[Declude.JunkMail] Declude log ?
When Imail receives a message, it is set to copy all to a ruleprocess account. This account is only used for running a rules.ima, like for archiving some users and such. However, Declude is seeing this as a second to address and running all scans twice. Is there a way to tell Declude not to scan a message twice? John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude log analysis...
Can anyone recommend a good log analysis program to work with Declude? I am most interested in tests failed and possibly IP addresses of failed mail. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude log files
I have a program that reads and archives iMail log files to a SQL server. I'd like to add the capability to archive Declude log files in a meaningful manner. I'm studying the log files (LOGLEVEL set to MID), and I've noticed something I don't understand. For example (lines edited for brevity): 11/28/2003 11:56:50 Q7e4a069f00606ad1 SPAMCOP:7 SORBS-SPAM:8 MAILPOLICE-BULK:10 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed SPAMCOP ... Action=IGNORE. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed SORBS-SPAM Action=IGNORE. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed MAILPOLICE-BULK... Action=IGNORE. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed AHBLDNSBL Action=IGNORE. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed WEIGHT10 Action=IGNORE. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed WEIGHT20 Action=IGNORE. 11/28/2003 11:56:50 Q7e4a069f00606ad1 R1 Message OK 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed SPAMCOP Action=DELETE. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed SORBS-SPAM Action=IGNORE. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed MAILPOLICE-BULK Action=WARN. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed AHBLDNSBL ... Action=IGNORE. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed WEIGHT10 Action=HOLD. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Msg failed WEIGHT20 Action=DELETE. 11/28/2003 11:56:50 Q7e4a069f00606ad1 Deleting spam from [EMAIL PROTECTED] to [EMAIL PROTECTED] 11/28/2003 11:56:50 Q7e4a069f00606ad1 Subject: A holiday gift anyone would love - digital camera 11/28/2003 11:56:50 Q7e4a069f00606ad1 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] IP: 64.88.151.68 ID: This entry appears to be processing file Q7e4a069f00606ad1. However, it looks like the file was process twice, and that it passed on the first run. I'm especially curious about why the first time out, WEIGHT20's action is IGNORE, but on the second it's action is (correctly) set to DELETE. Might I have something mis-configured? -- Bud Durland, CNE [EMAIL PROTECTED] fax: 518-561-0017 For sale: Parachute. Like new, used once. Small stain. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude log ?
>When Imail receives a message, it is set to copy all to a ruleprocess >account. This account is only used for running a rules.ima, like for >archiving some users and such. > >However, Declude is seeing this as a second to address ... That's because IMail has changed the E-mail so that there are now two recipients. >... and running all scans twice. > >Is there a way to tell Declude not to scan a message twice? The tests will only be run once. If you create a per-user configuration for the "copy" address with all the actions set to IGNORE, it should prevent the tests from getting logged twice. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log ?
Standard version here. :( John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry Sent: Monday, September 30, 2002 4:57 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude log ? >When Imail receives a message, it is set to copy all to a ruleprocess >account. This account is only used for running a rules.ima, like for >archiving some users and such. > >However, Declude is seeing this as a second to address ... That's because IMail has changed the E-mail so that there are now two recipients. >... and running all scans twice. > >Is there a way to tell Declude not to scan a message twice? The tests will only be run once. If you create a per-user configuration for the "copy" address with all the actions set to IGNORE, it should prevent the tests from getting logged twice. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log ?
>Standard version here. Unfortunately, the Standard version treats all E-mail addresses the same, including "copied" ones. One idea would be to have the copied mail sent to an address on a separate domain, and set up a per-domain configuration for that domain. Another would be to have it forward to an account "abuse", "postmaster", or "noc", which could have per-user settings, even with the Standard version. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log ?
>Another would be to have it forward to an account "abuse", "postmaster", or "noc", which could have per-user settings, even with the Standard version. If I read you right, the only thing that is being done twice is logging, correct? How about if the copyall was set to [EMAIL PROTECTED], and that is an alias for [EMAIL PROTECTED]? John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log ?
>If I read you right, the only thing that is being done twice is logging, >correct? That is correct. When you have the "copyall" account, the tests are only run once, but they get logged twice (as if the E-mail was sent to two separate users). >How about if the copyall was set to [EMAIL PROTECTED], and that is an alias >for [EMAIL PROTECTED]? Actually, that should work with Declude, if IMail doesn't have a problem with it. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log ?
10/02/2002 08:52:02 Q1621052b00fee024 OSSRC:2 JUNK:15 . Total weight = 17 10/02/2002 08:52:02 Q1621052b00fee024 Msg failed OSSRC (http://groups.google.com/groups?q=etracks&hl=en&lr=&ie=UTF-8&scoring=d) . 10/02/2002 08:52:02 Q1621052b00fee024 Msg failed WEIGHTRANGE15-19 (Total weight between 15 and 19.). 10/02/2002 08:52:02 Q1621052b00fee024 Msg failed JUNK ( ). 10/02/2002 08:52:02 Q1621052b00fee024 Subject: Viagra - Phentermine - Xenical - Propecia and MORE! 10/02/2002 08:52:02 Q1621052b00fee024 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 10/02/2002 08:52:02 Q1621052b00fee024 Msg failed OSSRC (http://groups.google.com/groups?q=etracks&hl=en&lr=&ie=UTF-8&scoring=d) . 10/02/2002 08:52:02 Q1621052b00fee024 Msg failed WEIGHTRANGE15-19 (Total weight between 15 and 19.). 10/02/2002 08:52:02 Q1621052b00fee024 Msg failed JUNK ( ). 10/02/2002 08:52:02 Q1621052b00fee024 Subject: Viagra - Phentermine - Xenical - Propecia and MORE! 10/02/2002 08:52:02 Q1621052b00fee024 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] Well, having noc as an alias for ruleprocess did not work. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log ?
>10/02/2002 08:52:02 Q1621052b00fee024 From: >[EMAIL PROTECTED] To: [EMAIL PROTECTED] >[EMAIL PROTECTED] > >Well, having noc as an alias for ruleprocess did not work. The logs actually show that it did work -- Declude will see the [EMAIL PROTECTED] address, and if you have a "WHITELIST TO [EMAIL PROTECTED]" line in the global.cfg file (with v1.54 or later), the E-mail will automatically be whitelisted. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log ?
Hold on, I forgot the per-user settings. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log ?
OK, per use settings for user [EMAIL PROTECTED]: [EMAIL PROTECTED] is an alias for [EMAIL PROTECTED] Set up a directory called reliance.net under Imail\Declude That directory has one file, noc.junkmail File is blank. Log still shows two sets of loggings per message: 10/02/2002 13:05:44 Q518800ff0154e509 OSSOFT:2 NOABUSE:5 BADHEADERS:5 . Total weight = 12 10/02/2002 13:05:44 Q518800ff0154e509 Msg failed OSSOFT ([1] Edirect, see http://spews.org/ask.cgi?S483). 10/02/2002 13:05:44 Q518800ff0154e509 Msg failed NOABUSE (Not supporting abuse@domain). 10/02/2002 13:05:44 Q518800ff0154e509 Msg failed BADHEADERS (This E-mail was sent from a broken mail client [8000800e].). 10/02/2002 13:05:44 Q518800ff0154e509 Subject: Get a FREE Bottle of Wine & Tasting Kit 10/02/2002 13:05:44 Q518800ff0154e509 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 10/02/2002 13:05:44 Q518800ff0154e509 Msg failed OSSOFT ([1] Edirect, see http://spews.org/ask.cgi?S483). 10/02/2002 13:05:44 Q518800ff0154e509 Msg failed NOABUSE (Not supporting abuse@domain). 10/02/2002 13:05:44 Q518800ff0154e509 Msg failed BADHEADERS (This E-mail was sent from a broken mail client [8000800e].). 10/02/2002 13:05:44 Q518800ff0154e509 Subject: Get a FREE Bottle of Wine & Tasting Kit 10/02/2002 13:05:44 Q518800ff0154e509 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] [EMAIL PROTECTED] John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log ?
>OK, per use settings for user [EMAIL PROTECTED]: Sorry, I made a mistake -- it's the only the "WHITELIST TO" that allows the postmaster/abuse/noc addresses to be used in the Standard version. This will end up whitelisting the E-mail, so it would end up passing all the spam tests, so it doesn't look like this would work in your case. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log ?
OK, no problem. Thanks for the thought. It was worth a shot. All it is doing is adding extra line to the log. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log analysis...
Hi, I personally use DLAnalyzer for both Virus and Spam reporting. It's been enhanced several times in the past year. I also use it to automatically email daily spam/virus reports (summaries and lists of blocked messages) to certain clients. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Tuesday, January 18, 2005 10:50 AM To: Declude. JunkMail Subject: [Declude.JunkMail] Declude log analysis... Can anyone recommend a good log analysis program to work with Declude? I am most interested in tests failed and possibly IP addresses of failed mail. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log analysis...
I too use DL Analyzer and it works very well for me. Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > Sent: Tuesday, January 18, 2005 11:08 AM > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] Declude log analysis... > > Hi, > > I personally use DLAnalyzer for both Virus and Spam reporting. It's been > enhanced several times in the past year. I also use it to automatically > email daily spam/virus reports (summaries and lists of blocked messages) > to > certain clients. > > Best Regards > Andy Schmidt > > Phone: +1 201 934-3414 x20 (Business) > Fax:+1 201 934-9206 > > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick > Sent: Tuesday, January 18, 2005 10:50 AM > To: Declude. JunkMail > Subject: [Declude.JunkMail] Declude log analysis... > > > Can anyone recommend a good log analysis program to work with Declude? I > am > most interested in tests failed and possibly IP addresses of failed mail. > > > > Chuck Schick > Warp 8, Inc. > (303)-421-5140 > www.warp8.com > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude log files
This entry appears to be processing file Q7e4a069f00606ad1. However, it looks like the file was process twice, and that it passed on the first run. I'm especially curious about why the first time out, WEIGHT20's action is IGNORE, but on the second it's action is (correctly) set to DELETE. Might I have something mis-configured? That is because there were two recipients, whose settings were different. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude log files
R. Scott Perry wrote: This entry appears to be processing file Q7e4a069f00606ad1. However, it looks like the file was process twice, and that it passed on the first run. I'm especially curious about why the first time out, WEIGHT20's action is IGNORE, but on the second it's action is (correctly) set to DELETE. Might I have something mis-configured? That is because there were two recipients, whose settings were different. Now I know I must have something set up wrong. We're using Declude JunkMail lite, and to my knowledge there is only one set of configuration files (global.cfg and $default$.junkmail). The message is question (as far as I can tell) was addressed to only one recipient, though I was doing some debugging using iMail's "copy-to" feature to send copied of e-mails to a filecopy type address. -- Bud Durland, CNE [EMAIL PROTECTED] fax: 518-561-0017 For sale: Parachute. Like new, used once. Small stain. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude log files
Now I know I must have something set up wrong. We're using Declude JunkMail lite, and to my knowledge there is only one set of configuration files (global.cfg and $default$.junkmail). The message is question (as far as I can tell) was addressed to only one recipient, though I was doing some debugging using iMail's "copy-to" feature to send copied of e-mails to a filecopy type address. When the "Copyall" account is enabled, it adds an extra recipient to the E-mail. So the actions for the copyall account and the actual recipient will be used. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude log test analyzer
I recently downloaded the declude log test analyzer and was wondering how you take it out of demo mode. I checked the online documentation and it says that you can't register it until it is out of beta version. Has anybody been able to use of its functions, such as sending reports while it is still in beta mode? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude log file - HELP!!!
Is this what my Declude log file should look like I have probably almost 20-30 instances of the declude.exe process running and the only thing I can think of that I have changed is the loggin level from MED to LOW See snip from log file below: 11/21/2002 19:32:17 Q889d000300da3fbe Checking redvsuite@ for ENDSWITH .AE 11/21/2002 19:32:17 CFG: Whitelisting IP 207.112.138.250. 11/21/2002 19:32:17 Q88ae000301b48226 Checking virtual subhost wfmr.com. 11/21/2002 19:32:17 Q8892000101f213bd Checking offers@spo for ENDSWITH .KY 11/21/2002 19:32:17 Q88c9001302beed25 Checking virtual subhost cunat.com. 11/21/2002 19:32:17 Defining test 5 OSRELAY [ip4r] with weight 5 (antiweight 0) 11/21/2002 19:32:17 Q88da001901b82ced Checking virtual subhost design-partners.com. 11/21/2002 19:32:17 Q88be000502cac2aa Checking virtual subhost vogeltool.com. 11/21/2002 19:32:17 Q88c4001600f4d910 Checking virtual subhost konicek.com. 11/21/2002 19:32:17 Q88c7001101b8e2a5 Checking virtual subhost mtvac.com. 11/21/2002 19:32:17 Q88e0002202be4632 Checking virtual subhost woodlandfoods.com. 11/21/2002 19:32:17 Q88e6002200d45c1b Start 11/21/2002 19:32:17 Q88b2000900ec932e Checking virtual subhost eagleluggage.com. 11/21/2002 19:32:17 Q88af000102ca8533 Checking virtual subhost wjmr.com. 11/21/2002 19:32:17 Q88d102d205fc Checking virtual subhost amerigraphicsonline.net. 11/21/2002 19:32:17 Q88c1000302c2cbb2 Checking virtual subhost sussexlions.org. 11/21/2002 19:32:17 Q88c3001100ecd4ab Checking virtual subhost eng.nciaccess.com. 11/21/2002 19:32:17 CFG: Setting XOUTHEADER to X-Note: This E-mail was scanned by CyberLynk JunkMail (www.cyberlynk.net) for spam. X-Weight-Of-Failed-Tests: Total weight: %WEIGHT% X-Spam-Tests-Failed: %TESTSFAILED%. 11/21/2002 19:32:17 Q886f0001016c8dc4 Checking virtual subhost secondchanceprogram.org. 11/21/2002 19:32:17 Q88bd000401b4be74 Checking virtual subhost winnmug.com. 11/21/2002 19:32:17 Q88cb001200d4f514 Checking virtual subhost whvc.org. 11/21/2002 19:32:17 Q88d7000602ca22cb Checking virtual subhost mail.benzoil.com. 11/21/2002 19:32:17 Q88b4000f00d499d5 Checking virtual subhost advancemechanical.com. 11/21/2002 19:32:17 Q88ac000b00f47ca8 Checking virtual subhost valuecreators.com. 11/21/2002 19:32:17 Q88d4000501b417de Checking virtual subhost boxheaddesign.com. 11/21/2002 19:32:17 Q8893000200fa1870 Checking offerz@dpo for ENDSWITH .IQ 11/21/2002 19:32:17 Q8896000300dc26c8 Checking L255825897 for ENDSWITH .CK 11/21/2002 19:32:17 Q88a3000b00da599f Looking up MX/A record for abanet.it at 206.54.254.3. 11/21/2002 19:32:17 CFG: Whitelisting FROM verisign.com. 11/21/2002 19:32:17 Q8882000401e0d711 Testing whitelist #59 1 kopnet.com isting FROM galileo.com. 11/21/2002 19:32:17 Defining test 24 KFILE [fromfile] with weight 20 (antiweight 0) 11/21/2002 19:32:17 Q8898000200d82b1d Checking news@venda for ENDSWITH .BJ 11/21/2002 19:32:17 Q88a5000b00f45ec0 Testing IP 132.248.33.226 11/21/2002 19:32:17 Q8894000200ec1e6b Checking Hotwire.6f for ENDSWITH .FJ 11/21/2002 19:32:17 Q8893000200f81ae1 Checking Plains_Com for ENDSWITH .IN 11/21/2002 19:32:17 Q8895000200ea2149 Checking alice34@ya for ENDSWITH .EE 11/21/2002 19:32:17 Q8884000801eadced Testing whitelist #69 1 ademco.es . 11/21/2002 19:32:17 CFG: Whitelisting FROM Computerworld.com. 11/21/2002 19:32:17 CFG: Whitelisting FROM eaa.org. Does this make sense Thanks, Adam Adam Hobach CyberLynk Sales/Support [EMAIL PROTECTED] or [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude Log is WRONG
Scott, please see the following log entry (version 1.25) 08/23/2001 23:43:08 Qcd1b212 Msg failed RSS (Blackholed by ORDB -- see http://ordb.org/lookup/?host=202.203.240.34). 08/23/2001 23:43:08 Qcd1b212 Msg failed OSRELAY (Blackholed by ORDB -- see http://ordb.org/lookup/?host=202.203.240.34). 08/23/2001 23:43:08 Qcd1b212 Msg failed ORBL (Blackholed by ORDB -- see http://ordb.org/lookup/?host=202.203.240.34). 08/23/2001 23:43:08 Qcd1b212 Msg failed ORDB (Blackholed by ORDB -- see http://ordb.org/lookup/?host=202.203.240.34). 08/23/2001 23:43:08 Qcd1b212 Msg failed SPAMHEADERS (poor headers [6303]). 08/23/2001 23:43:08 Qcd1b212 Msg failed SPAMROUTING (spam routing [6303]). 08/23/2001 23:43:08 Qcd1b212 Subject: So They Say #12DE 08/23/2001 23:43:08 Qcd1b212 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] As you can see, it uses the SAME comment "Blackholed by ORDB" for each line - even for the RSS, OSRELAY, ORBL and ORDB tests. I hope my BOUNCE messages are not picking up the wrong template as well and are sending out FOUR identical messages each pointing to ORDB? Andy --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Declude log test analyzer
I need a little help: Does JM scan your own domain outgoing mail? I would like to stop the jdbgmgr.exe hoax emails. i thought this would work but it doesn't. I set this up: Global.cfg: VirusHoax filter c:\Imail\Declude\virhoax.txtx 0 0 $default$.junkmail: VirusHoax BOUNCE virhoax.txt: BODY 0 In the files/folders option, write the name jdbgmgr.exe VirusHoaxbounce.eml: From: postmaster@%LOCALHOST% To: %MAILFROM% Subject: Virus Hoax Delivery Failed: %ALLRECIPS% This is an email that contains a Virus Hoax. It was not delivered. Please see: http://www.symantec.com/avcenter/venc/data/jdbgmgr.exe.file.hoax.html Sunbeach Postmaster. Original message follows: %FULLMSG% --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
Does JM scan your own domain outgoing mail? Declude JunkMail Pro will scan outgoing mail (using the outgoing actions from the global.cfg file). I would like to stop the jdbgmgr.exe hoax emails. i thought this would work but it doesn't. I set this up: Global.cfg: VirusHoax filter c:\Imail\Declude\virhoax.txtx 0 0 $default$.junkmail: VirusHoax BOUNCE You'll also need "VirusHoax BOUNCE" in the global.cfg file, if you want to bounce the outgoing hoaxes as well as the incoming ones. Once you add that line, you should be all set. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
It looks like the original question I posted got changed when it was relied to with a totally different question. Does anybody know how to take the Declude log test analyzer out of demo mode without registering it? Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com]On Behalf Of R. Scott Perry Sent: Friday, October 25, 2002 12:52 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude log test analyzer >Does JM scan your own domain outgoing mail? Declude JunkMail Pro will scan outgoing mail (using the outgoing actions from the global.cfg file). >I would like to stop the jdbgmgr.exe hoax emails. i thought this would >work but it doesn't. > >I set this up: > >Global.cfg: >VirusHoax filter c:\Imail\Declude\virhoax.txtx 0 > 0 > >$default$.junkmail: >VirusHoax BOUNCE You'll also need "VirusHoax BOUNCE" in the global.cfg file, if you want to bounce the outgoing hoaxes as well as the incoming ones. Once you add that line, you should be all set. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
It looks like the original question I posted got changed when it was relied to with a totally different question. Does anybody know how to take the Declude log test analyzer out of demo mode without registering it? Thanks There are a number of third party tools at http://www.declude.com/tools for analyzing log files. Which one are you referring to? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
> I recently downloaded the declude log test analyzer and was wondering how > you take it out of demo mode. I checked the online documentation > and it says that you can't register it until it is out of beta version. > Has anybody been able to use of its functions, such as sending reports > while it is still in beta mode? All you had to do was contact Image`fx. Besides sending the report what other feature did not work in Demo mode? Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
Actually I haven't been able to get the t_rep: LOG option to work either. This option would write a report to the file delmmdd.log in the same location as the declude log files. I guess similar to creating a batch file, except it would use the date of the log file as its name. Was this feature also never finished? I was hoping to schedule the utility to run automatically using the t_clk: 2359 option and then have it email the log file to me once a day. ~~~ Karl Hentschel Network Administrator A+, Network+, MCP ~~~ Peninsula Community Federal Credit Union http://www.pcfcu.org (800) 426-1601 Ext. 3070 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com]On Behalf Of Tom Sent: Friday, October 25, 2002 2:42 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude log test analyzer > I recently downloaded the declude log test analyzer and was wondering how > you take it out of demo mode. I checked the online documentation > and it says that you can't register it until it is out of beta version. > Has anybody been able to use of its functions, such as sending reports > while it is still in beta mode? All you had to do was contact Image`fx. Besides sending the report what other feature did not work in Demo mode? Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
> Actually I haven't been able to get the t_rep: LOG option to work either. > This option would write a report to the file delmmdd.log in the same > location as the declude log files. I guess similar to creating a > batch file, except it would use the date of the log file as its name. > Was this feature also never finished? I was hoping to schedule the > utility to run automatically using the t_clk: 2359 option and then > have it email the log file to me once a day. The log feature will be available in another release, however, the send report feature will be removed. If your new to Declude and have not read our previous mailings to this list then you should read the following mail-archive: http://www.mail-archive.com/declude.junkmail@;declude.com/msg04590.html Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
Thanks for all your help and I guess I'll wait until they are reinvented but in the meantime I'll still use Delog as it is a useful utility. ~~~ Karl Hentschel Network Administrator A+, Network+, MCP ~~~ Peninsula Community Federal Credit Union http://www.pcfcu.org (800) 426-1601 Ext. 3070 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com]On Behalf Of Tom Sent: Friday, October 25, 2002 3:14 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude log test analyzer > Actually I haven't been able to get the t_rep: LOG option to work either. > This option would write a report to the file delmmdd.log in the same > location as the declude log files. I guess similar to creating a > batch file, except it would use the date of the log file as its name. > Was this feature also never finished? I was hoping to schedule the > utility to run automatically using the t_clk: 2359 option and then > have it email the log file to me once a day. The log feature will be available in another release, however, the send report feature will be removed. If your new to Declude and have not read our previous mailings to this list then you should read the following mail-archive: http://www.mail-archive.com/declude.junkmail@;declude.com/msg04590.html Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
> Thanks for all your help and I guess I'll wait until they are > reinvented but in the meantime I'll still use Delog as it is > a useful utility. Sorry for the inconvenience, however, like we said before Delog was written in a language that is no longer supported and has too many problems for us to work around. So this left us with no choice but to Discontinue and re-invent these apps in a new language. PS: This message only pertains to Delog and ReadID, other apps posted previously in this forum from Image`fx were written in either C++ or VB. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
I just remembered! There is another Declude log analyzer someone wrote for NT. I have the zip files if anyone needs them or you can look at the mail archives for a download link. Usage version 1.2 By Jeff Pitoniak [ Description: ] The USAGE.CMD NT command script parses the Imail server and Declude log files and generates a daily summary report that is mailed to the email addresses you choose. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude log test analyzer
I am interested in this program if it will work on Win2000 iMail 7.13 and Declude 1.61 Beta John - Original Message - From: "Tom" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, October 25, 2002 4:19 PM Subject: RE: [Declude.JunkMail] Declude log test analyzer > > I just remembered! There is another Declude log analyzer someone > wrote for NT. I have the zip files if anyone needs them or > you can look at the mail archives for a download link. > > > Usage version 1.2 > By Jeff Pitoniak > > [ Description: ] > The USAGE.CMD NT command script parses the Imail server and > Declude log files and generates a daily summary report that > is mailed to the email addresses you choose. > > > Regards, > Tom > Image`fx > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > > > --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
> I am interested in this program if it will work on Win2000 iMail 7.13 and > Declude 1.61 Beta I don't know, it's not mine and I have never tested it. However, I will e-mail it to you. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
I am interested in that program. Thanks. ~~~ Karl Hentschel Network Administrator A+, Network+, MCP ~~~ Peninsula Community Federal Credit Union http://www.pcfcu.org (800) 426-1601 Ext. 3070 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com]On Behalf Of Tom Sent: Friday, October 25, 2002 4:20 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude log test analyzer I just remembered! There is another Declude log analyzer someone wrote for NT. I have the zip files if anyone needs them or you can look at the mail archives for a download link. Usage version 1.2 By Jeff Pitoniak [ Description: ] The USAGE.CMD NT command script parses the Imail server and Declude log files and generates a daily summary report that is mailed to the email addresses you choose. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
Here is the latest version of that tool. It includes fixes for the first of the month, including leap-year issues. Jerod M. Bennett Director of Media Production Pixelpushers, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of John Higday Sent: Friday, October 25, 2002 4:38 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude log test analyzer I am interested in this program if it will work on Win2000 iMail 7.13 and Declude 1.61 Beta John - Original Message - From: "Tom" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, October 25, 2002 4:19 PM Subject: RE: [Declude.JunkMail] Declude log test analyzer > > I just remembered! There is another Declude log analyzer someone wrote > for NT. I have the zip files if anyone needs them or you can look at > the mail archives for a download link. > > > Usage version 1.2 > By Jeff Pitoniak > > [ Description: ] > The USAGE.CMD NT command script parses the Imail server and Declude > log files and generates a daily summary report that is mailed to the > email addresses you choose. > > > Regards, > Tom > Image`fx > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > > > --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. Usage1-32.zip Description: Binary data
RE: [Declude.JunkMail] Declude log test analyzer
I can also recommend Sawmillyou can configure fairy sophisticated filters to slice and dice the logs (and logs of many different formats). The support folks there were willing to help me get a filter set up and it looks like a worthy product to support. http://www.sawmill.net -- Original Message -- From: "Jerod M. Bennett" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Mon, 28 Oct 2002 11:07:13 -0800 >Here is the latest version of that tool. > >It includes fixes for the first of the month, including leap-year >issues. > >Jerod M. Bennett >Director of Media Production >Pixelpushers, Inc. > > >-Original Message- >From: [EMAIL PROTECTED] >[mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of John Higday >Sent: Friday, October 25, 2002 4:38 PM >To: [EMAIL PROTECTED] >Subject: Re: [Declude.JunkMail] Declude log test analyzer > > >I am interested in this program if it will work on Win2000 iMail 7.13 >and Declude 1.61 Beta > >John > >- Original Message - >From: "Tom" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Friday, October 25, 2002 4:19 PM >Subject: RE: [Declude.JunkMail] Declude log test analyzer > > >> >> I just remembered! There is another Declude log analyzer someone wrote > >> for NT. I have the zip files if anyone needs them or you can look at >> the mail archives for a download link. >> >> >> Usage version 1.2 >> By Jeff Pitoniak >> >> [ Description: ] >> The USAGE.CMD NT command script parses the Imail server and Declude >> log files and generates a daily summary report that is mailed to the >> email addresses you choose. >> >> >> Regards, >> Tom >> Image`fx >> --- >> [This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >> "unsubscribe Declude.JunkMail". The archives can be found at >> http://www.mail-archive.com. >> --- >> [This E-mail scanned for viruses by Declude Virus] >> >> >> > > >--- >[This E-mail scanned for viruses by Declude Virus] > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >"unsubscribe Declude.JunkMail". The archives can be found at >http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
I use Sawmill fro my customers web stats, and for custom stats for internal use, it is an excellent product. Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com]On Behalf Of Dan Cummings Sent: Monday, October 28, 2002 4:16 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude log test analyzer I can also recommend Sawmillyou can configure fairy sophisticated filters to slice and dice the logs (and logs of many different formats). The support folks there were willing to help me get a filter set up and it looks like a worthy product to support. http://www.sawmill.net -- Original Message -- From: "Jerod M. Bennett" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Mon, 28 Oct 2002 11:07:13 -0800 >Here is the latest version of that tool. > >It includes fixes for the first of the month, including leap-year >issues. > >Jerod M. Bennett >Director of Media Production >Pixelpushers, Inc. > > >-Original Message- >From: [EMAIL PROTECTED] >[mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of John Higday >Sent: Friday, October 25, 2002 4:38 PM >To: [EMAIL PROTECTED] >Subject: Re: [Declude.JunkMail] Declude log test analyzer > > >I am interested in this program if it will work on Win2000 iMail 7.13 >and Declude 1.61 Beta > >John > >- Original Message - >From: "Tom" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Friday, October 25, 2002 4:19 PM >Subject: RE: [Declude.JunkMail] Declude log test analyzer > > >> >> I just remembered! There is another Declude log analyzer someone wrote > >> for NT. I have the zip files if anyone needs them or you can look at >> the mail archives for a download link. >> >> >> Usage version 1.2 >> By Jeff Pitoniak >> >> [ Description: ] >> The USAGE.CMD NT command script parses the Imail server and Declude >> log files and generates a daily summary report that is mailed to the >> email addresses you choose. >> >> >> Regards, >> Tom >> Image`fx >> --- >> [This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >> "unsubscribe Declude.JunkMail". The archives can be found at >> http://www.mail-archive.com. >> --- >> [This E-mail scanned for viruses by Declude Virus] >> >> >> > > >--- >[This E-mail scanned for viruses by Declude Virus] > >--- >[This E-mail was scanned for viruses by Declude Virus >(http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >"unsubscribe Declude.JunkMail". The archives can be found at >http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
I recieve an error msg on this line ::Overcome octal issue... IF %dd% EQU 08 (SET yd=07)&& GOTO PDSET The error msg is: 08 was unexpected at this time. What can I do? Markus > -Original Message- > From: [EMAIL PROTECTED] > [mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of > Jerod M. Bennett > Sent: Monday, October 28, 2002 8:07 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Declude log test analyzer > > > Here is the latest version of that tool. > > It includes fixes for the first of the month, including > leap-year issues. > > Jerod M. Bennett > Director of Media Production > Pixelpushers, Inc. > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of John Higday > Sent: Friday, October 25, 2002 4:38 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Declude log test analyzer > > > I am interested in this program if it will work on Win2000 > iMail 7.13 and Declude 1.61 Beta > > John > > - Original Message - > From: "Tom" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, October 25, 2002 4:19 PM > Subject: RE: [Declude.JunkMail] Declude log test analyzer > > > > > > I just remembered! There is another Declude log analyzer > someone wrote > > > for NT. I have the zip files if anyone needs them or you > can look at > > the mail archives for a download link. > > > > > > Usage version 1.2 > > By Jeff Pitoniak > > > > [ Description: ] > > The USAGE.CMD NT command script parses the Imail server and Declude > > log files and generates a daily summary report that is > mailed to the > > email addresses you choose. > > > > > > Regards, > > Tom > > Image`fx > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > "unsubscribe Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > > > > > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
I'd stay with their current, and you'll either have to build your own filter for Declude logs or ask them to build it for you, they will for registered users without a charge, and if it is a common log format add it to their permanent list. The different levels of info used in the various Declude log levels might throw it a bit, I'm not sure. Their latest beta version now includes support for Declude log files (see http://www.sawmill.net/formats/Declude.html ). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude log test analyzer
I was playing with their latest Beta this morning and it didn't seem to recognize the Declude logs...but maybe it just did not recognize LOGLEVEL MID. I'll play around with it some more. Bill -Original Message- From: "R. Scott Perry" Sent: Tue, 29 Oct 2002 10:14:24 -0500 Subject: RE: [Declude.JunkMail] Declude log test analyzer >I'd stay with their current, and you'll either have to build your own filter >for Declude logs or ask them to build it for you, they will for registered >users without a charge, and if it is a common log format add it to their >permanent list. The different levels of info used in the various Declude log >levels might throw it a bit, I'm not sure. Their latest beta version now includes support for Declude log files (see http://www.sawmill.net/formats/Declude.html ). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer
I have sent them a sample Declude log (with loglevel MID) and the output when I try to run it. We'll see what they say. Dan -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com] On Behalf Of Bill B Sent: Tuesday, October 29, 2002 10:49 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude log test analyzer I was playing with their latest Beta this morning and it didn't seem to recognize the Declude logs...but maybe it just did not recognize LOGLEVEL MID. I'll play around with it some more. Bill -Original Message- From: "R. Scott Perry" Sent: Tue, 29 Oct 2002 10:14:24 -0500 Subject: RE: [Declude.JunkMail] Declude log test analyzer >I'd stay with their current, and you'll either have to build your own >filter for Declude logs or ask them to build it for you, they will for >registered users without a charge, and if it is a common log format add >it to their permanent list. The different levels of info used in the >various Declude log levels might throw it a bit, I'm not sure. Their latest beta version now includes support for Declude log files (see http://www.sawmill.net/formats/Declude.html ). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude log file - HELP!!!
Is this what my Declude log file should look like I have probably almost
20-30 instances of the declude.exe process running and the only thing I can
think of that I have changed is the loggin level from MED to LOW
The problem is that you entered an incorrect value ("MED") -- it should be
"MID" (or "MEDIUM" is OK too). An incorrect value will default to the
debug mode (in the next release, it will default to HIGH, as the debug mode
should not normally be used unless there is a specific reason to).
-Scott
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log file - HELP!!!
yep... your good
Thanks again,
Adam
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Thursday, November 21, 2002 7:45 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude log file - HELP!!!
>Is this what my Declude log file should look like I have probably
almost
>20-30 instances of the declude.exe process running and the only thing I can
>think of that I have changed is the loggin level from MED to LOW
The problem is that you entered an incorrect value ("MED") -- it should be
"MID" (or "MEDIUM" is OK too). An incorrect value will default to the
debug mode (in the next release, it will default to HIGH, as the debug mode
should not normally be used unless there is a specific reason to).
-Scott
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude Log is WRONG
>As you can see, it uses the SAME comment "Blackholed by ORDB" for each >line - even for the RSS, OSRELAY, ORBL and ORDB tests. This is, as you suggested, wrong. When the switch occurred to run those tests in parallel, rather than sequentially, the TXT lookups (where Declude gets the "warning" message) could be done on the wrong domain. In this instance, all the TXT lookups were done on the domain for the ORDB test. A temporary release is available at http://www.declude.com/release/125a/declude.exe that takes care of this problem. >I hope my BOUNCE messages are not picking up the wrong template as well >and are sending out >FOUR identical messages each pointing to ORDB? No. For tests that fail multiple ip4r-type tests, it's possible that the %WARNING% variable could produce the wrong warning. But, the tests themselves are not getting mixed up (just the warning message). -Scott --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Declude log test analyzer (DELOG)
The one I was referring to was DELOG http://www.imagefxonline.net/apps/delog/, which analyzes the declude junkmail log files. I downloaded it but can't use it's full functionality in beta mode, but can't register it because it is in beta mode. It was mentioned in here so I was wondering if anybody had a work around. ~~~ Karl Hentschel Network Administrator A+, Network+, MCP ~~~ Peninsula Community Federal Credit Union http://www.pcfcu.org (800) 426-1601 Ext. 3070 -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com]On Behalf Of R. Scott Perry Sent: Friday, October 25, 2002 1:46 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Declude log test analyzer >It looks like the original question I posted got changed when it was relied >to with a totally different question. Does anybody know how to take the >Declude log test analyzer out of demo mode without registering it? Thanks There are a number of third party tools at http://www.declude.com/tools for analyzing log files. Which one are you referring to? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude log test analyzer (DELOG)
> The one I was referring to was DELOG > http://www.imagefxonline.net/apps/delog/, which analyzes the declude > junkmail log files. I downloaded it but can't use it's full > functionality in beta mode, but can't register it because it is in > beta mode. It was mentioned in here so I was wondering if anybody > had a work around. This feature will be removed anyway since it was never finished. You could just create a batch file to copy the report into the spool directory as a log file. This will allow you to see the report through the Imail Web Admin Spool/File selection or you can copy the report into the spool directory as a smd file and add the headers to it along with the accommodating q file. D.smd --- Some headers append file here --- Q.smd --- QC:\IMAIL\spool\D.smd Hmail.domain.com WC:\IMAIL\domainDirectory E0, S<[EMAIL PROTECTED]> NRCPT TO: <[EMAIL PROTECTED]> R<[EMAIL PROTECTED]> --- Or you could use Imail's e-mail utility. Regards, Tom Image`fx --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Declude log test analyzer
Hi Dan, DC> I can also recommend Sawmillyou can configure fairy DC> sophisticated filters to slice and dice the logs (and logs of many DC> different formats). The support folks there were willing to help DC> me get a filter set up and it looks like a worthy product to DC> support. http://www.sawmill.net I'd second that -- have used it to read some Imail logs when testing it and he seems to do a really nice job on getting any changes in there that you'd like and/or that make sense. And, it's very affordable ... -jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: Re[2]: [Declude.JunkMail] Declude log test analyzer
Which version of sawmill are you using? I just tried their current beta (6.4b5) and it crashed hard while processing Imail logs and didn't even recognized the Declude log format. Bill -Original Message- From: sbsi lists Sent: Mon, 28 Oct 2002 16:30:30 -0600 Subject: Re[2]: [Declude.JunkMail] Declude log test analyzer Hi Dan, DC> I can also recommend Sawmillyou can configure fairy DC> sophisticated filters to slice and dice the logs (and logs of many DC> different formats). The support folks there were willing to help DC> me get a filter set up and it looks like a worthy product to DC> support. http://www.sawmill.net I'd second that -- have used it to read some Imail logs when testing it and he seems to do a really nice job on getting any changes in there that you'd like and/or that make sense. And, it's very affordable ... -jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: Re[2]: [Declude.JunkMail] Declude log test analyzer
I'd stay with their current, and you'll either have to build your own filter for Declude logs or ask them to build it for you, they will for registered users without a charge, and if it is a common log format add it to their permanent list. The different levels of info used in the various Declude log levels might throw it a bit, I'm not sure. Chuck Frolick ArgoNet, Inc. -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-owner@;declude.com]On Behalf Of Bill B Sent: Tuesday, October 29, 2002 8:53 AM To: [EMAIL PROTECTED] Subject: Re: Re[2]: [Declude.JunkMail] Declude log test analyzer Which version of sawmill are you using? I just tried their current beta (6.4b5) and it crashed hard while processing Imail logs and didn't even recognized the Declude log format. Bill -Original Message- From: sbsi lists Sent: Mon, 28 Oct 2002 16:30:30 -0600 Subject: Re[2]: [Declude.JunkMail] Declude log test analyzer Hi Dan, DC> I can also recommend Sawmillyou can configure fairy DC> sophisticated filters to slice and dice the logs (and logs of many DC> different formats). The support folks there were willing to help DC> me get a filter set up and it looks like a worthy product to DC> support. http://www.sawmill.net I'd second that -- have used it to read some Imail logs when testing it and he seems to do a really nice job on getting any changes in there that you'd like and/or that make sense. And, it's very affordable ... -jason --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
