RE: [Declude.JunkMail] OT: Software for copying files with permissions
This looks like what I'm looking for. We are not interested in using the DFS option, everything will be going on one server I can buy something 3rd party, as well, if anyone has any suggestions for something that might work better than this. In the past I have found that the free MS tools are cryptic with their directions and not real easy to use. Ah wait, I see your PS. I may check this out as well. Thanks for everyone's help! Sharyn, you might be interested in a more complete tool from Microsoft that is free and was designed with your task in mind: http://www.microsoft.com/downloads/details.aspx?FamilyID=d00e3eae-930a-42b0- b595-66f462f5d87b http://www.microsoft.com/downloads/details.aspx?FamilyID=d00e3eae-930a-42b0 -b595-66f462f5d87bDisplayLang=en DisplayLang=en It's called the File Server Migration Toolkit, and it takes care of creating the shares, setting permissions and even removing the original shares. There is an emphasis on using DFS, but that is completely optional. Here's a snippet from the online help: Using the File Server Migration Wizard The File Server Migration Wizard is a graphical user interface (GUI) tool for copying files and folders from a source file server to a target file server. The wizard walks you step by step through the copy process, which includes creating a migration project where project-specific settings are stored, monitoring the progress of the file copying, and viewing a final report of the copying results. mk:@msitstore:c:\program%20files\microsoft%20file%20server%20migration%20to olkit\fsmigrate.chm::/important.gif Important * For information about security and server cluster considerations, see ms-its:fsmigrate.chm::/fsct_file_wizard_security.htm Security considerations and ms-its:fsmigrate.chm::/fsct_file_wizard_cluster.htm Server cluster considerations. The File Server Migration Wizard provides a number of options for copying data. For example, you can: * Copy permission, auditing, and ownership information that is associated with files and folders. * Resolve invalid security descriptors on the target files and folders. * Stop sharing the shared folders on the source file servers after the copying is finalized. * Prestage the target file server-for example, by restoring a backup of the source file server-and then use the wizard to recopy changed files and share the target folders. (To do this, follow the procedure described in the Target Location link in ms-its:fsmigrate.chm::/fsct_file_Wizard_1a.htm Select servers, shared folders, and settings.) * Specify the DFS root server that hosts consolidation roots that are created by the DFS Consolidation Root Wizard. When you select this setting, the links that correspond to each copied folder are updated with the new Universal Naming Convention (UNC) paths of the target folders. * Specify an existing DFS namespace where you want to add DFS links for each copied shared folder. You can select this setting even if you do not use the DFS Consolidation Root Wizard. Note that how you get your users to map these shares and how to switch the server is still up to you, e.g. with login scripts or changing the share for their home drive in your Active Directory (or NT4 Domain Controller). Andrew. p.s. In the last migration I did, I was fortunate to use a product from NetIQ.com called Server Consolidator, part of their NetIQ Migration Suite, and that did the same functionality as the Microsoft FSMT and it was both simple and accurate. I've no idea what it cost. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Software for copying files with permissions
If you want to move an entire image to a new machine then I would use Acronis software to image the old server Thanks, I don't want to move the entire image. I just want to take every share that I have on this particular server and move it to a new server with all the permissions intact. Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Domain.junkmail file
Quick question . In Imail, can I use different domain.junkmail files even if my domains are aliases of each other, rather than virtual? TIA Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Global config tests vs domain.junkmail actions
If I have a Weight 20 test in my global config, but no action for Weight 20 in my domain.junkmail file, will the weight 20 test just be ignored for that domain? Been awhile since I had to configure this, I can't remember how this works. Thanks, Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] FiveTenSRC
Hi, I was looking up a mailserver IP address in the DNSstuff's spam database link and noticed that the mailserver in question was listed on the FIVETENSRC spam database. Underneath the listing, though, it said in parenthesis, do not use. Is this not a valid test anymore? Thanks, Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] FiveTenSRC
1) /24 blocks of addresses containing systems that are apparently sending bulk email (in volumes apparently comparable with the volume from AOL, Earthlink, Google), with any of the following attributes: missing or bogus reverse dns, reverse dns names in domains with no web server, or domains with boilerplate web content. It's the earthlink server I was looking up. Would it be prudent to lower the weight on this test I wonder? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Whitelist questions
Hi, I understand that you can have whitelist entries in your global config file, or you can have a text file with all your whitelist entries. What happens if you have some entries in your global config and others in a text file? Will Declude look at all of them? Can you have several whitelist text files? Thanks, Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Whitelist questions
Hi Sharyn, Declude will look at both and yes you can have several different whitelist txt files. Thanks! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Weird email problem
My apologies, I was unsure if this was a Declude issue or an Imail issue. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, January 25, 2007 12:05 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Weird email problem Sharyn, I'm not the 'list police', but it is proper etiquette not to post the same thing in multiple lists at the same time, especially when many from one list are on the other. This has in fact caused confusion in the past with your posts because one conversation starts in one place and is simultaneously being discussed in another, and in part by the same people. I would suggest that you post it in the most appropriate list, and only post it elsewhere if you can't find resolution there. Regarding your issue, it would be best to share the headers from the E-mail with the Received lines intact. Good luck, Matt Sharyn Schmidt wrote: I'm having a REALLY WEIRD email problem, makes me feel like I'm in the twilight zone. One of my users reported that she did not receive an email from [EMAIL PROTECTED] until TODAY, but the email was sent on Tuesday, 1/23, at 10:28am. She forwarded me a copy of the email. The following is from my Imail log from 1/23... 01:23 10:31 SMTPD(2a4b22aaf903) [24.73.160.163] connect 64.168.89.133 port 23634 01:23 10:31 SMTPD(2a4b22aaf903) [64.168.89.133] EHLO WDL.wilsondaniels.com 01:23 10:31 SMTPD(2a4b22aaf903) [64.168.89.133] MAIL FROM: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] 01:23 10:31 SMTPD(2a4b22aaf903) [64.168.89.133] RCPT TO: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] After this line, there is NOTHING else. The whole process for this email just seems to stop. In the IMAIL log for that day, I did a search for the d2a4b22aaf903.smd and the q2a4b22aaf903.smd, but turned up absolutely nothing. I did searches in both my Declude Junkmail and virus logs for the q and d files as well, nothing. I did searches in my logs on 1/24 and still turned up nothing. In the 1/23 Junkmail log, I even used the email address, [EMAIL PROTECTED], and came up with nothing. Then, I looked in todays log, at the time that the user finally received the message. Here is the log entry from Imail: 01:25 08:10 SMTPD(ac2c2766c9d4) [64.168.89.133] EHLO WDL.wilsondaniels.com 01:25 08:10 SMTPD(ac2c2766c9d4) [64.168.89.133] MAIL FROM: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] 01:25 08:10 SMTPD(ac2c2766c9d4) [64.168.89.133] RCPT TO: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] 01:25 08:10 SMTPD(ac2c2766c9d4) [64.168.89.133] D:\IMAIL\spool\Dac2c2766c9d4.SMD 958 01:25 08:10 SMTPD(ac2c2766c9d4) performing antispam checks That's it for the log entry in Imail. I checked the Declude Junkmail log, and found the following, below. Please note that the entire @wilsondaniels.com domain is whitelisted. Also, my user DID indeed receive this message, today, 2 days later. Going by the subject line (Good morning), it looks like the message that was send on Tues, even though the spool file names are different. Can anyone clue me in on what is going on here? This isnt the only message from wilsondaniels that was sent on Tues and received today. I just havent gotten the log entries for the other ones yet. Rec'd the message on 1/25, log entry in Declude Junkmail log: 01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist (63.246.13.90). nm= 01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist (192.168.100.0/24). nm=ff00 01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist (192.168.110.0/24). nm=ff00 01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist (192.168.120.0/24). nm=ff00 01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist (192.168.130.0/24). nm=ff00 01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist (192.168.140.0/24). nm=ff00 01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist (192.168.150.0/24). nm=ff00 01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist (10.10.100.0/24). nm=ff00 01/25/2007 08:10:10.125 qac2c2766c9d4.smd IP 64.168.89.133 not in whitelist (24.73.160.164). nm= 01/25/2007 08:10:18.125 qac2c2766c9d4.smd Filter URLfilter: Not skipping E-mail due to current weight of 20. 01/25/2007 08:10:18.156 qac2c2766c9d4.smd Filter InBodyFilter: Not skipping E-mail due to current weight of 20. 01/25/2007 08:10:18.171 qac2c2766c9d4.smd Filter InHeadersFilter: Not skipping E-mail due to current weight of 20. 01/25/2007 08:10:18.187 qac2c2766c9d4.smd Filter FILTER-ADULT: Not skipping E-mail due to current weight of 20. 01/25/2007 08:10:18.203 qac2c2766c9d4.smd Filter FILTER-MEDICAL: Not skipping E-mail due to current weight of 20. 01/25/2007
RE: [Declude.JunkMail] Weird email problem
Regarding your issue, it would be best to share the headers from the E-mail with the Received lines intact. Here are the headers from the original email: Received: from WDL.wilsondaniels.com [64.168.89.133] by cruzaninc.com with ESMTP (SMTPD-9.10) id A2950324; Thu, 25 Jan 2007 00:39:33 -0500 Received: from WilsonDaniels-DOM-MTA by WDL.wilsondaniels.com with Novell_GroupWise; Tue, 23 Jan 2007 07:28:54 -0800 Message-Id: [EMAIL PROTECTED] X-Mailer: Novell GroupWise Internet Agent 7.0.1 Date: Tue, 23 Jan 2007 07:28:28 -0800 From: Johnna Cooledge [EMAIL PROTECTED] To: 'Judith Taylor' [EMAIL PROTECTED] Subject: Good Morning Mime-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: quoted-printable Content-Disposition: inline X-Declude-Sender: [EMAIL PROTECTED] [64.168.89.133] X-Declude-Spoolname: D429526d4aecd.smd X-Declude-RefID: X-Declude-Note: Scanned by Declude 4.3.23 for spam. http://www.declude.com/x-note.htm; X-Declude-Scan: Incoming Score [0] at 00:39:45 on 25 Jan 2007 X-Declude-Fail: Whitelisted X-Country-Chain: X-RCPT-TO: [EMAIL PROTECTED] Status: X-UIDL: 465367379 X-IMail-ThreadID: 429526d4aecd --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Weird email problem
The headers show conclusively that your server didn't receive this message until almost two days after it was sent. It was stuck on the sender's own server and not yours. Thanks, that's what I thought when I looked at it too, but wanted to make sure before I went and blamed someone else. Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Weird email problem
Based on the headers and the logs this was a retransmission. Something happened in the initial send that caused it to be aborted. They did not attempt the resend until today. That's a very long retransmission interval. As Kevin said earlier these kinds of things happen from time to time. In reality a 2 day retransmission interval is pretty odd. Most servers will retry several hours later. Now what caused the connection to be dropped you will probably never know - I would not be too terribly concerned unless you start seeing a pattern with this (i.e. an issue on your end causing the dropped connections). Thanks for everyone's help. Normally this type of occurrence doesn't concern me, however, this email came from one of our bigger customers to one of our customer service representatives. Missing emails from these ppl IS of major concern, due to the importance (and size) of their account. Appreciate it! :) Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT: Changing the IP address of the mail server and the primary DNS server
Keeping 2 nics active during this switch is a great idea! Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Monday, December 18, 2006 4:10 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] OT: Changing the IP address of the mail server and the primary DNS server i had to do this a couple of times, here's what i did in summary: put a second nic in the server have one nic connected to the old network with the old ips and the other nic to the new network with new ips add the new ns to your dns change the secondarys so they update from the new ip change the ns ip with the retgistrar (if registered) bind your dns to the new ip change the registry to bind imail to the new ip (make sure all refference to old ip is changed) after 24 hours disconnect from the old network deactivate nic you can choose to keep the server connected to the old network as backup to do this add an mx with higher number with the old ip --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Changing the IP address of the mail server and the primary DNS server
Need to pick the brain's of the experts out there. We are changing from a cable internet connection to a fiber one. The cable connection is staying in place, so we will actually have 2 internet connections at my main site. The cable one is going to serve as sort of a guest/public internet connection, whereas the fiber becomes our main connection We are getting an entirely new block of static IP addresses with our new fiber connection. I am going to need to change the IP address of both my primary nameserver (which I host here) and mail server (also hosted here) to reflect the new static addresses. The mailserver and the primary nameserver are the same physical box. I am unsure what is the best way/order to do this.The new connections will be totally independent of the old one, different firewalls, different switches, etc. My internal network will be attached to the firewall behind the new fiber connection. I'll check the IMAIL KB for the best way to handle this within Imail. My biggest concern is the best way to get the Internet aware of the change, and the timing involved. Suggestions are welcome. TIA, Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] OT: Interesting Discussions
Did I start this? LOL! Sorry! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sanford Whiteman Sent: Thursday, December 14, 2006 11:40 PM To: Darin Cox Subject: Re[2]: [Declude.JunkMail] OT: Interesting Discussions Have you been eating some slightly pungent, soggy cornflakes, Sandy? You seem to be spoiling... g Well, I did post that *here*, which was pretty cowardly! --Sandy --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Why are these being whitelisted?
Just upgraded to 4.3.23. I'm getting a ton of stuff now that is being whitelisted. I have several users whitelisted TO but not the entire domain. This is not one of the users that is whitelisted TO. Suggestions? Here is the header info: Received: from SpeedTouch.lan [83.8.172.182] by cruzaninc.com with ESMTP (SMTPD-9.10) id ABE602AC; Thu, 14 Dec 2006 09:12:54 -0500 Return-Path: [EMAIL PROTECTED] Received: from 69.66.1.12 (HELO ca.iowatelecom.net) by todhunter.com with esmtp (*VX))0(RG1 :?1V/X) id AHNCX*-FQHG4D-/M for [EMAIL PROTECTED]; Thu, 14 Dec 2006 14:11:11 -0060 Date: Thu, 14 Dec 2006 14:11:11 -0060 From: Troy Goddard [EMAIL PROTECTED] X-Mailer: The Bat! (v2.12.00) Personal X-Priority: 3 (Normal) Message-ID: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Take it easy MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=--19C38D386E05E0CA X-Spam: Not detected X-Declude-Sender: [EMAIL PROTECTED] [83.8.172.182] X-Declude-Spoolname: D5be202f77bd0.smd X-Declude-RefID: X-Declude-Note: Scanned by Declude 4.3.23 for spam. http://www.declude.com/x-note.htm; X-Declude-Scan: Incoming Score [0] at 09:13:20 on 14 Dec 2006 X-Declude-Fail: Whitelisted X-Country-Chain: UNITED STATES-POLAND-destination Precedence: bulk Sender: [EMAIL PROTECTED] X-RCPT-TO: [EMAIL PROTECTED] Status: X-UIDL: 465362209 X-IMail-ThreadID: 5c010844d46a --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Why are these being whitelisted?
As a followup to this email, I have a question. I have a copy-all account for SEC purposes in which all incoming mail gets copied to. I put THIS account in the WHITELIST TO because we need to see a copy of EVERYTHING coming in, not just non spam emails. So, here is my question. If I whitelist something to the copyall account, does that make it whitelisted to everything? Just upgraded to 4.3.23. I'm getting a ton of stuff now that is being whitelisted. I have several users whitelisted TO but not the entire domain. This is not one of the users that is whitelisted TO. Suggestions? Here is the header info: Received: from SpeedTouch.lan [83.8.172.182] by cruzaninc.com with ESMTP (SMTPD-9.10) id ABE602AC; Thu, 14 Dec 2006 09:12:54 -0500 Return-Path: [EMAIL PROTECTED] Received: from 69.66.1.12 (HELO ca.iowatelecom.net) by todhunter.com with esmtp (*VX))0(RG1 :?1V/X) id AHNCX*-FQHG4D-/M for [EMAIL PROTECTED]; Thu, 14 Dec 2006 14:11:11 -0060 Date: Thu, 14 Dec 2006 14:11:11 -0060 From: Troy Goddard [EMAIL PROTECTED] X-Mailer: The Bat! (v2.12.00) Personal X-Priority: 3 (Normal) Message-ID: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Take it easy MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=--19C38D386E05E0CA X-Spam: Not detected X-Declude-Sender: [EMAIL PROTECTED] [83.8.172.182] X-Declude-Spoolname: D5be202f77bd0.smd X-Declude-RefID: X-Declude-Note: Scanned by Declude 4.3.23 for spam. http://www.declude.com/x-note.htm; X-Declude-Scan: Incoming Score [0] at 09:13:20 on 14 Dec 2006 X-Declude-Fail: Whitelisted X-Country-Chain: UNITED STATES-POLAND-destination Precedence: bulk Sender: [EMAIL PROTECTED] X-RCPT-TO: [EMAIL PROTECTED] Status: X-UIDL: 465362209 X-IMail-ThreadID: 5c010844d46a --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why are these being whitelisted?
Did you turn on the Auto Whitelist feature? That whitelists sender addresses that appear in the recipient's webmail address book. It doesn't appear to be so in this case, but we've seen problems with users having their own address in their webmail address book, resulting in whitelisting forging spam. If none of this applies here, I would recheck your whitelist statements. Darin. I didnt touch the autowhite list feature. I wonder if it's on by default? This is a brand new global.cfg file. All I did was copy my custom stuff over from my old one but I didn't mess with any of the defaults. Thanks, I'll check that right now. Yep, autowhitelist was ON. I did turn that off, but this didnt start happening until I put in some WHITELIST TO user statements. Like I said, I didn't whitelist my entire domain, just several users. Once I removed the whitelist TO statements, things went back to normal. It was prob. my error, I've never used that feature before. I had just been configuring user.junkmail files with the ignore action for everything. Guess I need to RTFM before I start playing with things that I don't know anything about. Thanks, Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why are these being whitelisted?
If you change your log level to high it will log the exact reason the message was whitelisted. Also, remember if one user on the email (even if they were BCC'ed) is whitelisted the whole message will be whitelisted. What if all email is sent to a copyall account and I had the settings to WHITELIST TO that account? Would that cause all email to be whitelisted? --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why are these being whitelisted?
Here is the log for the message that really ticked me off. Sorry it's so long but this message was sent to a ton of ppl, and it was whitelisted for all of them. The ONLY account that has any reference to whitelist is the masterbkup account which is our copy all account in which we archive all emails we received for SEC purposes. Ive bolded some of the whitelist lines. None of those address should've had this whitelisted, with the exception, like I said above, of the masterbkup account, yet, every one of these addresses shows this message being whitelisted. 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (63.246.13.90). nm= 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.100.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.110.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.120.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.130.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.140.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (192.168.150.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (10.10.100.0/24). nm=ff00 12/14/2006 09:13:11.359 q5be202f77bd0.smd IP 83.8.172.182 not in whitelist (24.73.160.164). nm= 12/14/2006 09:13:19.765 q5be202f77bd0.smd Filter URLfilter: Skipping E-mail with a current weight of 49 (=30) 12/14/2006 09:13:19.765 q5be202f77bd0.smd Filter InBodyFilter: Skipping E-mail with a current weight of 49 (=30) 12/14/2006 09:13:19.765 q5be202f77bd0.smd Filter InHeadersFilter: Skipping E-mail with a current weight of 49 (=30) 12/14/2006 09:13:19.765 q5be202f77bd0.smd Triggered BODY CONTAINS filter Giffilter on Content-Type: image/gif; [weight-0]. 12/14/2006 09:13:19.765 q5be202f77bd0.smd Triggered BODY CONTAINS filter Giffilter on image/gif; [weight-0]. 12/14/2006 09:13:19.765 q5be202f77bd0.smd CBL:6 FIVETEN-SRC:4 MXRATE-BLOCK:7 SORBS-DUHL:4 UCEPROTECT-1:8 UCEPROTECT-2:7 UCEPROTECT-3:2 BCC:4 HELOBOGUS:5 ROUTING:2 Giffilter:5 . Total weight = 54. 12/14/2006 09:13:19.765 q5be202f77bd0.smd E-mail whitelisted - automatically passing all spam tests [EMAIL PROTECTED] 12/14/2006 09:13:19.765 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:19.765 q5be202f77bd0.smd R1 Message OK 12/14/2006 09:13:19.765 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:19.765 q5be202f77bd0.smd From: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:19.765 q5be202f77bd0.smd Action(s) taken for [copyall_account] = WHITELISTED [LAST ACTION=WHITELISTED] 12/14/2006 09:13:19.843 q5be202f77bd0.smd Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 12/14/2006 09:13:19.843 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:19.843 q5be202f77bd0.smd L2 Message OK 12/14/2006 09:13:19.843 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:19.843 q5be202f77bd0.smd From: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:19.843 q5be202f77bd0.smd Action(s) taken for [EMAIL PROTECTED] = WHITELISTED [LAST ACTION=WHITELISTED] 12/14/2006 09:13:19.921 q5be202f77bd0.smd Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 12/14/2006 09:13:19.921 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:19.921 q5be202f77bd0.smd L3 Message OK 12/14/2006 09:13:19.921 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:19.921 q5be202f77bd0.smd From: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:19.921 q5be202f77bd0.smd Action(s) taken for [EMAIL PROTECTED] = WHITELISTED [LAST ACTION=WHITELISTED] 12/14/2006 09:13:20.000 q5be202f77bd0.smd Using [incoming] CFG file D:\IMAIL\Declude\$default$.junkmail. 12/14/2006 09:13:20.000 q5be202f77bd0.smd Tests failed [weight=0]: CATCHALLMAILS=IGNORE[0] 12/14/2006 09:13:20.000 q5be202f77bd0.smd L4 Message OK 12/14/2006 09:13:20.000 q5be202f77bd0.smd Subject: Take it easy 12/14/2006 09:13:20.000 q5be202f77bd0.smd From: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] To: mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] [EMAIL PROTECTED] IP: 83.8.172.182 ID: AHNCX*-FQHG4D-/M 12/14/2006 09:13:20.000 q5be202f77bd0.smd Action(s) taken for [EMAIL PROTECTED] = WHITELISTED [LAST
RE: [Declude.JunkMail] Why are these being whitelisted?
We are required to archive ALL incoming mail. The Sarbanes-Oxley Act does not differentiate between legitimate mail and spam :) I did remove the whitelist to. I went back to using the masterbkup.junkmail file and just setting all actions to ignore. I just wanted to know what had caused this, so in the future it doesn't happen again. Thanks! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, December 14, 2006 12:20 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? You're required to archive spam? I can't imagine that. I would remove the WHITELIST TO. Note that if any of the recipients are whitelisted, then all will effectively be whitelisted for that message. Darin. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SOX
SOX only affects publicly traded companies, right? As far as I know, right! --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why are these being whitelisted?
LOL thanks Matt This is surprising to me because he is normally right about everything. (and he doesnt even gloat about it) Guess I've gotten so complacent, I don't even bother to question what he says, unless it's something I know for sure that is wrong. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Thursday, December 14, 2006 3:36 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Why are these being whitelisted? Sharyn, You might want to walk into his office, pick a discarded piece of junk postal mail out of his garbage and ask him why he doesn't have to keep his junk and you do :) Of course that might get you fired, but maybe there's some middle ground with an alternative approach that would allow you to better explain it. Printing off a stack of hundreds of junk messages and showing him that the legitimate ones are less than 10% of that stack might be rather compelling. Matt --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Security Suite 4.3.23 Released
Has anyone installed this yet? I am still running 2.06. I just upgraded to IMAIL 2006.1 and was getting ready to install the Declude 3.X version when I noticed this one had just been released. I am assuming that my old global config is pretty much out of date so it wouldn't hurt to start over. Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Security Suite 4.3.23 Released
Hi, I've been running since the pre-release came out for testing and I have not encountered any new issues, but it certainly did address the old problems that I've had. Declude tech support advises that I use the setup file labeled new install since I'm running such an old version of Declude (2.06) Should I ditch/move the entire Declude directory and the declude.exe in the Imail folder? Does the new version install to the same path? I am guessing it's going to overwrite my global config file? I've never installed Declude with a wizard. It's always been just copy and paste the .exe into the Imail directory, then download the new global config and make changes as desired. I guess what I'm asking is, shall I just let it overwrite what I have currently or should I move everything out and start fresh? Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude v2.06 and Imail 2006.1
Um, I did... (in the subject line) Decluded v2.06 and Imail 2006.1 Sharyn, You should specify what version of Declude you are asking about. FYI, IMail 8.2+ requires Declude 3+. Some claim that older versions of Declude will work, however there are also widely reported problems with IMail 8.2+ and it is no doubt safest to run Declude 3+. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Is anyone using this with Declude?
Title: Is anyone using this with Declude? Comments? http://www.invariantsystems.com/invRegEx/default.htm#Features Thanks! Sharyn ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude and Imail 2006
Title: Message Some say they work fine, others say they don't. Declude's official position is that you have to have 3.x or 4.x for IMail 8.2x or 2006.x Thanks, Darin. I have a current Declude Service Agreement. Does this allow me to upgrade to 4.x? Is anyone using 4.x and Imail 2006.x? Any comments on it? Thanks, Sharyn ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Sniffer vs. Commtouch
Title: Message I've been using commtouch for a few weeks now and have noticed a significant reduction in spam. This is in addition to declude? Does a line get put in the config file to point to this? Does this work with an older version of Declude? We have noticed a major increase in spam in the last month or so. I was going to upgrade Declude but after seeing the issues here, I've decided against it. Instead, I'd just like to get something in addition. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] Global config for 3.11
Title: Global config for 3.11 Can I trouble someone to send me their standard global config file that came with junkmail 3.11? I just want to see which tests have been added/changed from the config I'm running (2.06) I will be doing the upgrade next week as tomorrow is my last day for the week and I'm hesitant to upgrade, then leave for the rest of the week. Thanks Sharyn ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] Newest version
Title: Newest version Good morning, I am still running an older version of Declude but it seems that it is not really effective anymore. We are getting tons of spam lately and I'm thinking about upgrading to the newest version in hopes that this will help. What is the newest version and are there issues with it? Putting aside all the drama going on with the company itself, how is the software actually working? Are there upgrade issues? Can I still use my old global.cfg and just add the newer tests? Does it still work the same? I am woefully out of the loop with this, due to other, more pressing concerns. Thanks in advance, Sharyn ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Newest version
Title: Message I am running 2.06. Yeah, I know, really outdated. I have a current service agreement, but for the life of me, I can't figure out where to download the latest version from the declude site. Guess I haven't done this in a really long time. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott FisherSent: Monday, September 11, 2006 10:29 AMTo: declude.junkmail@declude.comSubject: Re: [Declude.JunkMail] Newest version I don't think there are any significant anti-spam advances in the new Declude base product. Declude added the CommTouch addon. Or look at INVURIBL (cheapest solution) or Message Sniffer. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Newest version
Title: Message Ok, so according to my service agreement, I can download 3.11 (finally found where to download it). The software seems to have an exe set up file. I do NOT want to overwrite my current global config, I want to just get the new one and add some of the newer tests to it. Is there a way to do this? I really liked the old way where you could download everything separately. These automated setups scare me when upgrading, rather than installing fresh. Sharyn ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] SKIPIFWEIGHT question
Title: Message I then use SKIPIFWEIGHT at the top of all of my penalty text filter files so that if the message is already spammy enough to have earned my highest action weight, I don't spend any further CPU time on the message. Thanks, this isexactly what I was trying to do, I just wasn't sure where, exactly, to put the command. Sharyn ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] SKIPIFWEIGHT question
Title: Message I then use SKIPIFWEIGHT at the top of all of my penalty text filter files so that if the message is already spammy enough to have earned my highest action weight, I don't spend any further CPU time on the message. Will there be an entry in the log file stating thatthe rest of the tests were skipped or whatever it will say? ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] SKIPIFWEIGHT question
Title: Message Obviously I am just braindead or I have missed something here. If I have SKIPIFWEIGHT 30 in my filter files, why are my logs still showing emails having weights of over 30? Btw, I'm running V 2.06. According to the manual, this should be working with this version which leads me to believe this is an ID10T error on my part. Sharyn ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] SKIPIFWEIGHT question
Title: Message On high level logs you will see this kind of log line: 08/24/2006 13:43:01.192 qf32001b20052.smd Filter COMBO-MP-SPAMCOP: Skipping E-mail with a current weight of 691 (=315) Im not seeing anything like that,so I'm guessing something isn't right. Matter of fact, I'm still getting email going over the weight I've set it to skip at. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] SKIPIFWEIGHT question
Title: Message I don't know if the message comes in any log level that is under high. It's at the top of your filters, I assume. SKIPIFWEIGHT315 Yeah, that's how I have it. It's working. I changed my log level from mid to high and I'm seeing that message. Atmid level logging itdoesn't show that it's skipping anything. Thanks! ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] SKIPIFWEIGHT question
Title: SKIPIFWEIGHT question I'm looking over the Declude Junkmail manual and I'm not clear on how this is used. I have several filters and I delete on Weight 30. It's silly for Declude to keep processing the mail after it reaches weight 30 since it's going to be deleted anyway. If I am reading this correctly, the syntax would be SKIPIFWEIGHT 30 but I am unsure where this goes. Does it go in EVERY filter I have? Is it cumulative? In other words, if it hits my first filter and has a weight of 20, will it then stop if hitting the next filter causes it to have an additional weight of 10? TIA, Sharyn ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] WAY OT: command line for killing a win2k process
www.sysinternals.com : look for pskill it's a free utility. This works like a charm! Thanks! Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] WAY OT: command line for killing a win2k process
Title: Message
Andy?
I'm
guessing that this has to be run on the machine that one is killing the process
on?
-Original Message-From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Andy
SchmidtSent: Thursday, June 15, 2006 9:03 AMTo:
declude.junkmail@declude.comSubject: RE: [Declude.JunkMail] WAY OT:
command line for killing a win2k process
C:\ taskkill /?
TASKKILL [/S
system [/U username [/P
[password { [/FI
filter] [/PID processid | /IM imagename] } [/F] [/T]
Description: This command line tool can be used
to end one or more processes. Processes can be killed by
the process id or image name.
Parameter
List: /S
system Specifies
the remote system to connect to.
/U [domain\]user
Specifies the user context under
which
the command should execute.
/P
[password] Specifies the password for the
given
user context. Prompts for input if omitted.
/F
Specifies to forcefully
terminate
process(es).
/FI
filter Displays a
set of tasks that match
a
given criteria specified by the filter.
/PID process
id Specifies the PID of the process
that
has to be terminated.
/IM image
name Specifies the image name of the
process
that has to be terminated. Wildcard
'*'
can be used to specify all image names.
/T
Tree kill: terminates the specified
process
and any child processes which were started by it.
On
older operating systems there is a "kill" command in the Resource Kits and/our
you can set up the RCMD service that uses NTLM security to let you work with a
remote command line console.
Best
RegardsAndy SchmidtPhone: +1 201 934-3414 x20
(Business)Fax: +1 201 934-9206
---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
RE: [Declude.JunkMail] Test - can I post?
Well hell Scott! Hope all is going well for you:) Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Restrict all email except internal
Title: Restrict all email except internal Hi, I am trying to figure out whether I can get Declude to catch all emails and put them in the spam folder that come from any source that isn't coming from my own network. I have a temporary employee that needs internal email, however, they are not to receive email from outside of our internal network. I understand that this method will not prevent them from sending email to the internet, but they will soon be discouraged if they never receive a reply. Can I do this with Declude? If not, any other suggestions? Thanks, Sharyn
RE: [Declude.JunkMail] Restrict all email except internal
Title: Message With JunkMail Pro you could create a filter to check the sending domain via ENDSWITH, and create a separate version of $default$.junkmail for that user to use this filter with an action of ROUTETO Anyone know what theoldest version of Junkmail is that supports the ENDSWITH and ROUTETO commands?? You could also createan IMail rule, but I've never been comfortable with the reliability of IMail rules. I have never had a whole lot of success with IMAIL rules. Thanks, Darin!
[Declude.JunkMail] New server replacing the old one
Title: New server replacing the old one Declude folks, I am replacing my current mail server with a new one. I plan on running the exact same version of Imail and Declude Virus/Junkmail, and my OHN in Imail will remain the same. The old server is being retired. Anything special on my end (or yours) that needs to be done? I am assuming since my OHN isnt changing, my activation code will still work? Thanks, Sharyn
[Declude.JunkMail] Is anyone sucessfully blocking these?
Title: Message This is actually a.gif embedded in the email. I have been blocking using the name of the gif but it changes with each one, so these are still getting through. Any suggestions? Sharyn Subject: News Report
RE: [Declude.JunkMail] Is anyone successfully blocking these?
Title: Message I believe each one has a URL in the body of .smartblast and either .com or another word and then .com. I just checked the entire email. There isn't one URL in the body..here is what there is, then the coding for the gif (which I didn't include here). I hesitate to block on lycos as I'm afraid I'm going to nab legit email. This is a multi-part message in MIME format. --=_NextPart_000_006E_01C6016E.FB0B9B30Content-Type: multipart/alternative;boundary="=_NextPart_001_006F_01C6016E.FB0B9B30" --=_NextPart_001_006F_01C6016E.FB0B9B30Content-Type: text/plain;charset="US-ASCII"Content-Transfer-Encoding: 7bit -Original Message-From: [EMAIL PROTECTED][mailto:[EMAIL PROTECTED] On Behalf Of[EMAIL PROTECTED]Sent: Saturday, December 17, 2005 12:11 PMTo: [EMAIL PROTECTED]Subject: News Report --=_NextPart_001_006F_01C6016E.FB0B9B30Content-Type: text/html;charset="US-ASCII"Content-Transfer-Encoding: quoted-printable !DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN"HTMLHEADMETA HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =charset=3Dus-ascii"TITLEMessage/TITLE META content=3D"MSHTML 6.00.2800.1528" name=3DGENERATOR/HEADBODYDIVnbsp;/DIVDIV/DIVDIV class=3DOutlookMessageHeader lang=3Den-us dir=3Dltr =align=3DleftFONT face=3DTahoma=20size=3D2-Original Message-BRBFrom:/B=20[EMAIL PROTECTED][mailto:[EMAIL PROTECTED] BOn Behalf Of=20/B[EMAIL PROTECTED]BRBSent:/B Saturday, December 17, 2005 =12:11=20PMBRBTo:/B [EMAIL PROTECTED]BRBSubject:/B News = ReportBRBR/FONT/DIVIMG =src="">/BODY/HTML --=_NextPart_001_006F_01C6016E.FB0B9B30-- --=_NextPart_000_006E_01C6016E.FB0B9B30Content-Type: image/gif;name="eyrl.gif"Content-Transfer-Encoding: base64Content-ID: b772ac7e1487c9af64fd683432df5eb0
RE: [Declude.JunkMail] OT Snow
instead of BANEXT snow... edit that to route to missouri. that will be great. no snow yet, just a few spits... I love snow... lots of it... makes hunting so much more fun... plus snow camo is cool to wear :) BANEXT snow = move to Florida. said, smugly, after sipping Cruzan Rum drinks by the pool all weekend Sharyn --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] OT Snow
Ya know, Sharyn, I took a cruise to the Caribbean last year and checked my options to see if I could get to St. Croix to take that Cruzan distillery tour. A pity it didn't work out (but I was able to bring home some coconut rum and vanilla rum bottles... And I'm just about out of both). I live about 2 hours north of Orin, in Vancouver. Sometimes called Hollywood North. We get the mildest weather in Canada, and a good share of the rain. I related this thread to a colleague in southern Alberta. This is what he said: Long sleeve shirtthis climate would eat them alive! The forecast is for a low of -24 tonight without the wind-chill, we will see if my car starts tomorrow morning. By the way I had a flat tire on Friday and had to put on the spare tire in -17 degrees, not fun! I feel for you!!! I'm originally from Maryland so I have experienced cold and snow, although not like in Canada I'm sure. Try the raspberry rum, mixed with coke, it's awesome! If any of you all ever get near St. Croix and are thinking about taking the tour, email me offlist and Ill see that you are treated right! Sharyn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Monday, December 05, 2005 5:14 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] OT Snow instead of BANEXT snow... edit that to route to missouri. that will be great. no snow yet, just a few spits... I love snow... lots of it... makes hunting so much more fun... plus snow camo is cool to wear :) BANEXT snow = move to Florida. said, smugly, after sipping Cruzan Rum drinks by the pool all weekend Sharyn --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] OT: Old Imail Forum
Title: OT: Old Imail Forum I just tried signing up for the IMAIL forum after a long absence and I'm noticing it is all webbased now? Is the old Forum still around somewhere, but not being advertised? Thanks, Sharyn
RE: [Declude.JunkMail] OT: Old Imail Forum
Title: Message THATS the one I was looking for. Thanks!!! -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John CarterSent: Thursday, December 01, 2005 10:59 AMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] OT: Old Imail Forum Sharyn Your message just showed up on both the Junkmail forum and the Imail forum. Yes, the email based forum is still around. Try going to : http://www.ipswitch.com/support/mailing-lists.html John
RE: [Declude.JunkMail] OT: Old Imail Forum
Title: Message LOL I'm having a REALLY WEIRD problem and I'm just waiting for my list subscription confirmation to post it Aww..I missed you all too. -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick HayerSent: Thursday, December 01, 2005 11:14 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] OT: Old Imail ForumHi Sharyn,We missed ya! What bring you back to this neck of the woods?-Nick
RE: [Declude.JunkMail] WAY OT: software to monitor the size of the local Outlook.pst file
Title: Message That would be pretty easy to do with a _vbscript_. Create a FileSystemObject and have it access the file. That exposes most file properties, including filesize, as I recall. The script can send you an email ifthe filegets too large. Run the script once a day using the task scheduler. Unfortunately, it's not just 1 file. Its 300 users' Outlook.pst files, on 300 different machines. What I was looking for, was a piece of 3rd partysoftware, to load on a server, that will go outand find all Outlook.pst files on the network (or any other file type that I specify) check the file size, then email me back or notify me if the file gets too large. Is there such a thing? Thanks, Sharyn
RE: [Declude.JunkMail] WAY OT: software to monitor the size of the local Outlook.pst file
Title: Message From a server on the network, you would have to have permissions to each machine to do that. If you run Active Directory it's not a problem, though. In fact, you could add the script Dave suggested to their startup to compile a report of pst sizes. I do runan AD domain here. That would be pretty easy to do with a _vbscript_. Create a FileSystemObject and have it access the file. That exposes most file properties, including filesize, as I recall. The script can send you an email ifthe filegets too large. Run the script once a day using the task scheduler. Scripting writing is not one of my strengthsso forgive the stupid question..would I not have to load some sort of .netframework on every workstation in order for this script to run? I like the idea of using AD to have eachworkstation run the script as they log onto the domain, but I am not sure how to get this script to work on the individual machines. Thanks for your time! Sharyn
RE: [Declude.JunkMail] WAY OT: software to monitor the size of the local Outlook.pst file
Title: Message The .NET framework is not needed for VBS scripts or non-.NET executables, only for .NET compiled executables. So now, the thing is to just find or have someone write the script for you g. Ifyou standardized thelocation of the PST on every workstation, a simple bat file would do the trick. If the directory name is different on each workstation, then you would need to pass it a parameter to find the directory and echo the dir info to a network file. Heh..I"m working on the "get someone to write it for me" part, that would be my bosswho came up with this idea about the size monitoring of thepst files anyway. Thedirectory is the standard directory thatOutlooks installs all it's pst files,documents and settings/username/local settings/application data/ etcetc So,since everyone'suser name is different that wouldput it in a different directory.
[Declude.JunkMail] WAY OT: software to monitor the size of the local Outlook.pst file
Title: WAY OT: software to monitor the size of the local Outlook.pst file Good afternoon, In the last few weeks, Desktop support has had issues in where Outlook has stopped working due to the size of the Outlook.pst file. I back up these files using Backup Exec on a server. I am looking for some sort of software that can monitor file size, either installed on each users local machine with some sort of notification function, or something that can monitor the .pst size in Backup exec, again with some sort of flag. I am after some way to get an alert, once the users' Outlook.pst gets to be, say, over 1 gig. My users are not savvy enough to separate their psts into manageable sizes, so we need to do it for them. Suggestions? Thanks, Sharyn
[Declude.JunkMail] Why did this fail reverse DNS
Title: Why did this fail reverse DNS Good afternoon, Something really odd is going on here. All of a sudden, my own users are failing tests that they were passing last month. Here is the spam attachment that Declude adds to our emails, if the weight is 10. You **MAY** have spam! Subject: RE: Shakka Applebees -- Beverage Optimization Initiative -District Test **URGENT MESSAGE** From: [EMAIL PROTECTED] Tests Failed: 10-REVDNS, CMDSPACE, SUBJECTSPACES, SUBJECTCHARS, WEIGHT10-D02010098024AB4E6.SMD [EMAIL PROTECTED] is one of MY users. Why in the world did this fail revdns? According to DNS report: Your 1 MX record is: 10 mail.cruzaninc.com. [TTL=3600] IP=24.73.160.163 [TTL=3600] [US] 163.160.73.24.in-addr.arpa mail.cruzaninc.com. Thanks, Sharyn
RE: [Declude.JunkMail] Why did this fail reverse DNS
Title: Message Hi Darin, Thanks for the response. I host my own primary nameserver here, which is also the same box as my IMAIL server. There is no upstream DNS server involved. That's what has me so puzzled on this. I have relay set only for IP addresses, my users don't authenticate. In order for them to send mail, they must be VPN'd in and receive an IP address that is reserved for VPN clients only. (Long story on this) In this case, I don't believe Whitelist Auth will work, unless it can be based on IP addresses, rather than user authentication. Sharyn -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Wednesday, September 07, 2005 12:38 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Why did this fail reverse DNS Hi Sharyn, How is DNS configured on your server? Are you using upstream DNS servers that are suddenly not resolving? We've had that problem in the past, and resolved it by not using forwarders to provider DNS servers in our local DNS server on the IMail server. If you use WHITELIST AUTH in your Global.cfg, you can eliminate a lot of these problems as well, like CMDSPACE that MS mail clients fail. With that setting, all users who authenticate when sending will be whitelisted. Darin. - Original Message - From: Sharyn Schmidt To: Declude.JunkMail@declude.com Sent: Wednesday, September 07, 2005 12:27 PM Subject: [Declude.JunkMail] Why did this fail reverse DNS Good afternoon, Something really odd is going on here. All of a sudden, my own users are failing tests that they were passing last month. Here is the spam attachment that Declude adds to our emails, if the weight is 10. You **MAY** have spam! Subject: RE: Shakka Applebees -- Beverage Optimization Initiative -District Test **URGENT MESSAGE** From: [EMAIL PROTECTED] Tests Failed: 10-REVDNS, CMDSPACE, SUBJECTSPACES, SUBJECTCHARS, WEIGHT10-D02010098024AB4E6.SMD [EMAIL PROTECTED] is one of MY users. Why in the world did this fail revdns? According to DNS report: Your 1 MX record is:10 mail.cruzaninc.com. [TTL=3600] IP=24.73.160.163 [TTL=3600] [US]163.160.73.24.in-addr.arpa mail.cruzaninc.com. Thanks, Sharyn
RE: [Declude.JunkMail] Why did this fail reverse DNS
Hi David, The 10 is a combination of all those failed tests. I have this set up so even if my users fail tests like cmdspace and those others, they should still come in under Weight 10. It's the revdns that put this particular user over the top, and he shouldn't have failed it. This has been running fine for a really long time so I'm just puzzled as to what could've changed. My firewall prevents users from authenticating (done purposely, long story)I relay by IP address only. Sharyn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, September 07, 2005 12:40 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] Why did this fail reverse DNS Sharyn, 1. What is the test you have defined for 10-REVDNS ? 2. Do you have WHITELIST AUTH enabled in your global.cfg ? David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Wednesday, September 07, 2005 12:28 PM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] Why did this fail reverse DNS Good afternoon, Something really odd is going on here. All of a sudden, my own users are failing tests that they were passing last month. Here is the spam attachment that Declude adds to our emails, if the weight is 10. You **MAY** have spam! Subject:RE: Shakka Applebees -- Beverage Optimization Initiative -District Test **URGENT MESSAGE** From: [EMAIL PROTECTED] Tests Failed: 10-REVDNS, CMDSPACE, SUBJECTSPACES, SUBJECTCHARS, WEIGHT10-D02010098024AB4E6.SMD [EMAIL PROTECTED] is one of MY users. Why in the world did this fail revdns? According to DNS report: Your 1 MX record is: 10 mail.cruzaninc.com. [TTL=3600] IP=24.73.160.163 [TTL=3600] [US] 163.160.73.24.in-addr.arpa mail.cruzaninc.com. http://www.dnsstuff.com/tools/ptr.ch?ip=24.73.160.163 Thanks, Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Why did this fail reverse DNS
Title: Message I like the whitelist IP idea. Got an example of the syntax? At the moment, I have so few addresses whitelisted that I don't use a from file, I just have them listed straight in the global config. Hmm..can I just do that, by subnet? You know, it just occured to me that authority for the reverse zone is hosted on my ISP's nameserver. My server is only authoritative for the forward zone. (like you suggested earlier, been a long week already) An issue on their end would've caused this, correct? Sharyn -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Wednesday, September 07, 2005 12:52 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Why did this fail reverse DNS Can you do a reverse lookup on your domain from the server? Instead of WHITELIST AUTH, you might whitelist (or negative weight) by IP using an ipfile test. That would allow all mail from your users to go through without filtering. Darin. - Original Message - From: Sharyn Schmidt To: Declude.JunkMail@declude.com Sent: Wednesday, September 07, 2005 12:46 PM Subject: RE: [Declude.JunkMail] Why did this fail reverse DNS Hi Darin, Thanks for the response. I host my own primary nameserver here, which is also the same box as my IMAIL server. There is no upstream DNS server involved. That's what has me so puzzled on this. I have relay set only for IP addresses, my users don't authenticate. In order for them to send mail, they must be VPN'd in and receive an IP address that is reserved for VPN clients only. (Long story on this) In this case, I don't believe Whitelist Auth will work, unless it can be based on IP addresses, rather than user authentication. Sharyn -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin CoxSent: Wednesday, September 07, 2005 12:38 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Why did this fail reverse DNS Hi Sharyn, How is DNS configured on your server? Are you using upstream DNS servers that are suddenly not resolving? We've had that problem in the past, and resolved it by not using forwarders to provider DNS servers in our local DNS server on the IMail server. If you use WHITELIST AUTH in your Global.cfg, you can eliminate a lot of these problems as well, like CMDSPACE that MS mail clients fail. With that setting, all users who authenticate when sending will be whitelisted. Darin. - Original Message - From: Sharyn Schmidt To: Declude.JunkMail@declude.com Sent: Wednesday, September 07, 2005 12:27 PM Subject: [Declude.JunkMail] Why did this fail reverse DNS Good afternoon, Something really odd is going on here. All of a sudden, my own users are failing tests that they were passing last month. Here is the spam attachment that Declude adds to our emails, if the weight is 10. You **MAY** have spam! Subject: RE: Shakka Applebees -- Beverage Optimization Initiative -District Test **URGENT MESSAGE** From: [EMAIL PROTECTED] Tests Failed: 10-REVDNS, CMDSPACE, SUBJECTSPACES, SUBJECTCHARS, WEIGHT10-D02010098024AB4E6.SMD [EMAIL PROTECTED] is one of MY users. Why in the world did this fail revdns? According to DNS report: Your 1 MX record is:10 mail.cruzaninc.com. [TTL=3600] IP=24.73.160.163 [TTL=3600] [US]163.160.73.24.in-addr.arpa mail.cruzaninc.com. Thanks, Sharyn
RE: [Declude.JunkMail] Why did this fail reverse DNS
Thanks for your help! Sharyn --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] JAMMDNSBL
Title: JAMMDNSBL Good morning, All of a sudden, out of the blue, one of my own users is triggering this JAMMDNSBL test. (using his cruzanltd.com email address) Did something change? I have been off this list for awhile, and doing a search in the archives reveals nothing. I have not made any changes to my global.cfg in months. What would cause this all of a sudden? His is the first email I have ever seen that has failed this test. Thanks, Sharyn
RE: [Declude.JunkMail] Blacklist effectiveness
Title: Message Anyone else noticing over the past few months that DNSBLs and RHSBLs have almost completely lost their effectiveness? Hmmm I just finally bit the bullet the other day and upgraded to2.0.6 from 1.82. I used my old cfg file but copied over all the newest tests including the DNSBLs and the RHSBLs. Today, when I launched Outlook I had ZERO spam emails. ZERO! I thought my mail serverwas broken, except I received legit mail from the outside. I am waiting to hear from my users telling me that 1/2 their stuff had been put in thespam folder, but so far I haven't had1 call and I've been here 3 hours. These are the best results I've ever gotten from Declude, ever. Sharyn
[Declude.JunkMail] This always confuses me..sorry
Title: This always confuses me..sorry I have a default.junkmail file for my domain. I have a user.junkmail file for a certain user in the domain. I add a new test to my config file and the WARN action to my default.junkmail file for the domain. I add nothing to the user.junkmail file. What is the result for the user? Does the user get the WARN action from the default.junkmail file or the IGNORE action because there is no reference to it in their user.junkmail file? Thanks, Sharyn
RE: [Declude.JunkMail] This always confuses me..sorry
Title: Message If the user has a junkmail file, the settings from that file will be used regardless of any other junkmail files. In this case the action would be IGNORE. Thanks. I work on Declude upgrades and config changes about once ayear and I'm lucky ifI can remember what I did yesterday. Sharyn
[Declude.JunkMail] Host alias and user.junkmail files
Title: Host alias and user.junkmail files Hi, Under my old OHM, todhunter.com, I had a todhunter.com folder with all my user.junkmail files, for individual user settings. Now, my new OHM is Cruzaninc.com, with todhunter.com as the alias. Does Declude look at this as two separate domains or the same, as IMAIL does? In other words, will Declude take the individual user.junkmail files in the todhunter.com domain and automatically apply them to cruzaninc.com, or do I now have to maintain two sets of user.junkmail files, both in separate folders? Thanks, Sharyn
[Declude.JunkMail] Latest non-beta version of Declude ..install question
Title: Latest non-beta version of Declude ..install question Hello, Yes, I'm a bit behind the times. I am finally getting around to downloading what looks like the latest full version of Declude Junkmail and virus, 2.0.6, for Imail. It used to be that I could just copy the declude.exe file to the IMAIL directory after renaming the old one. No restart, no stopping or starting services..just an update on the fly. Can I still do this? I have been on Declude's website and looked over the instructions for the manual install. Im guessing this is what I want to do. I dont want Declude touching my global.cfg, I'd rather do this myself. Will the manual install give me a new global.cfg too? Thanks, Sharyn
[Declude.JunkMail] SO OT its' almost embarrasing: How to get in touch with Yahoo?
Title: SO OT its' almost embarrasing: How to get in touch with Yahoo? Hi, When one does a search on yahoo for Todhunter International, a company and their URL that is not affiliated with us is being returned. My CEO wants me to ensure the reference to this company is removed when doing a yahoo search for Todhunter International. I don't know know where to begin. I have been all over yahoo's site, but any contact us or help link, is just an automated help engine, with no link to a real person. Suggestions? Thanks in advance! Sharyn
RE: [Declude.JunkMail] SO OT its' almost embarrasing: How to get in touch with Yahoo?
Title: Message I do not think there is anything they will do to change the search engine rankings. The only way I would think you could resolve this is to ensure your website ranks higher using legitimate SEO techniques. I would settle for just speaking to someone to find out WHY it's coming up on a search. This company does not use our name, there is no reference to it on their website, no reason for it to appear on a search for Todhunter International. Matter of fact, the words that are highlighted in the summary blurb dont mention Todhunter at all "todhunter international Interstate Sales of New Jersey, LLC. is a consortium of food industry professionals with over 120 years of diversified experience. ... economic restraint are necessary. Interstate Sales of New Jersey can bring ... Copyright 2002 INTERSTATE SALES OF NEW JERSEY ... Why would that come up under a search for our company?
RE: [Declude.JunkMail] SO OT its' almost embarrasing: How to get in touch with Yahoo?
Title: Message Can you give the URL so we can see what site you are talking about. Also there is NO way Yahoo is going to reallytell you why they are listed, search engine listings are a highly guarded secret. Yep..here is the url: www.interstate-sale.com
RE: [Declude.JunkMail] SO OT its' almost embarrasing: How to get in touch with Yahoo?
Title: Message As to why this page shows up, it likely does so for good reason. My guess is that it is linked to by several things mentioning your products and they are in what appears to be the proper industry.None of the product names or our company show up anywhere in the website, though. This is what is so puzzling.
RE: [Declude.JunkMail] SO OT its' almost embarrasing: How to get in touch with Yahoo?
Title: Message LOL I'll tell my CEO that Thanks! Sharyn -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of MattSent: Friday, May 13, 2005 3:47 PMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] SO OT its' almost embarrasing: How to get in touch with Yahoo?That's why people use Google :)Matt
RE: [Declude.JunkMail] OT: AOL Treats FL Emergency response as spam.
Title: Message Its OT, but its funny.. AOL rocks. Not so funny for those of us that live in FL! :)
[Declude.JunkMail] WAY WAY OT: Senior Developer needed
Title: WAY WAY OT: Senior Developer needed Folks, We are currently seeking a candidate for employment in the Central Florida Area (Polk County). The candidate must be local, no relocation costs will be paid. Please contact me offlist if you know of anyone that might be able to fill this position. We give out rum at Christmas!!! :) Sharyn SENIOR ANALYST/DEVELOPER RELEVANT WORK EXPERIENCE: 3-5 years SALARY: Negotiable based on experience and match TECNICAL SKILLS REQUIRED: - Database driven application design and implementation - Microsoft Access/VBA database design and development - MS SQL Server database design and development TECHNICAL SKILLS DESIRED: - VB/ASP .NET/ADO development - Business intelligence system design and support (DI-Diver) RESPONSIBILTIES: - Analyze business applications and provide recommended solutions to improve and streamline business processes - Develop/implement enterprise solutions (primarily database driven applications) - Create end-user and systems documentation - Administer database security and performance - Provides 1st and 2nd level support for software systems - Resolve live issues quickly and professionally - Document changes made within the software - Analyze data for migration/integration - Export/Import data to/from core ERP and satellite databases - Integrate core ERP systems with in-house and third party software - Estimate programming requirements - Coordinate outsourced ERP system activities (define/test/apply enhancements and bug fixes) PERSONAL SKILLS REQUIRED: - Ability to work with little or no supervision - Ability to solve complex problems - Attention to detail - Result-oriented - Adaptable - Effective communication (written, oral, and presentation) and interpersonal skills
[Declude.JunkMail] Old OHN, now alias, does anythingelse need to be changed?
Title: Old OHN, now alias, does anythingelse need to be changed? Hi Thanks for the help here (David) and in the IMAIL list. Everything seems to be working, however, I had one last question concerning the JunkMail setup. I had a folder for todhunter.com where I had my individual user settings/actions for Junkmail. Todhunter.com is now the host alias, and cruzanin.com is now the OHN. All my users are currently still using the todhunter.com email address. When I set up my folks to use the cruzaninc addresses, I am assuming, in order for all the individual settings to work on that address, I am going to have to create a folder for that and copy everything to it. In the meantime, will my todhunter.com user settings work, even though that domain is now a host alias? Thanks, and Happy Easter! Sharyn
[Declude.JunkMail] Possible official host name change
Title: Possible official host name change Declude folks If I change the official host name on my mailserver, I am going to need a new activation key for junkmail and virus (I'm assuming). How do I go about getting this? Thanks, Sharyn
RE: [Declude.JunkMail] Possible official host name change
Title: Message Thanks. Sharyn -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Franco-RochaSent: Friday, March 18, 2005 8:53 AMTo: Declude.JunkMail@declude.comSubject: Re: [Declude.JunkMail] Possible official host name change Sharyn, Send all the details (old hostname and new hostname) to [EMAIL PROTECTED]. David Franco-Rocha
RE: [Declude.JunkMail] OT DNS Server change
It's called Manage Hosts in Network Solution's system, but is only on your account menu if you've previously created one. By the way, thanks to everyone that recommended godaddy.com as a registrar. I have gotten 5 domains registered and set up with my own nameservers in about 5 mins per domain tops, something that normally takes a LOT longer with Network solutions! If the person who started this post can change registrars, do so. Network Solutions makes things WAY more complicated than they need to be! I have been dealing with them for years and am jumping up and down for joy that I was able to go elsewhere for these new domains. Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] [Declude.Virus] Organization changes at Declude
After 4 years of hard work and little sleep Scott Perry has decided to move away from customer facing activities with Declude and will be spending more of his time working with the Red Cross. Scott continues his commitment to Declude in an advisory role. LOL! Now, folks, is this a BIG SHOCKER to anyone?? Good luck to you, Scott!!! Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] 2005 SpamHeaders - Fix
I moved from 1.81 to 1.82 this morning and I am not seeing any extra cpu load, so it doesn't seem to be universal. I moved from the last full release..1.75? To 1.82 this morning and things seem fine here. Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude and Smartermail
Title: Declude and Smartermail Does anyone actually have a production Smarter Mail/Declude server in use? Thoughts, comments, feedback? Thanks, Sharyn
RE: [Declude.JunkMail] Declude and Smartermail
Can I ask... (if you can't say it's ok)... does it hook in directly to SmarterMail and can do all the actions just like with IMail? Or is it an exe that runs when mail comes in and all it can do is delete mail? I'm using a scanner now that does ClamAV + SpamAssassin but all that can do really is delete mail .. nothing fancy. This is a good question. I guess what we would all like to know is, does Declude Junkmail work the same way with SmarterMail as it did/does with Imail. Can we use the same filters, tests, etc? Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] I G R E E T I N G S (from Kate)
Title: I G R E E T I N G S (from Kate) Hi, Forgive me for posting to all 3 lists, Im a bit brain dead this week. Sometime this week someone mentioned they had received an email to download some greeting card. Some one downloaded it on a test machine, and one of the anti virus scanners detected it as a virus. For the life of me, I have searched all 3 list archives and can't find mention of this. Does anyone remember what the name of the virus was? Thanks, Sharyn
[Declude.JunkMail] Second mail server
Title: Second mail server Scott, Am I to assume that if I configure a backup mailserver I will need to purchase another full license for the Declude products? Thanks, Sharyn
[Declude.JunkMail] Five ten blacklist
Title: Five ten blacklist Can someone give me a readers digest version of the reliability of the five ten blacklist? Thanks, Sharyn
[Declude.JunkMail] OT: Hello?
Title: OT: Hello? I haven't rec'd anything from either of these lists today? Sharyn
RE: [Declude.JunkMail] SPF Issues
If nothing else, we catch a good bit of spam and viruses that forge our email addresses by using SPF. I have found, that so, far, the BEST usage for SPF, as stated above, is that it's catching spam that has spoofed my own domain's address. Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail
Title: Message Declude is not a simple thing to implement and configure. Those of us running it are more than capable of adding a line to our config files and deciding how to weight it/configure it/otherwise implement it. We don't NEED a "click OK to install" GUI that does something to our configurations that we're going to have to go change anyway. I have been quietly listening to this thread, before I threw in my 2 cents, but I have to agree here. The "old" system of just letting us manually add aline to our global config file worked great. A GUI is unnecessary andI, personally, do not like random dll'sinstalled on my server that I can't uninstall.Having a pre-set "weight"configured is insane, as it is unlikely that all admins will assign the same weight to each test. My vote goes back to the old way as I prefer to be in control of what gets added to my global.cfg. That way, I have only myself to blame when it's not right :) Sharyn
[Declude.JunkMail] A happy conclusion to hours spent setting up SPF
Thanks for everyone's help yesterday and the day before with all my SPF questions and issues. The bottom line is, the email I have attached, failed the tests it was supposed to fail, including the spf test, as this particular email did NOT come from my mail server or my domain. Matter of fact, my firewall stripped the attachment from this email and I suspect it was one of the zillions of viruses going around. For the Americans on this list, please have a safe and happy 4th of July Holiday! Sharyn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Declude JunkMail Sent: Thursday, July 01, 2004 11:24 AM To: [EMAIL PROTECTED] Subject: You **MAY** have spam You **MAY** have spam! Subject:Re: Here is the document From: [EMAIL PROTECTED] Tests Failed: 14-SPAMHEADERS, CMDSPACE, SPFFAIL, WEIGHT10-D2c8e0c7b03903ab7.SMD To view the E-mail, just click the attachment. ---BeginMessage--- Title: Re: Here is the document Your file is attached. ---End Message---
RE: [Declude.JunkMail] Syntax for spf
Title: RE: Syntax for spf --- To use the new SPF test, you can add lines such as: SPFPASS spf pass x -5 0 SPFFAIL spf fail x 8 0 to your global.cfg file. SPF returns PASS for E-mail that passes SPF (that comes from an IP that is acceptable to the owner of the domani that it claims to be coming from), FAIL for E-mail that fails SPF (that does not come from an acceptable IP for the domain), or UNKNOWN (for E-mail from domains that do not use SPF yet, or for some other reason should return UNKNOWN). --- I've just added the above lines to my global config. After checking the Declude log, I see no indication that Declude is performing this test. What am I missing? Log snippet pasted below: 06/30/2004 07:39:55 Qa66c030305e846d1 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: xxx.xxx.xxx.xxx ID: 06/30/2004 07:39:55 Qa66c030305e846d1 Tests failed [weight=25]: NOABUSE=WARN NOPOSTMASTER=WARN BADHEADERS=WARN HELOBOGUS=WARN SPAMHEADERS=WARN IPNOTINMX=IGNORE NOLEGITCONTENT=IGNORE WEIGHT10=ATTACH WEIGHT15=HOLD CATCHALLMAILS=IGNORE InHeadersFilter=WARN I am running v 1.79 beta. Everything else seems to be working fine. Thanks, Sharyn
[Declude.JunkMail] FW: You **MAY** have spam
sigh This is legit, coming from my own mailserver, and it failed the SPF test. Obviously something is not correct here. Any suggestions? I have used the wizard on the pobox site and pasted the text string into a text record in my DNS. I've had to disable the test for now as all my legit mail is being flagged as spam. Sharyn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Declude JunkMail Sent: Wednesday, June 30, 2004 8:17 AM To: [EMAIL PROTECTED] Subject: You **MAY** have spam You **MAY** have spam! Subject:New Directory From: [EMAIL PROTECTED] Tests Failed: 11-CMDSPACE, SPFFAIL, WEIGHT10-Daf1a0221059a2e33.SMD To view the E-mail, just click the attachment. ---BeginMessage--- Title: New Directory Attached is the new company for the Lake Alfred, Winter haven, and Auburndale facilities. Should any changes need to be made please let me know. ... Thank You Kay E Ext 161 ---End Message---
RE: [Declude.JunkMail] FW: You **MAY** have spam
The problem is that your SPF record (v=spf1 a mx ptr -all) doesn't list IPs that your users may be connecting to your mailserver from. The problem may also be that ID 10 T error and I never listed the IP of my firewall, which uses an SMTP proxy. (Len is laughing if he is reading this) In this case, you should whitelist your own users (WHITELIST AUTH if you are running IMail v8 and the latest Declude beta). Im only running IMAIL 7.15. I have made the change in the SPF record in DNS, listing my firewall's IP. Is there a way to test this before I turn everything back on? I've already had to send out an email to the entire company explaining that I futzed up, don't want to have to do this again. LOL Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] FW: You **MAY** have spam
Ok.. Does this mean things are working now? I just ran the test on Scott's website... SPF lookup of sender [EMAIL PROTECTED] from IP 24.73.160.162: SPF string used: v=spf1 ip4:24.73.160.162 a mx ptr -all. Processing SPF string: v=spf1 ip4:24.73.160.162 a mx ptr -all. Testing 'ip4:24.73.160.162' on IP=24.73.160.162, target domain 24.73.160.162, CIDR 32, default=PASS. MATCH! Testing 'a' on IP=24.73.160.162, target domain example.com, CIDR 32, default=PASS. Testing 'mx' on IP=24.73.160.162, target domain example.com, CIDR 32, default=PASS. Testing 'ptr' on IP=24.73.160.162, target domain example.com, CIDR 32, default=PASS. Testing 'all' on IP=24.73.160.162, target domain example.com, CIDR 32, default=FAIL. Result: PASS This, however, is no guarrantee things are going to work internally though, is it? snip from Matt's email believe that both CMDSPACE and SPF are inappropriate tests to score unless you can whitelist your own local users that connect directly to your server to send E-mail. If you have IMail 7 and your users are on IP space that you don't control, you are out of luck, but if you have either IMail 8 and/or all of your users connect by way of a LAN, then there are ways to do this, but you should first indicate which of the above applies. I control all the IPS my users are on, it's a local LAN...192.168.x.x (there are 5 different subnets) but my mail server is on a DMZ off the firewall, and I have an smtp proxy enabled. This would indicate that in reality, it's the IP address of the firewall that is actually handling the internal mail, as well. So, adding the IP address of the firewall (24.73.160.162) should work. I wish there was a way to test this internally. Is there? Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] FW: You **MAY** have spam
I lowered the weight of the spf fail weight to 1 (warn in headers) to test this internally. My internal IPs are still failing the spf test. How do I go about whitelisting 5 subnets of internal IP addresses with IMAIL 7.15? It's probably not a bad idea anyway, if it's possible, as everything internally is failing the cmdspace test too. Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] FW: You **MAY** have spam
Chances are that you need to IPBYPASS the firewall's IP in your global.cfg and then whitelist your LAN by it's IP space. Do I have to list each individual address separately (will put it at over 200 addresses so this won't work) or can I use a /24 notation for each subnet block? Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] $default$.junkmail file questions
Title: $default$.junkmail file questions I have 2 domains on my mailserver: Todhunter.com (my primary domain) Cruzanltd.com (my virtual domain) I have a $default$.junkmail file for the todhunter.com domain, and separate user.junkmail files, for my outside salespeople, who are to receive all email, including spam and everything else. In their user.junkmail files, all actions are set to either warn or ignore, no hold, attach or delete. Recently, 3/4's of these same salespeople, now have all their todhunter.com mail forwarded to cruzanltd.com, which has become their new email address. At the moment, I have no user.junkmail files for any of those salespeople. I believe Scott advised awhile back that Declude would take the settings of the $default$.junkmail file, for a virtual domain, in this case, the cruzanltd.com domain. Here is my question I want those users that have cruzanltd.com email addresses, to have the same junkmail settings that their todhunter.com mail had. I'm trying to figure out the easiest way to do this. Since the only people who have these cruzanltd.com addresses, are those users that receive all their mail, including the spam, can I just create a junkmail file for the cruzanltd.com domain or do I have to set up individual user junkmail files like I did for the todhunter.com domain? If all these users have all their todhunter.com email forwarded to the cruzanltd.com email address, does Declude apply the junkmail file settings before or after the mail is forwarded? Thanks, Sharyn
RE: [Declude.JunkMail] $default$.junkmail file questions
Just a single per-domain config file (\IMail\Declude\cruzanltd.com\$default$.JunkMail) should be all that is needed in this case. This is what I was looking for. I was unsure Declude would check a folder marked cruzanltd.com for a default file or it would automatically use the $default$.junkmail for todhunter.com. I'm assuming, though, that I have to move the $default$.junkmail file from the todhunter.com domain to the todhunter.com folder, where my user.junkmail files are? At the moment, it's just in the declude root directory as there was never any need to change it. If I set this up, like this, then I can still add individual user.junkmail files, the same way as always, if there is ever anyone who wants different settings. If the E-mail is truly forwarded (as opposed to an alias), Declude JunkMail will apply the actions for the first domain (the one doing the forwarding). Normally the forwarded E-mail will inherit the same actions as the first domain. The email is forwarded, as in, in the IMAIL user accounts themselves, their todhunter email is set to be forwarded to [EMAIL PROTECTED] However, these ppl are also getting email addressed directly to [EMAIL PROTECTED] which is why I need to set this up for that domain as well. So, if I move my $default$.junkmail file for todhunter.com to the todhunter.com folder and I create a $default$.junkmail file and put it in a cruzanltd.com folder, Declude will also still read my specific user.junkmail files that are already set up in the todhunter.com folder..correct? And, if I ever want to add any user.junkmail files to the cruzanltd.com folder, I could. Correct? Sharyn -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] $default$.junkmail file questions
It gets complicated with aliases and forwarding, but if cruzanltd.com only appears as a forwarding address, Declude JunkMail won't try to use it. Ok...now I'm confused. I do actually have a cruzanltd.com domain set up on the imail server, with mx records in dns and everything. People will actually be addressing email to [EMAIL PROTECTED] Let me rephrase the question and ask, if I move the $default$.junkmail file that I am currently using for the todhunter.com domain, to the folder marked todhunter.com that contains all the specific user.junkmail files for the todhunter.com domain, am I going to break anything? :) We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] $default$.junkmail file questions
What I would do in this case is simply create a \IMail\Declude\cruzanltd.com\$default$.JunkMail file, and not change anything else. That way, E-mail to [EMAIL PROTECTED] will use the \IMail\Declude\cruzanltd.com\$default$.JunkMail file, and E-mail to anyone else will use whatever settings they previously had. Great! Last question on this.. If it turned out that I did have a user who wanted different settings than the domain default, I could just go ahead and add a user.junkmail file, like I have been doing all along, and drop it in the cruzanltd.com folder. Correct? You have the patience of a saint, thanks! Sharyn We are the worldwide producer and marketer of the award winning Cruzan Single Barrel Rum, judged Best in the World at the annual San Francisco Wine and Spirits Championships. For more information, please click (go to) htmla href=http://www.cruzanrums.com;www.cruzanrums.com/a/html --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude and SPF records
Title: Declude and SPF records We receive a lot of spam that looks like it's coming from our own domain (which it really isn't). If I set up an SPF record for my own domain ( todhunter.com) and upgrade to the latest Declude beta, enable the SPF test, etc, will Declude nab spam that is sent to my domain, with a spoofed sender addresss, from my domain? Did this question make sense? Sharyn
