Re: [Declude.JunkMail] OT - Copying 200,000 plus files

[Larry Craddock]

Depending upon the drive there may not be a great way. Got this from a web 
page on USB2:


Unfortunately, the phrase "USB 2.0" does not necessarily mean 480Mbps of 
throughput. USB 2.0 now has three different signaling rates: Low Speed 
(1.5Mbps), Full Speed (12Mbps), and Hi-Speed (480Mbps). The marketing and 
advertising departments of product manufacturers like to put the words "USB 
2.0" on all of their product packages. This can be really deceptive since 
most consumers will see USB 2.0 and compare it to an older product with the 
USB 1.1 moniker and think "USB2 must be better than USB 1.1!" Naturally, the 
consumer is unaware of the difference between "Full Speed" and "High Speed" 
(this is something akin to the old naming snafu with floppy disks: does 
"double density" or "high density" hold more?).


And naturally those specs are in 'bits per second' and your images are in 
gigabytes ... so unless you're getting the 480mbps speed the math's not on 
your side ...

@ 1.5mbps it'd take approximately 103 hours to transfer 70Gbytes (560 
gigabits) of data
@ 12mbps it'd take approximately 13 hours
@ 480mbps it'd take approximately 20 minutes

Just guessing but that may be more of an issue than the method you use. As 
suggested, the quickest way is to remove the drive from the USB package and 
connect it directly to your IDE interface.

Larry Craddock
- Original Message - 
From: "Jeff Pereira" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, October 20, 2004 1:59 PM
Subject: [Declude.JunkMail] OT - Copying 200,000 plus files


Hi -
Sorry for the OT post, but I am in need of assistance.
I have 200,000 + TIFF (70 GB Worth)images on an external USB 2.0 hard
drive that I need to copy to my local hard drive.  It is taking
forever.
Does anyone know what the fastest way to do this is ?
Drag and Drop ??  Cut and Paste ??
Drop to a command prompt ??  Xcopy ??
Please help.
TIA
jeff
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] MS Sender ID

[Larry Craddock]

hmm ... not everyone's jumping on board
http://www.computerworld.com/printthis/2004/0,4814,96022,00.html
Larry Craddock
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Blacklisted again

[Larry Craddock]

Good suggestion and if you're not familiar with 
linux and don't have time to learn right now just get the windows version. 
You'll need to install winpcap first and then ethereal. You can get them both 
here: http://www.ethereal.com/distribution/win32/ They 
work great.
 
Larry Craddock

  - Original Message - 
  From: 
  Jeff Maze 
  To: [EMAIL PROTECTED] 
  
  Sent: Thursday, September 16, 2004 6:44 
  AM
  Subject: RE: [Declude.JunkMail] 
  Blacklisted again
  
  Hook the server up to a hub and then hook another 
  computer to the hub..  Next, get a network sniffer (Linux machine and 
  ethereal works great) and sniff to see what information is being 
  passed..  Run it for about 30 seconds and you should have enough 
  information to begin working 
with..

[Declude.JunkMail] ROUTING

[Larry Craddock]

I've had several pieces of spam make it through that included routing from 
the U.S. to another country and then back to the U.S. as indicated in the 
headers below. Shouldn't this trigger the ROUTING test?

X-Spam-Tests-Failed: FOREIGN, TLD-TRUSTED-HELO, TLD-TRUSTED-MAILFROM, 
TLD-TRUSTED-REVDNS [5]
X-Country-Chain: UNITED STATES->FRANCE->UNITED STATES->destination

thanks,
Larry Craddock
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] braindead

[Larry Craddock]

Thanks Bill 

Larry

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill Landry
Sent: Sunday, July 11, 2004 6:50 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] braindead


www.dnsstuff.com

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] braindead

[Larry Craddock]

Can someone point me to the webpage that checks a domain against all the
open relay lists?

thanks,

Larry Craddock

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] single user problem

[Larry Craddock]

I move mail beyond a certain weight to a suspect 
mailbox. Is there a way to NOT do that for just one account?
 
thanks,
 
Larry Craddock
 

Re: [Declude.JunkMail] Spamdomains test

[Larry Craddock]

Thanks Bill. I checked the archives and found one from Nov.28,2003 ... just 
got it setup.

thanks again,
Larry Craddock
- Original Message - 
From: "Bill Landry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, May 28, 2004 12:34 AM
Subject: Re: [Declude.JunkMail] Spamdomains test


- Original Message - 
From: "Larry Craddock" <[EMAIL PROTECTED]>

Thanks everyone. Now that I understand how to use the test, does anyone
have a spamdomains.txt file that includes the entries for the domains
most commonly used that they could share?
Check the archives, Larry.  I have posted mine to the list several times.
If you cannot locate it, send me a e-mail off-list and I will send it to
you.
Bill
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Spamdomains test

[Larry Craddock]

Thanks everyone. Now that I understand how to use 
the test, does anyone have a spamdomains.txt file that includes the entries for 
the domains most commonly used that they could share?
 
Larry Craddock

[Declude.JunkMail] Spamdomains test

[Larry Craddock]

I think I need a little more detail on the spamdomains test. Here's the 
entire explanation from the manual:

[This test will catch E-mail that is not coming from a mailserver that it 
should be coming from. This test will only work if you set up a file listing 
domains that you wish to be included in this test. Specifically, it will 
check the return address of the E-mail, and then check to see if the reverse 
DNS entry of the IP that the E-mail was sent from contains the domain name. 
If not, the E-mail fails the test. For example, if "hotmail.com" is listed 
in the \IMail\Declude\spamdomains.txt file, then an E-mail coming from 
"law2.hotmail.com" would not fail the test, but an E-mail from 
"mail.example.ru" would fail the test.]

But I'm sure I've seen discussion someplace with reference to lines 
containing more than just a domain name in the spamdomains.txt file ... or 
is that all that's needed besides enabling the test?

Larry Craddock 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Junkmail manual

[Larry Craddock]

Thanks ... it started working for me too even though I had tried it several 
times before asking. Who knows; sometimes cache is the devil :)

Larry
- Original Message - 
From: "Jeff Pereira" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 27, 2004 6:40 AM
Subject: Re: [Declude.JunkMail] Junkmail manual


The link in your email worked for me although the final destination was:
http://www.declude.com/Articles.asp?ID=116
jeff
- Original Message -
From: "Larry Craddock" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, May 27, 2004 7:44 AM
Subject: [Declude.JunkMail] Junkmail manual

Has the link to the manual changed?
http://www.declude.com/junkmail/manual.htm no longer works.
Larry Craddock
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail scanned for viruses by Declude Virus]
---
[This E-mail was scanned for viruses by Declude Virus 
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Junkmail manual

[Larry Craddock]

Has the link to the manual changed? 
http://www.declude.com/junkmail/manual.htm no longer works.

Larry Craddock 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] f-prot

[Larry Craddock]

I don't know if it's 32 bit but the .dat files are on the same page and the
heading they're under is "VirusScan Version 4.x (or higher) Daily Updates."
So it looks like you can get the updated pattern files at the same place.

Larry Craddock

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Joe Wolf
Sent: Tuesday, May 18, 2004 6:40 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] f-prot


Sure looks like a freebie to me.  http://vil.nai.com/vil/virus-4d.asp

Is scan.exe a 32 bit app?

How do you update the pattern files?

Thanks!


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] f-prot

[Larry Craddock]

Someone have the link to CLAM-AV ?
thanks,
Larry Craddock
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] f-prot

[Larry Craddock]

Title: Message



Can anyone tell me how f-prot compares to 
mcafee or symantec when it comes to keeping their database up with new viruses? 
That just seems pretty cheap but hey that's exactly what I'm looking for as long 
as it works well :)
 
thanks,
 
Larry 
Craddock

[Declude.JunkMail] Printable manual

[Larry Craddock]

Is there a manual suitable for printing (not the html page) available on the 
website?

thanks,
Larry Craddock
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Any recommendations for MS Exchange spam filter?

[Larry Craddock]

Anyone know if there's anything similar to declude for MS Exchange server?

thanks,

Larry Craddock

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Imail 8.1 Trouble

[Larry Craddock]

This may be duplicated ... if so, please ignore. I'm running Imail 8.1 and
Declude 1.79 and have had to restart Imail services a couple of times since
upgrading. Should I be running a different version of Declude?

thanks,

Larry Craddock

- Original Message - 
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, April 12, 2004 6:19 AM
Subject: RE: [Declude.JunkMail] Imail 8.1 Trouble


>
> >How do we know which interim is the latest?
>
> You actually don't need to know.  You should normally only run an interim
> if there is a specific need for it (such as a new feature or bug fix).  So
> I would recommend continuing with the interim that you are running now.
>
> The one main exception is that if there is a newer released version or
> beta, you should upgrade to it.  For example, if you are running 1.78i10
> and 1.79 is out, you should upgrade to 1.79.
>
> -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers
> since 2000.
> Declude Virus: Ultra reliable virus detection and the leader in mailserver
> vulnerability detection.
> Find out what you've been missing: Ask for a free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Imail 8.1 Trouble

[Larry Craddock]

I'm running Imail 8.10 with Declude 1.79 and I've had to restart the Imail
services a couple of times since the upgrade. Should I be running a
different version of declude?

thanks,

Larry Craddock

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] Imail 8.1 Trouble

[Larry Craddock]

Looks like the website has been updated since this post. Where can I get the
interim release now?

thanks,

Larry Craddock

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Wednesday, May 05, 2004 6:23 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Imail 8.1 Trouble



>if you upgrade to Imail  8.1 it seems Declude will be called and run 
>each time an email is forwarded. i.e
>(".,[EMAIL PROTECTED]")
>
>so if you forward a lot of email from one account to anther you might 
>not want to upgrade just yet

This was taken care of in the interim release 1.78i31 at 
http://www.declude.com/interim .

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail".  The archives can be found at
http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] whitelisted

[Larry Craddock]

> These emails are definately spam.  Looks like HABEAS has been compromised?

More like spammers are forging habeas headers and challenging habeus'
ability to prosecute.

Larry Craddock

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] WHITELIST HABEAS

[Larry Craddock]

Good point and I do agree with one minor counter point ... we have little to
no feedback about how *the police are handling the situation.* I reported
the incident to Habeas and here's a snippet from their response:

[Please know that at Habeas we take the use of our trademark in spam very
seriously, and that while we cannot report back to you directly and
individually on the disposition of each submission, know that we will
investigate and follow this through to a satisfactory conclusion - either
the responsible party ceasing their infringing action, their being
appropriately dealt with by their service provider, or, failing any
satisfactory remedial action, listing in our Habeas Infringers List.]

Larry
- Original Message - 
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, January 12, 2004 8:26 AM
Subject: Re: [Declude.JunkMail] WHITELIST HABEAS


> Moving out of town would be a very bad business move without further
> information.  One of the key pieces of information would be how the police
> handle the situation.  If they catch the criminal the next day and punish
> him in a way that is fair but discourages other criminals from robbing
> stores, would you really want to leave?

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Whitelisted?

[Larry Craddock]

Cool ... I'll report it right now.

- Original Message - 
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, January 12, 2004 8:04 AM
Subject: Re: [Declude.JunkMail] Whitelisted?


>
> >Well I'm not sure how I missed this ... but here's the *rest* of the
header
> >info:
>
> ...
> >X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this
> >X-Habeas-SWE-9: mark in spam to .
> >
> >Now what do I do?
>
> Have you reported it yet?
>
> The Habeas headers are a legal means of whitelisting E-mail.  In this
case,
> a spam illegally used the Habeas headers -- something that the people that
> are behind Habeas have been waiting years for.  Now is the true test of
> Habeas -- if they go after the spammer and successfully sue them, it will
> (hopefully) discourage other spammers from violating the legal rights of
> the Habeas headers.
>
> -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
> Declude Virus: Catches known viruses and is the leader in mailserver
> vulnerability detection.
> Find out what you've been missing: Ask about our free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] WHITELIST HABEAS

[Larry Craddock]

Do most people use WHITELIST HABEAS? I'm thinking of turning this off since
the large majority of spammers have already demonstrated their willingness
to ignore the legality of their activities.

Larry Craddock

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

Re: [Declude.JunkMail] Whitelisted?

[Larry Craddock]

Well I'm not sure how I missed this ... but here's the *rest* of the header
info:

Received: from pd95378af.dip.t-dialin.net [217.83.120.175] by netride.net
  (SMTPD32-8.05) id A80D5E2F0140; Mon, 12 Jan 2004 06:50:21 -0600
Received: from 0.139.81.238 by 217.83.120.175; Sun, 11 Jan 2004
21:40:57 -0300
Message-ID: <[EMAIL PROTECTED]>
X-Habeas-SWE-1: winter into spring
X-Habeas-SWE-2: brightly anticipated
X-Habeas-SWE-3: like Habeas SWE (tm)
X-Habeas-SWE-4: Copyright 2002 Habeas (tm)
X-Habeas-SWE-5: Sender Warranted Email (SWE) (tm). The sender of this
X-Habeas-SWE-6: email in exchange for a license for this Habeas
X-Habeas-SWE-7: warrant mark warrants that this is a Habeas Compliant
X-Habeas-SWE-8: Message (HCM) and not spam. Please report use of this
X-Habeas-SWE-9: mark in spam to <http://www.habeas.com/report/>.

Now what do I do?

Larry Craddock

- Original Message - 
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, January 12, 2004 7:27 AM
Subject: Re: [Declude.JunkMail] Whitelisted?


>
> >Ok I admit I'm pretty weak in the area of tweaking declude but why was
this
> >whitelisted? I have three whitelist lines in my global.cfg ... they are
> >WHITELIST HABEAS
> >and 2 WHITELIST[EMAIL PROTECTED]  lines ...
>
> What does the Declude JunkMail log file say?
>
> Is one of those two WHITELIST lines "WHITELIST FROM mail.com" (which would
> whitelist this E-mail, since it came frmo "[EMAIL PROTECTED]")?
>
> -Scott
> ---
> Declude JunkMail: The advanced anti-spam solution for IMail mailservers.
> Declude Virus: Catches known viruses and is the leader in mailserver
> vulnerability detection.
> Find out what you've been missing: Ask about our free 30-day evaluation.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.JunkMail mailing list.  To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.JunkMail".  The archives can be found
> at http://www.mail-archive.com.
>

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] Whitelisted?

[Larry Craddock]

Ok I admit I'm pretty weak in the area of tweaking declude but why was this
whitelisted? I have three whitelist lines in my global.cfg ... they are
WHITELIST HABEAS
and 2 WHITELIST[EMAIL PROTECTED]  lines ...

Date: Mon, 12 Jan 2004 04:44:57 +0400
X-Mailer: PIPEX NetMail 2.2.0-pre13
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary="--7204916354633796"
X-Priority: 5
X-IMAIL-SPAM-VALFROM: (1580138816)
X-Declude-Sender: [EMAIL PROTECTED] [217.83.120.175]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: Whitelisted [0]
X-Note: This E-mail was sent from pD95378AF.dip.t-dialin.net
([217.83.120.175]).
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 319325114

thanks,

Larry Craddock

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.

[Declude.JunkMail] W32/swen

[Larry Craddock]

I'm fairly new to this and guessing there's a simple way to catch these?

Larry Craddock

Received: from dns1.atuacao.inf.br [200.203.92.130] by netride.net with
ESMTP
  (SMTPD32-8.03) id A0F770A00C0; Tue, 14 Oct 2003 07:49:59 -0500
Received: from udsikd ([200.203.92.14])
 by dns1.atuacao.inf.br (8.12.3/8.12.3) with SMTP id h9ECFlCB001365;
 Tue, 14 Oct 2003 10:15:47 -0200
Date: Tue, 14 Oct 2003 10:15:47 -0200
Message-Id: <[EMAIL PROTECTED]>
FROM: "Mail System" <[EMAIL PROTECTED]>
TO: " " <[EMAIL PROTECTED]>
SUBJECT:
Mime-Version: 1.0
Content-Type: multipart/alternative;
 boundary="buojnauxtqmv"
X-RBL-Warning: REVDNS: This E-mail was sent from a MUA/MTA 200.203.92.130
with no reverse DNS entry.
X-Declude-Sender: [EMAIL PROTECTED] [200.203.92.130]
X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for
spam.
X-Spam-Tests-Failed: IPNOTINMX, NOLEGITCONTENT, REVDNS [4]
X-RCPT-TO: <[EMAIL PROTECTED]>
Status: U
X-UIDL: 319324547

--buojnauxtqmv
Content-Type: text/html
Content-Transfer-Encoding: quoted-printable




cid:zkfgpjlwuzrijpd"; height=3D0 width=3D0>
Message from rocketmail.com
I'm afraid =
the message returned below could not be delivered =
to the following addresses:
Undelivered message to [EMAIL PROTECTED]


--buojnauxtqmv
Content-Type: audio/x-wav; name="hrklfqxx.bat"
Content-Transfer-Encoding: base64
Content-Id: 


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.