[Declude.JunkMail] Habeas win judgment
Just noticed this in the news and didn't see it on this list. http://www.theregister.co.uk/2004/04/07/habeas_spam_lawsuit/ Glad they are doing something about it. Nathan Fouarge AmberWave Communications --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Message routing question
I believe that by default Imail puts [EMAIL PROTECTED] to folder anything in the mailbox of [EMAIL PROTECTED] I know you can change this behaviour, but I do not know where of hand. Nate -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Tuesday, March 09, 2004 10:13 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Message routing question Hi, I need to find a way to route email to a spam folder in a client's Outlook Express setup. I had him set up two POP boxes, [EMAIL PROTECTED] and [EMAIL PROTECTED] (which OE combines into one folder set) and a message rule so that anything addressed to [EMAIL PROTECTED] is routed into a spam folder. This works fine, as I can send mail to user or user-spam and the message winds up in the right place. I divert his messages at WEIGHT20. I tried WEIGHT20 MAILBOX SPAM, and the message goes into the user-spam folder on the server, but the to address is not changed, so it winds up in his main mailbox in OE. I tried WEIGHT20 ROUTETO [EMAIL PROTECTED], figuring that would force a rewrite of the to address, but I got the same result - it came in still addressed to [EMAIL PROTECTED] Ideas, anyone? -Dave Doherty Skywaves, Inc. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: WinME not resolving DNS
So basically you can ping via ip, but not dhcp. Is this correct? 1) I do not believe WinMe has ipconfig /flushdns, but I could be wrong, so it is worth a try. 2) Check to make sure there is not host file with crap in it. 3) Uninstall all networking and reboot, then install them again. 4) Uninstall all networking again, then go into regedit and delete the following keys, in Hkey local machine/system/(all of the control sets)/services (Winsock and Winsock2). Then reboot and install your networking again and you should be good. Nathan Fouarge Amberwave Communications 114 N Dodge Algona, IA 50511 515-295-6900 x33 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Holt Sent: Wednesday, October 29, 2003 10:43 AM To: [EMAIL PROTECTED] I have a customer that has a home computer running WinME. Worked fine connected to his cable modem. He moved the computer to another room and I installed a Linksys Router/AP on the cable modem and a USB wireless Ethernet on his computer. I can get connectivity and the DNS is listed in WinIPCfg, but his machine will not resolve DNS. If I go to a web server that I know the address of, I can browse that site just fine. Does anyone know why it won't resolve DNS queries? Are there any specific configs I should check. Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 --- [This E-mail scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Log file' total' analyser
Has anyone made a program/script that reads the declude log(s) and gives a graph or summary of the total weights so you can get a good idea of what weights to hold on. I am just asking before I put my perl hat on. Nathan Fouarge Amberwave Communications 114 N Dodge Algona, IA 50511 515-295-6900 x33 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] I am kinda confused.
I keep getting spam mails that should be caught. Here are the spam tests it fails. X-Spam-Tests-Failed: DSBL, SPAMCOP, EASYNET-DNSBL, EASYNET-PROXIES, BLITZEDALL, BASE64, HELOBOGUS, MAILFROM, IPNOTINMX, ROUTING, LONGSUBJECT, BLACKLIST, NOLEGITCONTENT, WEIGHT10, WEIGHT12, WEIGHT15, WEIGHT20 [85] The emails are kind of weird. The goto a postmaster alias on a different domain, then goto our abuse alias, then finally goes to two people, me and another person. I have a personalized .junkmail file that says: WEIGHT10 MAILBOX Spam WEIGHT12 MAILBOX Spam WEIGHT15 MAILBOX Spam WEIGHT20 MAILBOX Spam While the other person that recieves the email has a .junkmail file that says: WEIGHT10 SUBJECT [SPAM 10] WEIGHT12 SUBJECT [SPAM 12] WEIGHT15 SUBJECT [SPAM 15] WEIGHT20 SUBJECT [SPAM 20] Thanks for your help. Nathan Fouarge --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Just confirming syntax for whitelist.
Is this correct for my global.cfg? WHITELISTIP ipfile C:\IMail\Declude\whiteip.txtx -99 0 And for the syntax for the whiteip.txt file will this work? 63.126.244.0/24 Nathan Fouarge --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] RPC Vulnerability
http://securityresponse.symantec.com/avcenter/venc/data/w32.blaster.worm.htm l Nathan Fouarge Amberwave Communications 114 N Dodge Algona, IA 50511 515-295-6900 x33 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Richard Farris Sent: Monday, August 11, 2003 7:47 PM To: [EMAIL PROTECTED] Does anyone know of a fix once a customer is experiecing this problem and how are they getting it...we have updated our F-Prot and are locking down our routers now.. The message says RPC terminated unexpectedly and is shutting down Windows in 60 seconds.. Richard Farris Ethixs Online 1.800.548.3877 - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:58 PM Subject: RE: [Declude.JunkMail] GSC Files -Original Message- Any idea when the next release will be availabel??? No idea at this point. However, as soon as the feature is added, we will have an interim release for people who need the feature as soon as possible. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Test No Messages
Too many people dealing with the msblast virus to complain about getting spam... :) Nathan Fouarge Amberwave Communications 114 N Dodge Algona, IA 50511 515-295-6900 x33 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Wednesday, August 13, 2003 12:40 PM To: JunkMail Declude I have not received a message from the list in about 15 hours. This is a test message Kevin Bilbee Network Administrator Standard Abrasives, Inc. Changing the way industry works. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
h:RE: [Declude.JunkMail] Declude using 50% cpu
Title: RE: [Declude.JunkMail] Declude using 50% cpu I am very sorry but I have to ask, how did you get win2k to run on 512K of ram. :) On the serious side though, I really think there is an underlying problem here. Our mail server is a p4 1.6 with 1Gig of ram, with scsi hdds(Raid 5 with only 1 partition :( no I did not do the setup with only 1 partition it was given to me like that, it works, though it is a pita to defrag)and I really can not remember it EVER going over 20% utilization during regular business hours, though we only do 14,000 local deliveries and 4000 sends on an average day. We run declude antispam and IpSwitch's Antivirus(again not my idea I was pushing for Declude for the antivirus). Could it be a hdd speed issue/partition problem/fragment problem? Possibly a NIC problem, since Imail seems picky about the type of NIC that is used. Nathan Fouarge Amberwave Communications 114 N Dodge Algona, IA 50511 515-295-6900 x33 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark GordonSent: Thursday, July 24, 2003 3:25 PMTo: '[EMAIL PROTECTED]' win2k sp3 dual 933512K rambut memory was never a problem, its a dedicated mail server nothing else -Original Message-From: Jason Newland [mailto:[EMAIL PROTECTED]Sent: Thursday, July 24, 2003 4:22 PMTo: [EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] Declude using 50% cpu Also, can we ask what hardware / OS this is running on? Jason - Original Message - From: John Tolmachoff (Lists) To: [EMAIL PROTECTED] Sent: Thursday, July 24, 2003 3:03 PM Subject: RE: [Declude.JunkMail] Declude using 50% cpu Where is your DNS server you are using in Imail? John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Mark GordonSent: Thursday, July 24, 2003 12:51 PMTo: '[EMAIL PROTECTED]'Subject: RE: [Declude.JunkMail] Declude using 50% cpu On a good day we rev 19000 local deliveries + send 8000 per day. It hits the machine hard average cpu time before was around 44% then when declude was installed it jumped to over 90% average. The version is 1.75 -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED]] Sent: Thursday, July 24, 2003 3:37 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude using 50% cpu We are evaluating declude and have noticed a considerable increase in the cpu cycles associated with mail delivery. Is there anyway have it run in an isolated cpu instance? since there are multiple instances of declude.exe running, I would guess it would be hard to lock it down. How many E-mails do you send/receive per day? What version of Declude are you running (you can find out by typing "\IMail\Declude -diag" from a command prompt)? Are you sure that it is Declude using the extra CPU cycles (by sorting the processes in the Task Manager by the "CPU" column)? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
h:RE: [Declude.JunkMail] Novice question, weight gain
Please remember to restart the services too... :) Glad I could help. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kruidhof Sent: Wednesday, July 09, 2003 12:38 PM To: [EMAIL PROTECTED] Scott, I understand your point but would it be possible to do a DNS lookup on the RDNS hostname. The IP address that is returned should match the IP address that they used. In your case it would match, but in this case 93.9.60.65.in-addr.arpa does not even have an record. I am looking for a way to validate the RDNS hostname. Thanks again for your quick response, Mike Kruidhof Cooking.com, Inc. How can I add a weight to this email message? -- Received: from airip2.emailvalues.com [65.60.9.93] by mx2.cooking.com (SMTPD32-7.07) id AC6A688008A; Tue, 08 Jul 2003 12:32:58 -0700 The REVDNS hostname is 93.9.60.65.in-addr.arpa, Yes, they have a RDNS entry but it does not match the HELO hostname or is a legitimate value. I would like to add a value when this happens. As more spammers realize that they have to create a RDNS entry we need to have a way to verify that it is a correct value. The problem is determining whether or not it is a correct value. For example, our mailserver has a reverse DNS entry that doesn't correspond to any of the domains that we send from. Even if it did, would the HELO/EHLO our mailserver sends have to be the same for all domains, just so that it will match the reverse DNS entry? It gets difficult doing matching like this, unfortunately. Should I start a private blacklist? I am trying to keep this low maintenance. That may be the best thing to do here. I'm guessing that this is an E-mail that resulted from the address being supplied to a company without checking the Do not send me any partner offers box. This type of E-mail can technically be considered solicited, which makes it unlikely that their IP will get listed in many spam databases. For this type of E-mail, you often have to create your own blacklist (or unsubscribe, which often works for this type of E-mail). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Recent Message From Declude.JunkMail-owner@declude.com?
I got the exact same message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Dan Geiser Sent: Friday, June 06, 2003 1:16 PM To: Declude JunkMail Subject: [Declude.JunkMail] Recent Message From [EMAIL PROTECTED] Hello, All, A little less than 1/2 hour I received a message in my inbox which purported to be from Declude.com. Here is the full message (the 's are mine)... Received: from declude.com [66.189.124.29] by NexusTechGroup.com with ESMTP (SMTPD32-6.06) id A33F67FC0114; Fri, 06 Jun 2003 13:45:35 -0400 X-Declude-Sender: [EMAIL PROTECTED] [66.189.124.29] X-Note: This E-mail was scanned by Declude JunkMail (www.declude.com) for spam. X-Spam-Tests-Failed: BADHEADERS [5] This E-mail is scanned and free from viruses. www.nexustechgroup.com X-RCPT-TO: [EMAIL PROTECTED] Date: Fri, 6 Jun 2003 13:45:42 -0400 X-UIDL: 354754410 Status: U From: [EMAIL PROTECTED] As you can see there's not much to it. Did anyone else receive this message? Was this message actually sent from Declude? Or was it a misfire in an impending attempt to use the good name of Declude.com to slip through people's spam filtering? Just curious. It seemed like a very odd message to me. Thanks, Much! Dan Geiser [EMAIL PROTECTED] This E-mail is scanned and free from viruses. www.nexustechgroup.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPAManager IWEBMSG add-in demo available
Sandy, I have been working on basically the same thing. There is one thing that I just really can not figure out how to do. How do you get the plan.ima file to copy into the declude config directory? Right now I have just setup a cgi that the user has to click on to 'activate' their Spam settings, it also checks to see if the user has paid for the feature against a database besides just copying the file. Nathan Fouarge www.getthewave.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sanford Whiteman Sent: Thursday, January 02, 2003 11:09 PM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] SPAManager IWEBMSG add-in demo available All, We've been doing a lot of work on SPAManager, an application we're custom-building for users who have a large number of clients/partners sending from questionable servers and who want to tune their anti-spam settings accordingly. SPAManager offers an unprecedented level of control, including not only simple personal whitelists, but fine-tuning of spam alert and message delivery settings. And, MOST IMPORTANT, SPAManager runs WITHIN the IMail web server without any other HTTP daemon necessary. We're smartening up the logic and prettying up the pages, but I thought you might like to take a look: http://209.227.3.6, user demo, pw blue (yes, I'm steering you to a production server). Check out the SPAManager Whitelist and SPAManager settings screens and let me know your thoughts. -Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
