Re: [Declude.JunkMail] Flooded with spam

2006-08-30 Thread gbirdsall
I've seen a 100-130% increase since Sunday.  An average day used to be
around 500k-550k Spam messages, the past two days have been 950k and 1.2
million, respectivly.

One thing we implemented was session based blocking in our firewall, we
were getting between 200 and 4000 (not a typo) simultanious sessions from
IP addresses.  We now grab that and block IPs based on this information.

It has helped already today.

- greg


 Just checking with the list if they have seen an increase in the amount of
 spam messages caught.

 Last monday and tuesday my mail servers are flooded with spam.

 My smartermail server that usually process 30 to 40 K per day, processed
 on
 monday 120K and 94K of them where caught as spam.

 On tuesday processed aprox 110K, and 85K where spam.

 My spool and forward server processed over 140K yesterday. Reviewing the
 spool I would say that almost all spam, a lot of them trying to relay on
 my
 backup server

 Do you guys saw this spam increase?.

 btw. message sniffer, INVURIBL and declude worked fine.. I am happy I have
 them.

 regards

 Luis Arango


 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.




---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.



RE: [Declude.JunkMail] OT: Storage Server (NAS)

2006-05-16 Thread gbirdsall
Supermicro has some really neat 1U 4xSATA servers now - we use a bunch of
the dual opteron ones here at our datacenter.

They would probably work nicely for you.


- greg


 Sorry to reply late.  We have set up Dell Powervaults with that
 approximate
 configuration.  You can usually get a pretty good discount off of the list
 price.  We usually go with a raid 5 configuration.

 Chuck Schick
 Warp 8, Inc.
 (303)-421-5140
 www.warp8.com

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee
 Sent: Friday, May 12, 2006 1:26 PM
 To: JunkMail Declude
 Subject: [Declude.JunkMail] OT: Storage Server (NAS)


 We are looking for a storage server to do our nightly backups to and our
 desktop user backups.


 1U Rack
 1gig Ram
 4 SATA hot swapable
 Windows storage server

 any suggestions?


 Kevin Bilbee
 Network Administrator
 Standard Abrasives, Inc.
 [EMAIL PROTECTED]
 (805) 520-5800 x7332
 
 Changing the way industry works.

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To unsubscribe,
 just send an E-mail to [EMAIL PROTECTED], and type unsubscribe
 Declude.JunkMail.  The archives can be found at
 http://www.mail-archive.com.

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Bcc failure

2006-04-01 Thread gbirdsall
I could be wrong, but I thought the percent test tested for % signs in
the subject.

- greg



 Can anyone suggest why Blind Carbon Copy (bcc) would stop working on
 7.07 iMail with Declude 2.0.6?  As far as I know it was working fine
 until it ceased yesterday when I sent an email with 87 addresses in
 the bcc.  I tried again today and see the same result.  Looking at
 the iMail log I can see it hit the server and was recognized for what
 it was, but no delivery.

 Then I looked into the Declude log and discovered each outgoing email
 was being tagged by the Percent test which had been set to HOLD.  The
 problem is that all the email addresses, including mine, are
 legitimate email addresses with NO  percent signs in the TO address.

 It appears to me some of the messages might have gone out although
 without following up to find out I can't be sure.  But the majority,
 including one addressed to my own address, didn't.

 I have sent bcc mail out in the past with no problem.  So why
 now?  Why with this list?  Why does Declude think there are percent
 signs in the outgoing email addresses?

 Here is the section of the log where some of the addresses are listed.

 20060401 105222 127.0.0.1   SMTPD (0CB400EE) [64.85.18.49]
 connect 63.231.33.210 port 3179
 20060401 105222 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] EHLO
 amd-orin.wells.org
 20060401 105224 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] MAIL
 FROM:[EMAIL PROTECTED]
 20060401 105224 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]
 20060401 105224 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210]
 C:\IMail\spool\Dcbe70cb400ee5bf7.SMD 1201
 20060401 105225 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] MAIL
 FROM:[EMAIL PROTECTED]
 20060401 105225 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]

 Here is the corresponding action taken on the address immediately above:

 04/01/2006 10:52:35 QCBE80CB400EE5FC0 nNOLEGITCONTENT:-5 PERCENT:10
 .  Total weight = 5.
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Using [outgoing] CFG file
 global.cfg.
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Msg failed PERCENT (). Action=HOLD.
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Subject: 47th District Caucus
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 From: [EMAIL PROTECTED] To:
 [EMAIL PROTECTED]  IP: 63.231.33.210 ID:
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Tests failed [weight=5]:
 IPNOTINMX=IGNORE PERCENT=HOLD CATCHALLMAILS=IGNORE
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Action(s) taken for
 [EMAIL PROTECTED] = IGNORE HOLD  [LAST ACTION=HOLD]
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Using [outgoing] CFG file
 global.cfg.
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Msg failed PERCENT (). Action=HOLD.
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Subject: 47th District Caucus
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 From: [EMAIL PROTECTED] To:
 [EMAIL PROTECTED] [EMAIL PROTECTED]  IP: 63.231.33.210 ID:
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Tests failed [weight=5]:
 IPNOTINMX=IGNORE PERCENT=HOLD CATCHALLMAILS=IGNORE

 20060401 105230 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]
 20060401 105230 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]
 20060401 105230 127.0.0.1   SMTP (2732) Connect comcast.net
 [204.127.202.26:25] (1)
 20060401 105230 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]
 20060401 105230 127.0.0.1   SMTP (2732) 220 sccrmxc23.comcast.net
 - Maillennium ESMTP/MULTIBOX sccrmxc23 #285
 20060401 105230 127.0.0.1   SMTP (2732) EHLO wells.org
 20060401 105230 127.0.0.1   SMTP (2732) 250-sccrmxc23.comcast.net
 20060401 105230 127.0.0.1   SMTP (2732) 250-7BIT
 20060401 105230 127.0.0.1   SMTP (2732) 250-8BITMIME
 20060401 105230 127.0.0.1   SMTP (2732) 250-DSN
 20060401 105230 127.0.0.1   SMTP (2732) 250-EXPN
 20060401 105230 127.0.0.1   SMTP (2732) 250-HELP
 20060401 105230 127.0.0.1   SMTP (2732) 250-NOOP
 20060401 105230 127.0.0.1   SMTP (2732) 250-PIPELINING
 20060401 105230 127.0.0.1   SMTP (2732) 250-SIZE 15728640
 20060401 105230 127.0.0.1   SMTP (2732) 250-VERS V05.00c++
 20060401 105230 127.0.0.1   SMTP (2732) 250 XMVP 2
 20060401 105230 127.0.0.1   SMTP (2732) MAIL
 FROM:[EMAIL PROTECTED]
 20060401 105230 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]
 20060401 105230 127.0.0.1   SMTP (2732) 250 ok
 20060401 105230 127.0.0.1   SMTP (2732) RCPT To:[EMAIL PROTECTED]
 20060401 105231 127.0.0.1   SMTP (2732) 250 ok
 20060401 105231 127.0.0.1   SMTP (2732) DATA
 20060401 105231 127.0.0.1   SMTP (2732) 354 ok
 20060401 105231 127.0.0.1   SMTP (2732) .
 20060401 105231 127.0.0.1   SMTP (2732) 250 ok ;
 id=20060401185050s2300mrptue
 20060401 105231 127.0.0.1   SMTP (2732) rdeliver comcast.net
 [EMAIL PROTECTED] (1) [EMAIL PROTECTED] 1337
 20060401 105231 127.0.0.1   SMTP (2732) QUIT
 20060401 105231 127.0.0.1   

Re: [Declude.JunkMail] Bcc failure

2006-04-01 Thread gbirdsall
I was wrong, sorry about that.

That's what I get for jumping the gun on something - My bad.

- greg



 Can anyone suggest why Blind Carbon Copy (bcc) would stop working on
 7.07 iMail with Declude 2.0.6?  As far as I know it was working fine
 until it ceased yesterday when I sent an email with 87 addresses in
 the bcc.  I tried again today and see the same result.  Looking at
 the iMail log I can see it hit the server and was recognized for what
 it was, but no delivery.

 Then I looked into the Declude log and discovered each outgoing email
 was being tagged by the Percent test which had been set to HOLD.  The
 problem is that all the email addresses, including mine, are
 legitimate email addresses with NO  percent signs in the TO address.

 It appears to me some of the messages might have gone out although
 without following up to find out I can't be sure.  But the majority,
 including one addressed to my own address, didn't.

 I have sent bcc mail out in the past with no problem.  So why
 now?  Why with this list?  Why does Declude think there are percent
 signs in the outgoing email addresses?

 Here is the section of the log where some of the addresses are listed.

 20060401 105222 127.0.0.1   SMTPD (0CB400EE) [64.85.18.49]
 connect 63.231.33.210 port 3179
 20060401 105222 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] EHLO
 amd-orin.wells.org
 20060401 105224 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] MAIL
 FROM:[EMAIL PROTECTED]
 20060401 105224 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]
 20060401 105224 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210]
 C:\IMail\spool\Dcbe70cb400ee5bf7.SMD 1201
 20060401 105225 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] MAIL
 FROM:[EMAIL PROTECTED]
 20060401 105225 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]

 Here is the corresponding action taken on the address immediately above:

 04/01/2006 10:52:35 QCBE80CB400EE5FC0 nNOLEGITCONTENT:-5 PERCENT:10
 .  Total weight = 5.
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Using [outgoing] CFG file
 global.cfg.
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Msg failed PERCENT (). Action=HOLD.
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Subject: 47th District Caucus
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 From: [EMAIL PROTECTED] To:
 [EMAIL PROTECTED]  IP: 63.231.33.210 ID:
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Tests failed [weight=5]:
 IPNOTINMX=IGNORE PERCENT=HOLD CATCHALLMAILS=IGNORE
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Action(s) taken for
 [EMAIL PROTECTED] = IGNORE HOLD  [LAST ACTION=HOLD]
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Using [outgoing] CFG file
 global.cfg.
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Msg failed PERCENT (). Action=HOLD.
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Subject: 47th District Caucus
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 From: [EMAIL PROTECTED] To:
 [EMAIL PROTECTED] [EMAIL PROTECTED]  IP: 63.231.33.210 ID:
 04/01/2006 10:52:35 QCBE80CB400EE5FC0 Tests failed [weight=5]:
 IPNOTINMX=IGNORE PERCENT=HOLD CATCHALLMAILS=IGNORE

 20060401 105230 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]
 20060401 105230 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]
 20060401 105230 127.0.0.1   SMTP (2732) Connect comcast.net
 [204.127.202.26:25] (1)
 20060401 105230 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]
 20060401 105230 127.0.0.1   SMTP (2732) 220 sccrmxc23.comcast.net
 - Maillennium ESMTP/MULTIBOX sccrmxc23 #285
 20060401 105230 127.0.0.1   SMTP (2732) EHLO wells.org
 20060401 105230 127.0.0.1   SMTP (2732) 250-sccrmxc23.comcast.net
 20060401 105230 127.0.0.1   SMTP (2732) 250-7BIT
 20060401 105230 127.0.0.1   SMTP (2732) 250-8BITMIME
 20060401 105230 127.0.0.1   SMTP (2732) 250-DSN
 20060401 105230 127.0.0.1   SMTP (2732) 250-EXPN
 20060401 105230 127.0.0.1   SMTP (2732) 250-HELP
 20060401 105230 127.0.0.1   SMTP (2732) 250-NOOP
 20060401 105230 127.0.0.1   SMTP (2732) 250-PIPELINING
 20060401 105230 127.0.0.1   SMTP (2732) 250-SIZE 15728640
 20060401 105230 127.0.0.1   SMTP (2732) 250-VERS V05.00c++
 20060401 105230 127.0.0.1   SMTP (2732) 250 XMVP 2
 20060401 105230 127.0.0.1   SMTP (2732) MAIL
 FROM:[EMAIL PROTECTED]
 20060401 105230 127.0.0.1   SMTPD (0CB400EE) [63.231.33.210] RCPT
 TO:[EMAIL PROTECTED]
 20060401 105230 127.0.0.1   SMTP (2732) 250 ok
 20060401 105230 127.0.0.1   SMTP (2732) RCPT To:[EMAIL PROTECTED]
 20060401 105231 127.0.0.1   SMTP (2732) 250 ok
 20060401 105231 127.0.0.1   SMTP (2732) DATA
 20060401 105231 127.0.0.1   SMTP (2732) 354 ok
 20060401 105231 127.0.0.1   SMTP (2732) .
 20060401 105231 127.0.0.1   SMTP (2732) 250 ok ;
 id=20060401185050s2300mrptue
 20060401 105231 127.0.0.1   SMTP (2732) rdeliver comcast.net
 [EMAIL PROTECTED] (1) [EMAIL PROTECTED] 1337
 20060401 105231 127.0.0.1   SMTP (2732) QUIT
 20060401 105231 

Re: [Declude.JunkMail] OT: SPAM from Invariant Systems.

2006-03-10 Thread gbirdsall
What message are you talking about? I didn't get anything from Invariant
Systems.

- greg

 I am posting this here to publicly shame them with intent.

 Invariant Systems is in the same business as most of us are.

 They also happen to sell a couple of apps that work well for Declude.

 Today they sent out to the lists that we who have purchased their software
 to work with Declude marketing material proclaiming their business. The
 lists are for the purpose of communicating with the purchasers of their
 software with a way for us to talk about problems and what not, the same
 as
 Declude is providing us with this list to communicate about Declude JM.

 I consider those SPAM!

 John T
 eServices For You

 Seek, and ye shall find!



 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.



---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Alive?

2005-12-31 Thread gbirdsall

Yep.

Happy New Years!

- greg


 Hi,

  Was just wondering if the list is up. I had a power outage last night
 and everything seems to me working. Just checking

 Jeff Kratka

 --
 
 TymeWyse Internet
 P.O.Box 84 - 110 Ecklund St., Canyonville, OR 97417
 tel: (541) 643-2023  -  [EMAIL PROTECTED]
 

 ---
 [This E-mail was scanned for viruses by Declude EVA www.declude.com]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Decludeproc abend

2005-12-21 Thread gbirdsall
I always thought it was Absent By Enforced Net Deprivation - usually
when someone hadn't posted in a while 'cause their modem died or their
parents grounded them.

It's been a long time since I heard that though.

- greg



 Abend is a common term used in the world of mainframes.  It's the same
 as
 aborted or crashed.  I first heard it in 1981 and used it many, many
 times over the years.  I don't know where the term originated from.







   _

 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Markus Gufler
 Sent: Wednesday, December 21, 2005 3:30 PM
 To: Declude.JunkMail@declude.com
 Subject: RE: [Declude.JunkMail] Decludeproc abend



 abend in German means evening.



 good Abend!  :-)

 Markus








   _


 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists)
 Sent: Wednesday, December 21, 2005 10:23 PM
 To: Declude.JunkMail@declude.com
 Subject: RE: [Declude.JunkMail] Decludeproc abend

 Is abend some kind of French word?



 ;)



 John T

 eServices For You



 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
 Sent: Wednesday, December 21, 2005 1:13 PM
 To: Declude.JunkMail@declude.com
 Subject: [Declude.JunkMail] Decludeproc abend



 I have had decludeproc 3.0.5.22 abend on me twice today. Is there anything
 I
 should be doing to capture information about this? I have automatic
 restart
 enabled so it starts again but I am not super happy with it abending.



 Any hints on what (if anything) I can/should be doing?



 Goran Jovanovic

 Omega Network Solutions



---
[This E-mail was scanned for viruses by Declude EVA www.declude.com]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] WHITELIST AUTH

2005-11-14 Thread gbirdsall
I believe you have to be running Imail 8.0 or higher as well.

Someone correct me if I'm wrong here.



 Are your customers authenticating?  If they are, you have that line in
 your
 Global.cfg, and they send outbound through your server then yes, they will
 be whitelisted.

 Darin.


 - Original Message -
 From: Richard Farris [EMAIL PROTECTED]
 To: Declude.JunkMail@declude.com
 Sent: Monday, November 14, 2005 8:09 PM
 Subject: [Declude.JunkMail] WHITELIST AUTH


 In my Global file I have
 WHITELISTAUTH

 I thought this would keep my customers own email from being trapped in the
 spamreview..but I still see my outgoing customers email held...do I have
 it
 right?

 Richard Farris
 Ethixs Online
 1.270.247. Office
 1.800.548.3877 Tech Support
 Crossroads to a Cleaner Internet


 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Sniffer Question

2005-09-02 Thread gbirdsall
Personally, my sniffer is set to 2/3 of my hold weight, that test really
doesn't give me troube as long as I keep my .snf file updated.

I'm curious as to what other people do as well.

- greg



 I just setup Sniffer for the first time and I'm wondering what people
 have their external test weight set to.  My global.cfg came with a
 sniffer test already configured (though it was commented out) to have a
 weight of 7, which actually gives it a weight of 8 for some reason I
 couldn't figure out.  If you haven't made up your own weighting system
 (some people have their weights go up to 300 or more), what's a good
 weight for a failed sniffer test?  At 10, I put messages into a bulk
 folder, at 17 I hold them.

 Thanks

 ---
 [This E-mail was scanned for viruses.]

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Whitelisting our Domain

2005-04-04 Thread gbirdsall
I'm using IMail 7.14 and I noticted that in the Declude help page that
WHITELIST AUTH only works with V8 and above?

Is there any way to do this with V7.14?


 Yes.

 If all users send through your server, then use SMTP AUTH on all clients
 and
 configure Junkmail to whitelist AUTHing users.  If not, but all mail comes
 in from static IPs, you could use an IP whitelist to bypass for those IPs.

 Darin.


 - Original Message -
 From: Kevin Stanford [EMAIL PROTECTED]
 To: Declude.JunkMail@declude.com
 Sent: Monday, April 04, 2005 10:25 AM
 Subject: [Declude.JunkMail] Whitelisting our Domain


 If we whitelist our domain will Spam that spoofs our email addresses and
 domain also be whitelisted? If so, how can I circumvent it?

 Thanks,

 Kevin

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.


Re: [Declude.JunkMail] Whitelisting our Domain

2005-04-04 Thread gbirdsall
Yes, some of my users outgoing mail is being marked as spam.

So the best way would be to set up negative weights for IP addresses?  Is
there a way to do IP ranges with declude?

 Yes, but he originally asked how to avoid all spam that forged their
 domain
 from also being whitelisted.  Without IMail 8, the best way that I know of
 is to use a negative weight instead of a whitelist.  While some spam may
 slip through from the negative weight, this can be tuned to keep the
 amount
 low.

 Darin.


 - Original Message -
 From: David Barker [EMAIL PROTECTED]
 To: Declude.JunkMail@declude.com
 Sent: Monday, April 04, 2005 11:13 AM
 Subject: RE: [Declude.JunkMail] Whitelisting our Domain


 It depends on the reason for using WHITELIST AUTH if it is because
 outgoing
 mail is being marked as spam or held you can look at the settings and
 ACTIONS in global.cfg also you could try adding the following line to your
 global.cfg

 WHITELIST FROM @yourdomain.com

 Where yourdomain is actually the name of your domain

 David B
 www.declude.com

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox
 Sent: Monday, April 04, 2005 11:03 AM
 To: Declude.JunkMail@declude.com
 Subject: Re: [Declude.JunkMail] Whitelisting our Domain

 Oops.. not that I know of.  I believe it wasn't until V8 that IMail passed
 the info to Junkmail.  Your best bet may be IP whitelists (negative
 weighting, really) using the ipfile test.

 Darin.


 - Original Message -
 From: [EMAIL PROTECTED]
 To: Declude.JunkMail@declude.com
 Sent: Monday, April 04, 2005 10:43 AM
 Subject: Re: [Declude.JunkMail] Whitelisting our Domain


 I'm using IMail 7.14 and I noticted that in the Declude help page that
 WHITELIST AUTH only works with V8 and above?

 Is there any way to do this with V7.14?


 Yes.

 If all users send through your server, then use SMTP AUTH on all clients
 and
 configure Junkmail to whitelist AUTHing users.  If not, but all mail
 comes
 in from static IPs, you could use an IP whitelist to bypass for those
 IPs.

 Darin.


 - Original Message -
 From: Kevin Stanford [EMAIL PROTECTED]
 To: Declude.JunkMail@declude.com
 Sent: Monday, April 04, 2005 10:25 AM
 Subject: [Declude.JunkMail] Whitelisting our Domain


 If we whitelist our domain will Spam that spoofs our email addresses and
 domain also be whitelisted? If so, how can I circumvent it?

 Thanks,

 Kevin

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


 __ NOD32 1.1044 (20050402) Information __

 This message was checked by NOD32 antivirus system.
 http://www.nod32.com


 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.

 ---
 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  The archives can be found
 at http://www.mail-archive.com.


---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  The archives can be found
at http://www.mail-archive.com.