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Monday, May 23, 2005 2:42 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Insufficient system resources error Major problem on my server on 05/22/05 starting at 06:30 AM. I do not think this is caused by Imail or Declude as nothing has changed in the 3 weeks. It appears at 6:30 AM I started getting the 2020 event error on the server and repeating every couple of minutes. Imail services kept working but Declude was not always working. 1 out of 10 messages would be scanned with no error by Declude Virus but the Junkmail log stopped at that time. However, both the Sniffer and SpamCheck logs show that they were scanning messages as called by Declude. Searching eventid.net finds a bunch of stuff. It appears to be leaning towards adding a registry setting to decrease the default amount of paged kernel memory in use, but that is not a real solution. I was able to log onto the console, but not able to open anything so not sure what was going on at the time. Any one have any ideas? - 05/22/2005 06:30:07 Q895E0253D72E Error 1450 creating temp directory F:\SPOOL\D895E0253D72E.vir\. [Insufficient system resources exist to complete the requested service.] 05/22/2005 06:30:07 Q895E0253D72E Scanned: Error starting scanner 05/22/2005 06:33:14 Q8A16024DD77A Vulnerability flags = 0 05/22/2005 06:33:14 Q8A16024DD77A MIME file: [text/html][8bit; Length=2634 Checksum=216613] 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 1 reports exit code of 0 05/22/2005 06:33:15 Q8A16024DD77A Virus scanner 2 reports exit code of 0 05/22/2005 06:33:15 Q8A16024DD77A 1 [1 of 2 not deleted] files were deleted. You should not use an on-access virus scanner that scans the \IMail directory or sub-directories. 05/22/2005 06:33:15 Q8A16024DD77A Scanned: Virus Free [MIME: 2 2740] --- Event Type: Error Event Source: Srv Event Category: None Event ID: 2020 Date: 5/22/2005 Time: 10:42:24 PM User: N/A Computer: MAIL Description: The server was unable to allocate from the system paged pool because the pool was empty. Data: : 00 00 04 00 01 00 54 00 ..T. 0008: 00 00 00 00 e4 07 00 c0 .. 0010: 00 00 00 00 9a 00 00 c0 .. 0018: 00 00 00 00 00 00 00 00 0020: 00 00 00 00 00 00 00 00 0028: 02 00 00 00 John T eServices For You --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Multiple log lines per message
I am running declude 2.04 and I have noticed that there are 4 log lines for every message? What would cause this? What is R1, L2? How many lines per message should I have? 04/27/2005 10:43:31 Qb31e34670094d8a5 R1 Message OK 04/27/2005 10:43:31 Qb31e34670094d8a5 Tests failed [weight=16]: GIBBERISH=IGNORE ANTI-GIBBERISH=IGNORE Y!DIRECTED=IGNORE ANTI-Y!DIRECTED=IGNORE COMBO-ZOMBIEISH=IGNORE BASE64=IGNORE HELOBOGUS=IGNORE IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE WEIGHT10=IGNORE WEIGHT15=IGNORE 04/27/2005 10:43:31 Qb31e34670094d8a5 L2 Message OK 04/27/2005 10:43:31 Qb31e34670094d8a5 Tests failed [weight=16]: GIBBERISH=IGNORE ANTI-GIBBERISH=IGNORE Y!DIRECTED=IGNORE ANTI-Y!DIRECTED=IGNORE COMBO-ZOMBIEISH=WARN BASE64=WARN HELOBOGUS=WARN IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE WEIGHT10=WARN WEIGHT15=DELETE Thanks, Kris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Multiple log lines per message (2)
Why do you think there are multiple results though? This message was sent to one person and has 3 results? Thanks, Kris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, April 27, 2005 12:58 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Multiple log lines per message Kris, This appears to be the result of multiple recipients. The old log format would repeat the log lines for each recipient, and that does make sense when you consider that each recipient can have different actions, though for the most part they do not. Declude 2.0.6 has some new logging mechanisms that might cut this down substantially. You should probably consider upgrading as there have been many tweaks in recent times. You should also strongly consider updating the filters that you got from me a while back. The ANTI- filter tricks were retired in favor of new functionality that Declude released about a year ago. You can download the newest versions of these filters from the following location: http://www.mailpure.com/software/decludefilters/beta/ These filters are much more efficient, and they have also been upgraded in many other ways. You also only need one filter to accomplish the goals for the most part. Matt Kris McElroy wrote: I am running declude 2.04 and I have noticed that there are 4 log lines for every message? What would cause this? What is R1, L2? How many lines per message should I have? 04/27/2005 10:43:31 Qb31e34670094d8a5 R1 Message OK 04/27/2005 10:43:31 Qb31e34670094d8a5 Tests failed [weight=16]: GIBBERISH=IGNORE ANTI-GIBBERISH=IGNORE Y!DIRECTED=IGNORE ANTI-Y!DIRECTED=IGNORE COMBO-ZOMBIEISH=IGNORE BASE64=IGNORE HELOBOGUS=IGNORE IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE WEIGHT10=IGNORE WEIGHT15=IGNORE 04/27/2005 10:43:31 Qb31e34670094d8a5 L2 Message OK 04/27/2005 10:43:31 Qb31e34670094d8a5 Tests failed [weight=16]: GIBBERISH=IGNORE ANTI-GIBBERISH=IGNORE Y!DIRECTED=IGNORE ANTI-Y!DIRECTED=IGNORE COMBO-ZOMBIEISH=WARN BASE64=WARN HELOBOGUS=WARN IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE WEIGHT10=WARN WEIGHT15=DELETE Thanks, Kris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Is this the correct format?
66.54.138.* Description of why I want to list the whole class C /24, so is the above the correct syntax in an IPFILE? Thanks, Kris McElroy --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers
Do you have Junkmail Pro? This feature is only available in Declude Junkmail Pro. Thanks, Kris McElroy [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Tuesday, October 12, 2004 9:24 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] 6.3 Acting as a gateway for domains on other servers 6.3 Acting as a gateway for domains on other servers The only catch as far as Declude JunkMail is concerned is that IMail will treat the E-mail to the gateway domain as outgoing mail, since it is not stored on the IMail server. Therefore, by default, the outgoing actions in the \IMail\Declude\global.cfg file will be used. To get around this, you can set up per-domain configuration files for the gateway domains. Hello All, I'm trying to setup my server to act as a gateway and I have the Imail part working. I'm having trouble with the declude part though. I can't seem to get my server to scan for junkmail for the domain that I'm acting as a gateway. I have added the folder for the FORWARDDOMAIN.COM and added the $default$.junkmail file. What am I missing on the per-domain configuration? Thanks Mike --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Outlook 2003
Has anyone found a way to add a negative weight to Outlook 2003 clients for the spamheaders test? I am running into a problem where it is failing the spamheaders test which is causing the weight to go over the and hold the emails? Thanks, Kris McElroy [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Mail From Help
I am wanting to block anything in the From line that says Sapphirex, so I created a filter called mail_from and it contains the following: MAILFROM10 CONTRAINS Sapphirex But for some reason this was allowed through? I have a customer whom gets about 100 of these a day from Sapphirex with random email addresses? From: Sapphirex Expeditors [EMAIL PROTECTED] To: Mike Houck [EMAIL PROTECTED] Subject: Houck Residence: 9 N. 11th Mortgagor Statement Date: Thu, 10 Jun 2004 14:37:28 -0600 Message-ID: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_000_0874_BE1151DD.45791A93 X-RBL-Warning: WEIGHT10: Weight of 13 reaches or exceeds the limit of 10. X-Declude-Sender: [EMAIL PROTECTED] [64.136.98.37] X-Declude-Spoolname: Db87e40730100217b.SMD X-Note: This E-mail was scanned by Duracom.Net for spam X-Country-Chain: UNITED STATES-destination X-Server: [65.66.8.6]Mailgateway2.duracom.net v.1.78 X-Note: This E-mail was sent from mx37.dacehadr.us ([64.136.98.37]) X-Spam-Tests-Failed: GREY_FILTER_BODY, GIBBERISH, ANTI-GIBBERISH, MAILPOLICE-BULK, IPNOTINMX, NOLEGITCONTENT, WEIGHT10 [13] X-Note: Header code: e Return-Path: [EMAIL PROTECTED] X-Note: Total Weight 13 X-Note: Please send abuse reports to [EMAIL PROTECTED] Status: U X-UIDL: 385411184 Thanks, Kris McElroy [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hour Test
I am trying to test out the new HOUR test, I can't get it to work. Is this the correct format in my global.cfg: HOURhour23 6 5 0 Will this tag everything between 11 PM and 6 AM with a weight of 5 correct? I am using Declude Junkmail Pro 1.78. Thanks, Kris [AUTOMATED NOTE: Your mail server [65.66.8.3] is missing a reverse DNS entry. All Internet hosts are required to have a reverse DNS entry. The missing reverse DNS entry will cause your mail to be treated as spam on some servers, such as AOL.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Help on Filtering out this email
Received: from SMTP32-FWD by mail.compworldnet.com (SMTP32) id A07B4; Thu, 26 Feb 2004 09:47:55 -0600 Received: from Primary_Imail [65.66.8.5] by mail.compworldnet.com with ESMTP (SMTPD32-7.15) id A52ACD0272; Thu, 26 Feb 2004 09:47:54 -0600 Received: from vqkjazda.crazystart.com [69.84.204.27] by Primary_Imail with ESMTP (SMTPD32-7.15) id A523BFE0084; Thu, 26 Feb 2004 09:47:47 -0600 Reply-To: [EMAIL PROTECTED] From: Life Quotes [EMAIL PROTECTED] I want to filter out the word Life Quotes, I have tried this by HEADERS 8 CONTAINS Life Quotes I have this in my global.cfg FILTER_HEADER filter C:\imail\Declude\filter_HEADERS.txt x 0 0 Shouldn't the above header fell the Filter_header Test? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE:[2] [Declude.JunkMail] Imail - DecludeJunkmail/Virus Gateway
Mark, Thanks for the example. I had a question though. Logical partitions: 9GB C: (System OS) 7GB D: (Imail/Junkmail) 20GB E: (Junkmail Log Files using NTFS Mount point to d:\Imail\Declude\Spamlogs) On Drive E, is this the Imail Spool Partition? D: is where Imail and Declude are installed and your log files for Declude write to the d:\Imail\Declude\Spamlogs? Out of curiosity are you Maximum SMTP Processes set to 30? Are you using Hardware Raid or software Raid? Thanks, Kris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mark Smith Sent: Monday, January 26, 2004 7:33 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Imail - DecludeJunkmail/Virus Gateway Kris, We have four inbound MX relayers for our Exchange 2003 system. The inbound MX relayers run iMail/Junkmail and each have an equal preference level in the MX records. Each of these servers are ONLY relayers. They're Dell Poweredge 1650's Dual Processor 1.2Ghz, 1GB RAM 3x36GB drives in RAID 0 (with the 3rd as a hot-swap). Logical partitions: 9GB C: (System OS) 7GB D: (Imail/Junkmail) 20GB E: (Junkmail Log Files using NTFS Mount point to d:\Imail\Declude\Spamlogs) Across all 4 relayers we process about 250,000-300,000 inbound messages a day (including spam/viruses). Works perfect for us. Mark E. Smith Systems and Technology Manager Associated Press Broadcast Technology 1825 K Street NW Suite 800 Washington, D.C. USA Phone: +1-202-736-9657 (GMT -05:00) Fax: +1-707-202-3957 http://www.ap.org http://www.enps.com Support Board: http://support.enps.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kris McElroy Sent: Monday, January 26, 2004 12:22 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Imail - DecludeJunkmail/Virus Gateway Sorry what I meant by example setups was the hard drive configuration and what type of hardware. I should have explained myself a little more clearly. Kris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Sunday, January 25, 2004 10:34 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Imail - DecludeJunkmail/Virus Gateway First off I would like to say thanks to you and thanks to the others on this list and the Imail list that put effort and time in to helping people. If you don't mind me asking I am assuming that you do consulting for companies that run Imail at high volumes. Do you have any example setups of a typical Gateway (Imail/Declude) that sees high volume? Typical is a very obscure word. You can some what describe typical ISP or typical educational, but other than that, each configuration can be different based on the end users. Example, I operate/consult on 5 Imail/Declude servers. Each one is different. 2 are a major regional ISPs, another is a corporate server for a financial company, another is a coporate server for a real estate company, and one is a small ISP which includes a client that deals in electronic parts, hence gets a lot of e-mail from the far east. The one server that I consult on that is high volume is not a gateway, but the actual mail box server. I can not directly share their configuration, but if you read the archives on this list, you will see a lot of work that has gone into optimizing filters. Hopefully soon, I will have a site up and running for members to share filters and such. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail - DecludeJunkmail/Virus Gateway
Sorry what I meant by example setups was the hard drive configuration and what type of hardware. I should have explained myself a little more clearly. Kris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Sunday, January 25, 2004 10:34 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Imail - DecludeJunkmail/Virus Gateway First off I would like to say thanks to you and thanks to the others on this list and the Imail list that put effort and time in to helping people. If you don't mind me asking I am assuming that you do consulting for companies that run Imail at high volumes. Do you have any example setups of a typical Gateway (Imail/Declude) that sees high volume? Typical is a very obscure word. You can some what describe typical ISP or typical educational, but other than that, each configuration can be different based on the end users. Example, I operate/consult on 5 Imail/Declude servers. Each one is different. 2 are a major regional ISPs, another is a corporate server for a financial company, another is a coporate server for a real estate company, and one is a small ISP which includes a client that deals in electronic parts, hence gets a lot of e-mail from the far east. The one server that I consult on that is high volume is not a gateway, but the actual mail box server. I can not directly share their configuration, but if you read the archives on this list, you will see a lot of work that has gone into optimizing filters. Hopefully soon, I will have a site up and running for members to share filters and such. John Tolmachoff Engineer/Consultant/Owner eServices For You --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Imail - DecludeJunkmail/Virus Gateway
Well after spending time reading the archives (IMail/Declude) it seems that I am going about the gateway hardware setup wrong. I have to much money/time invested in Declude/Windows/Imail/Dell to ditch what I have and go to something like IMGate. I know that people on this list run Declude/Imail as gateway servers that process much more mail than I do. I believe that my Dell PE 1750 will process the load that I have and then some IF setup correctly. The ingredient that I think that I am missing is adequate Disk setup. I concentrated more on processor speed than what mattered, the disk setup. Currently I have this setup: 1 36Gb 15K SCSI, with 4 Logical Drives C: OS Windows 2000 Server, Swap File by default D: Programs Imail, Diskeeper, Fprot, Declude E: Imail SPool F: Declude Log Files My Dell will only hold 3 SCSI Drives and I can purchase the PERC4DI 128MB Raid Card add on. The help that I need is how should I set the disk up with 3 Drives as a Gateway (incoming only, no mailboxes, no POP, no WebMail) server? Redundancy doesn't matter I just need speed and mail to flow without backing up. I feel that this is my issue after playing with settings and reading archives. Would someone please chime in and give me a direction which to travel with the proper Tweaks or here is my setup and we process 75 to 100K messages per day. This way I will have some type of mental diagram. Thanks, Kris --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Imail - DecludeJunkmail/Virus Gateway
John, First off I would like to say thanks to you and thanks to the others on this list and the Imail list that put effort and time in to helping people. If you don't mind me asking I am assuming that you do consulting for companies that run Imail at high volumes. Do you have any example setups of a typical Gateway (Imail/Declude) that sees high volume? Kris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Saturday, January 24, 2004 6:51 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Imail - DecludeJunkmail/Virus Gateway With the information you have given, I would go with the one of the 2 following: Note, it would be much better to use hardware RAID, but since you only have max 3 drives, I would use software. Even though you said redundancy is not an issue, you do get a slight performance boost using RAID 1 over no RAID. Configuration 1 using software RAID: Disk 0 Partition 1 RAID1 with Disk 1 Partition 1 14 GB OS, Imail and Declude Disk 0 Partition 2 No RAID 3 GB Page file 1 Disk 0 Partition 3 RAID1 with Disk 2 Partition 1 17 GB Imail Spool Disk 1 Partition 1 RAID1 with Disk 0 Partition 1 14 GB OS, Imail and Declude Disk 1 Partition 2 No RAID 3 GB Page file 2 Disk 1 Partition 3 Raid1 with Disk 2 Partition 2 17 GB Log Files Disk 2 Partition 1 RAID1 with Disk 0 Partition 3 17 GB Imail Spool Disk 2 Partition 2 RAID1 with Disk 1 Partition 2 17 GB Log files Configuration 2 using hardware RAID: Disk 0 and Disk 1 RAID1 by hardware. Partition 1 14 GB OS, Imail and Declude Partition 2 5 GB Page file Partition 3 17 GB Log files Disk 2 Imail spool John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kris McElroy Sent: Saturday, January 24, 2004 3:25 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Imail - DecludeJunkmail/Virus Gateway Well after spending time reading the archives (IMail/Declude) it seems that I am going about the gateway hardware setup wrong. I have to much money/time invested in Declude/Windows/Imail/Dell to ditch what I have and go to something like IMGate. I know that people on this list run Declude/Imail as gateway servers that process much more mail than I do. I believe that my Dell PE 1750 will process the load that I have and then some IF setup correctly. The ingredient that I think that I am missing is adequate Disk setup. I concentrated more on processor speed than what mattered, the disk setup. Currently I have this setup: 1 36Gb 15K SCSI, with 4 Logical Drives C: OS Windows 2000 Server, Swap File by default D: Programs Imail, Diskeeper, Fprot, Declude E: Imail SPool F: Declude Log Files My Dell will only hold 3 SCSI Drives and I can purchase the PERC4DI 128MB Raid Card add on. The help that I need is how should I set the disk up with 3 Drives as a Gateway (incoming only, no mailboxes, no POP, no WebMail) server? Redundancy doesn't matter I just need speed and mail to flow without backing up. I feel that this is my issue after playing with settings and reading archives. Would someone please chime in and give me a direction which to travel with the proper Tweaks or here is my setup and we process 75 to 100K messages per day. This way I will have some type of mental diagram. Thanks, Kris --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist
Can I whitelist something like this: WHITELIST HEADERS Containsnewtonwall.com Thanks, Kris --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Per User Setting Question
I am currently using the per user setting on some of my users. I have a question before I go any further with creating the personal .junkmail files. If I have tests 1,2,3,4 defined in my Global.Cfg file and I have only test 1,2 defined in my user.junkmail file am I correct to say that it will ONLY run the Test 1 and 2 that are defined in the user.junkmail file? Thanks, Kris --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Does Diskeeper Help on an imail server
I use diskeeper and use the set it and forget. I use the smart scheduling and it works like a champ on my servers (gateway and pop3/webmail server). Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Timothy Bohen Sent: Wednesday, January 14, 2004 11:47 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Does Diskeeper Help on an imail server My imail server is obviously hugely fragmented. If I spend the money on diskeeper will it be able to keep up with the fragmentation on a very busy imail server? I know this isn't a diskeeper mailing list but I always get the best/fastest answers on this list. Thanks Sent via the WebMail system at mail1.cmsinter.net --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Number of messages per day
Is there anyway that I can get a count of the Number of Incoming messages before Declude Junkmail/Virus gets them? I just need a count of incoming messages on the server? If I run the Imail Log Analyzer will this give me the number before or after declude? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Maximum Processes
I just brought my new Gateway server online today. Single 2.8GHz Xeon, 36Gb 15k Scsi, 1Gb ram. I have watched the que all day and it has just increased up to 8,700. I adjusted the Maximum Processes to 75, helped some, then I adjusted it to 100 and BAM and the que started decreasing steadily. Within 15 to 20 minutes it decreased to 7627, and the processor is not maxing out it is holding ground. I have been having issues with my previous mail gateway that mail would pile up and take anywhere from 4 to 6 hours to get to my inbox. Does this make sense to anyone, running at 100 Maximum Processes is this ok or is there any thing that I should worry about? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Maximum Processes
- How many drives? [IMail, Declude, mailboxes, spool - all they all on a single drive?] Single 36GB,15K SCSI 4 Partitions C: OS D: IMail/Declude E: IMail Spool F: Declude Logs NO MAILBOXES Gateway Server only - Have you run a test without Declude running? No - Any virus scanners? Fprot - OS? Windows 2000 Server - DNS server? Same machine or separate? Same machine supplies recursion for the gateway server only Windows DNS Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kami Razvan Sent: Monday, December 22, 2003 4:59 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Maximum Processes Just curious... - How many drives? [IMail, Declude, mailboxes, spool - all they all on a single drive?] - Have you run a test without Declude running? - Any virus scanners? - OS? - DNS server? Same machine or separate? Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kris McElroy Sent: Monday, December 22, 2003 5:48 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Maximum Processes I just brought my new Gateway server online today. Single 2.8GHz Xeon, 36Gb 15k Scsi, 1Gb ram. I have watched the que all day and it has just increased up to 8,700. I adjusted the Maximum Processes to 75, helped some, then I adjusted it to 100 and BAM and the que started decreasing steadily. Within 15 to 20 minutes it decreased to 7627, and the processor is not maxing out it is holding ground. I have been having issues with my previous mail gateway that mail would pile up and take anywhere from 4 to 6 hours to get to my inbox. Does this make sense to anyone, running at 100 Maximum Processes is this ok or is there any thing that I should worry about? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Subject Filter
I can use the following correct, inside of my filter file? SUBJECT 2 STARTSWITH ADV: Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] IPv4 Test format
Is this correct: BLACKHOLE-BRAZILip4rbrazil.blackholes.us127.0.0.2 3 0 or this: BLACKHOLE-BRAZILip4rbrazil.blackholes.us127.0.0.2 3 The first one has a trailing 0, the second one does not. Whis is the correct format? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Hardware Recommendation's
Based on my previous posting about the mail hanging, I believe that it is do to my hardware. I was curious if the following specs would work as a gateway server: Xeon 2.8GHz 73Gb 15K Scsi 1GB Ram This server will have Imail installed, Windows 2000 Server, Windows DNS, Declude Junkmail Pro and Declude Virus Pro, Fprot. Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Mail Hanging up
Is there anyway to have the gateway server dump the email to my server without having to set in the spool for so long? Also what do most of you have your Maxqueproc set to? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kris McElroy Sent: Wednesday, December 10, 2003 5:16 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Mail Hanging up I am running Windows DNS and the gateway server is the only machine that access to the DNS server. I also have another Gateway server that has about the same hardware specs, but a whole different set of domains that it happens to every once in a while too. If I were to upgrade my hardware what would you recommend? I am only using this as a relay server? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, December 10, 2003 4:47 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Mail Hanging up I couldn't get the find 12:10 14: sys1210.txt | find deliver /c to work That will work if you use the sys*.txt log file format. If you use the log*.txt log file format, it will be different (perhaps 12/10/2003 14: instead of 12:10 14:?). so I ran find deliver log1210.txt /c and find deliver log1209.txt /c 12-09-03 32,094 12-10-03 19,276 @ 4:15PM OK, that will show the number of E-mails per day. That will do, although won't be as precise. Now remember that this is happening once or twice a week. Is this low? high? That all depends on what is causing it. :) If it is a dictionary attack, that might be considered about average. If it is a user sending out 100,000 E-mails, that may be low or high depending on your user base. Do I need to up the Processor size? That, too, will depend on the underlying cause. For example, if it turns out your DNS server is hanging every few days (as all but the most recent versions of BIND 9 on NT would do), simply upgrading BIND or resetting it once a day be all you need to do. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Mail Hanging up
I couldn't get the find 12:10 14: sys1210.txt | find deliver /c to work so I ran find deliver log1210.txt /c and find deliver log1209.txt /c 12-09-03 32,094 12-10-03 19,276 @ 4:15PM Now remember that this is happening once or twice a week. Is this low? high? Do I need to up the Processor size? This is really becoming an issue since it is happening more and more. Any recommendations would be grateful. Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, December 10, 2003 3:58 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Mail Hanging up I have a gateway server that declude Junkmail Pro and Declude Virus are installed on along with Imail 7.15. Every week or two weeks my mail will be delayed between 2 to 4 or even 6 hours. This machine is a Dual PIII 866 1GB Ram, 80 GB IDE Hard Drive 3 com 10/100 NIC. My question is what can I do to troubleshoot this issue? If I do look in the logs what can I look for that might through a red FLag? My log files are about 300MB per day for Imail. What are real world amounts of mail that Imail can handle? Normally, this will happen if there is a larger than normal mail volume during this time -- to the point that IMail (and Declude) can't handle it all. If you know your normal mail volume, you can do something such as: find 12:10 14: sys1210.txt | find deliver /c to find out how many E-mails were delivered during that an hour's time. That should help track if a high volume of mail was being processed. Another possible problem is that mail is taking longer than normal to deliver for some reason. This would normally be caused by slow DNS. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Mail Hanging up
I am running Windows DNS and the gateway server is the only machine that access to the DNS server. I also have another Gateway server that has about the same hardware specs, but a whole different set of domains that it happens to every once in a while too. If I were to upgrade my hardware what would you recommend? I am only using this as a relay server? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, December 10, 2003 4:47 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Mail Hanging up I couldn't get the find 12:10 14: sys1210.txt | find deliver /c to work That will work if you use the sys*.txt log file format. If you use the log*.txt log file format, it will be different (perhaps 12/10/2003 14: instead of 12:10 14:?). so I ran find deliver log1210.txt /c and find deliver log1209.txt /c 12-09-03 32,094 12-10-03 19,276 @ 4:15PM OK, that will show the number of E-mails per day. That will do, although won't be as precise. Now remember that this is happening once or twice a week. Is this low? high? That all depends on what is causing it. :) If it is a dictionary attack, that might be considered about average. If it is a user sending out 100,000 E-mails, that may be low or high depending on your user base. Do I need to up the Processor size? That, too, will depend on the underlying cause. For example, if it turns out your DNS server is hanging every few days (as all but the most recent versions of BIND 9 on NT would do), simply upgrading BIND or resetting it once a day be all you need to do. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Mail Hanging up
They are the same machine Windows 2000 Server. I installed DNS for faster queries in case the remote server or local server where having any issues. Kris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Tolmachoff (Lists) Sent: Wednesday, December 10, 2003 7:24 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Mail Hanging up What is the OS that Imail is on and what is the OS of the DNS servers? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kris McElroy Sent: Wednesday, December 10, 2003 3:16 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Mail Hanging up I am running Windows DNS and the gateway server is the only machine that access to the DNS server. I also have another Gateway server that has about the same hardware specs, but a whole different set of domains that it happens to every once in a while too. If I were to upgrade my hardware what would you recommend? I am only using this as a relay server? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Wednesday, December 10, 2003 4:47 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Mail Hanging up I couldn't get the find 12:10 14: sys1210.txt | find deliver /c to work That will work if you use the sys*.txt log file format. If you use the log*.txt log file format, it will be different (perhaps 12/10/2003 14: instead of 12:10 14:?). so I ran find deliver log1210.txt /c and find deliver log1209.txt /c 12-09-03 32,094 12-10-03 19,276 @ 4:15PM OK, that will show the number of E-mails per day. That will do, although won't be as precise. Now remember that this is happening once or twice a week. Is this low? high? That all depends on what is causing it. :) If it is a dictionary attack, that might be considered about average. If it is a user sending out 100,000 E-mails, that may be low or high depending on your user base. Do I need to up the Processor size? That, too, will depend on the underlying cause. For example, if it turns out your DNS server is hanging every few days (as all but the most recent versions of BIND 9 on NT would do), simply upgrading BIND or resetting it once a day be all you need to do. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Filter per user
Can I setup a Filter file per user? I have a user who wants everything from .biz blocked. Can this be done? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Filter per user
I don't recommend it, but he does pay us for a service and should have the say so of what he wants or doesn't want. I agree with you, a lot of legit emails will get caught. Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of John Tolmachoff (Lists) Sent: Thursday, December 04, 2003 9:32 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Filter per user So that user wants to block legit domains? And you want to allow that? John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Kris McElroy Sent: Thursday, December 04, 2003 6:48 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Filter per user Can I setup a Filter file per user? I have a user who wants everything from .biz blocked. Can this be done? Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] WhitelistFile
Can I have Whitelist File in the Global.cfg ? whitelistfile d:\Imail\Declude\mywhitelist.txt Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: WinME not resolving DNS
have you tried from the command line ipconfig /flushdns Thanks, Kris McElroy [EMAIL PROTECTED] Chief Technology Officer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Todd Holt Sent: Wednesday, October 29, 2003 10:43 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] OT: WinME not resolving DNS I have a customer that has a home computer running WinME. Worked fine connected to his cable modem. He moved the computer to another room and I installed a Linksys Router/AP on the cable modem and a USB wireless Ethernet on his computer. I can get connectivity and the DNS is listed in WinIPCfg, but his machine will not resolve DNS. If I go to a web server that I know the address of, I can browse that site just fine. Does anyone know why it won't resolve DNS queries? Are there any specific configs I should check. Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Imail 8.02 DJ PRO
I just installed Imail 8.02 on my server from 7.15. I am running Declude Junkmail Pro and Declude Virus Pro. Everywhere that Imail and ENABLE Spam or Filtering I disabled it. Is this the correct thing to do so that Declude Junkmail Handles all Emails? Also is there anyone actually using Imails Anti Spam in conjunction with Declude Junkmail? If so how (what tests, etc..)? Thanks, Kris McElroy [EMAIL PROTECTED] Internet Systems Engineer Duracom, INC. www.duracom.net I am always doing that which I can not do, in order that I may learn how to do it. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Results with our configuration
My log level is set to low and yesterday I ran 130 MB? This brings me to ask a question How can I see the total number ofEmails that Declude processed for that day? This way I can analyze or get an idea of how much traffic this machine is seeing? Thanks, Kris McElroy[EMAIL PROTECTED]Internet Systems EngineerDuracom, INC.www.duracom.net I'm retired 99.9%. Of course, there always is that .1%.--Michael Jordan, February 18, 1999 - Original Message - From: Craig Gittens To: [EMAIL PROTECTED] Sent: Friday, January 24, 2003 6:18 AM Subject: RE: [Declude.JunkMail] Results with our configuration LOL My log level is MID and I run at 100MB a day. Craig. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of John TolmachoffSent: Thursday, January 23, 2003 6:39 PMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Results with our configuration Currently, our log level is set to HIGH and run about 4.5 mg on weekdays. Once I have added one more set of files, Kamis, and watch that for about a week, then I may go back down to MID. I will always be at MID or above. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Darrell L.Sent: Thursday, January 23, 2003 2:00 PMTo: [EMAIL PROTECTED]Subject: RE: [Declude.JunkMail] Results with our configuration John, From your post I gathered that your log level is atleast mid. Is this a normal configuration or just a one time deal to look at the mail. Darrell Darrell LaRock Information Systems Analyst Gannett Television 716-849-2272 -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John TolmachoffSent: Thursday, January 23, 2003 1:22 PMTo: [EMAIL PROTECTED]Subject: [Declude.JunkMail] Results with our configuration I wanted to post yesterdays results of Declude Junkmail: We hold on a weight of 20 and delete at 40. Messages held are reviewed using Spam Review software. There were no False Positives in the messages deleted. This was reviewed by manually going through the Declude Junkmail log for all messages deleted and looking at the subject line and sender and recipient. 3485 messages were processed by Declude Junkmail. 889 were deleted. 85 were held. Of the held, 16 were False Positives. Total found and deleted: 958 (27.49%) Individual tests like SPAMCHECK and NOXMAIL generate a number of false positives, but that is what the while filters and MATCH program is for. However, those tests are also responsible for the majority of the messages deleted. Tests used: (numbers after action is weight we use) ORDB WARN 2 OSDUL WARN 2 OSFORM WARN 2 OSLIST WARN 2 OSPROXY WARN 2 OSRELAY WARN 2 OSSMART WARN 2 OSSOFT WARN 2 OSSRC WARN 10 SPAMCOP WARN 12 DSN WARN 10 NOABUSE WARN 3 NOPOSTMASTER WARN 3 BADHEADERS WARN 5 BASE64 WARN 12 HELOBOGUS WARN 3 IPNOTINMX LOG 0 -3 MAILFROM WARN 15 PERCENT WARN 15 REVDNS WARN 2 ROUTING WARN 10 SPAMHEADERS WARN 5 ADULT1 WARN 50 JUNK WARN 30 SPAMCHECK WARN Weight NOXSPAM1 WARN 20 NOXSPAM2 WARN 15 NOXSPAM3 WARN 15 NOXADULT1 WARN 20 NOXADULT2 WARN 15 NOXADULT3 WARN 15 REVIEWER1 ROUTETO [EMAIL PROTECTED] WHITEFILTER1 WARN WHITEFILTER2 WARN WHITEFILTER3 WARN WHITEFILTER4 WARN GRAYFILTER1 WARN GRAYFILTER2 WARN GRAYFILTER3 WARN GRAYFILTER4 WARN MATCH WARN -40 Kami, I have not yet had time to try your lists. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com
[Declude.JunkMail] Filter Questions/Suggestions
I have noticed that some people on this list filter emails for p o r n and things of other nature. I am wanting to start filtering for such things also. My fear is that I will catch a lot of legitimate emails in the process. Does anyone have an example filter for this type of junk? Or any suggestions of what to use versus what not to use? Thanks, Kris McElroy [EMAIL PROTECTED] Internet Systems Engineer Duracom, INC. www.duracom.net --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Filter Questions/Suggestions
Is the NOXMAIL an external test? If so where can I go to find information about the product? Thanks, Kris McElroy [EMAIL PROTECTED] Internet Systems Engineer Duracom, INC. www.duracom.net - Original Message - From: John Tolmachoff [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 14, 2003 9:54 AM Subject: RE: [Declude.JunkMail] Filter Questions/Suggestions I am using a combination of adult senders list, simple filters and NoXMail. The use of filters can be hard do to the mix/combination of words. Plus, the senders themselves are smart, such as one sender that kept sending with the word f * c k in the subject line, with out the spaces. Any one reading that knows what it means, but a filter will not catch it. It is not easy to always catch these, and it has taken me months do get the right balance, (knock on wood,) so as to catch over 90% with few FP. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Filter Rules
I am getting several emails from different FROM address but they all contain the following url as a link in the body of the message. Can I filter for www.wholesalemortgagediscounts.com as filter rule. http://www.wholesalemortgagediscounts.com/index.asp?Afft=QM3 Thanks, Kris McElroy [EMAIL PROTECTED] Internet Systems Engineer Duracom, INC. www.duracom.net --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] WhiteList
I was wondering if the feature of whitelisting per user has been implemented yet? I remember Scott saying that it would be available in the next beta, but didn't know when that would be? Thanks, Kris McElroy [EMAIL PROTECTED] Internet Systems Engineer Duracom, INC. www.duracom.net --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Question about Forwarding
I have a client who uses Airmail.net as their ISP, but I host their domain email accounts on my server. I have a gateway server setup that has Imail and Declude Junkmail installed so that it will take some of the load of my actual Imail Server. So if let say anyone sends mail to [EMAIL PROTECTED] my gateway scans the email for spam and relays it to the actual Imail server, well once it hits the imail server this particular user has Forward setup to forward his mail to his Airmail.net account. Which works for every other person on my service except for this one, they reject mail to him because it looks like my gateway relayed the mail directly to him rather then my actual mail server where the domain is hosted. I have tried to contact airmail about this and have not had any luck. Is there any way to work around this, I have asked them to just use POP3 to my server, but they wish to forward? Thanks, Kris McElroy [EMAIL PROTECTED] Internet Systems Engineer Duracom, INC. www.duracom.net --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Question about Forwarding
I also realize I forgot to include the OT in the subject line. sorry I know this is happening because Airmail.net bought out what used to be NeoSoft. We had the same setup prior to them being bought out and it worked fine. Once Airmail.net took over people trying to contact this individual would get undelivarable messages sent back to them. So what I did was changed the MX records to go directly to my IMAIL server bypassing our Declude Junkmail, all works fine then and now? EXAMPLE OF PRIOR LOGS 20021001 060526 127.0.0.1 SMTPD (47CF010A) [65.170.232.132] EHLO Primary_Imail 20021001 060526 127.0.0.1 SMTPD (47CF010A) [65.170.232.132] MAIL FROM:[EMAIL PROTECTED] 20021001 060526 127.0.0.1 SMTPD (47CF010A) [65.170.232.132] RCPT To:[EMAIL PROTECTED] 20021001 060526 127.0.0.1 SMTPD (47CF010A) [65.170.232.132] C:\IMail\spool\D817610a.SMD 3793 20021001 060528 127.0.0.1 SMTP (3364) forwarded message to [EMAIL PROTECTED] 20021001 060528 127.0.0.1 SMTP (3364) finished C:\IMail\spool\Q817610a.SMD status=1 20021001 060528 127.0.0.1 SMTP (400) Connect airmail.net [209.196.77.98:25] (1) 20021001 060528 127.0.0.1 SMTP (400) 220-mx1.airmail.net ESMTP Exim 4.10 20021001 060528 127.0.0.1 SMTP (400) 220-for use by Internet America members only. 20021001 060528 127.0.0.1 SMTP (400) 220 relay for others at 500 dollars U.S. per message 20021001 060528 127.0.0.1 SMTP (400) EHLO ogtrt.com 20021001 060528 127.0.0.1 SMTP (400) 250-mx1.airmail.net Hello mail.ogtrt.com [65.66.8.88] 20021001 060528 127.0.0.1 SMTP (400) 250-SIZE 10485760 20021001 060528 127.0.0.1 SMTP (400) 250-PIPELINING 20021001 060528 127.0.0.1 SMTP (400) 250 HELP 20021001 060528 127.0.0.1 SMTP (400) MAIL FROM:[EMAIL PROTECTED] 20021001 060528 127.0.0.1 SMTP (400) 250 OK 20021001 060528 127.0.0.1 SMTP (400) RCPT To:[EMAIL PROTECTED] 20021001 060528 127.0.0.1 SMTP (400) 550 Administrative prohibition (65.66.8.88) 20021001 060528 127.0.0.1 SMTP (400) QUIT 20021001 060528 127.0.0.1 SMTP (400) 221 mx1.airmail.net closing connection 20021001 060528 127.0.0.1 SMTP (400) Creating message from Postmaster EXAMPLE OF MESSAGE BEING RECEIVED FROM POSTMASTER Unknown user: [EMAIL PROTECTED] Original message follows. Received: from SMTP32-FWD by ogtrt.com (SMTP32) id A0B54; Tue, 1 Oct 2002 10:32:33 -0500 Received: from Primary_Imail [65.66.8.5] by ogtrt.com with ESMTP (SMTPD32-6.06) id A00F41D04B8; Tue, 01 Oct 2002 10:32:31 -0500 Received: from [208.246.14.98] [208.246.14.98] by Primary_Imail (SMTPD32-7.07) id A00D68E700FA; Tue, 01 Oct 2002 10:32:29 -0500 Received: from no.name.available by [208.246.14.98] via smtpd (for mailgateway1.duracom.net [65.66.8.5]) with SMTP; 1 Oct 2002 15:32:29 UT Received: from fdlnata10.fdnet.com (unverified) by fdgvms01.fluordaniel.com (Content Technologies SMTPRS 4.2.10) with ESMTP id [EMAIL PROTECTED] for [EMAIL PROTECTED]; Tue, 1 Oct 2002 11:30:50 -0400 Subject: Re: ProTreat(TM) Software Update - New Engine To: Jack Dingman [EMAIL PROTECTED] X-Mailer: Lotus Notes Release 5.0.5 September 22, 2000 Message-ID: [EMAIL PROTECTED] From: [EMAIL PROTECTED] Date: Tue, 1 Oct 2002 10:32:14 -0500 X-MIMETrack: Serialize by Router on fdlnata10/Servers/FD/FluorCorp(Release 5.0.8 |June 18, 2001) at 10/01/2002 11:32:26 AM MIME-Version: 1.0 Content-type: text/plain; charset=us-ascii X-Declude-Spoolname: Dc00d68e700fac77e.SMD X-Note: Please send abuse reports to [EMAIL PROTECTED] X-Note: This E-mail was scanned by Duracom.Net for spam. X-Note: This E-mail was sent from 98.14.246.208.in-addr.arpa. ([208.246.14.98]). Return-Path: [EMAIL PROTECTED] Thanks, Kris McElroy [EMAIL PROTECTED] Internet Systems Engineer Duracom, INC. www.duracom.net - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 06, 2003 3:17 PM Subject: Re: [Declude.JunkMail] Question about Forwarding I have a client who uses Airmail.net as their ISP, but I host their domain email accounts on my server. I have a gateway server setup that has Imail and Declude Junkmail installed so that it will take some of the load of my actual Imail Server. So if let say anyone sends mail to [EMAIL PROTECTED] my gateway scans the email for spam and relays it to the actual Imail server, well once it hits the imail server this particular user has Forward setup to forward his mail to his Airmail.net account. Which works for every other person on my service except for this one, they reject mail to him because it looks like my gateway relayed the mail directly to him rather then my actual mail server where the domain is hosted. So airmail.net is rejecting the E-mail, because it comes from the gateway server rather than your primary mailserver? It definitely should not do that -- many domains send mail from mailservers other than the one that is primarily used
