RE: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-31 Thread Jim Rooth

I have a question then.  I have a small setup (only two IP's with maybe
1000 users).  If I set up relay for addresses, what happens if someone
tries to send an email from their home?  We have web access available as
well.

I understand it works great as long as all mail is sent through the SMTP
with the address listed in the 'relay for addresses' but will it block
email if they are using another computer at a different location or does
it pick up only from the SMTP server?

Family, God, and Corps...all else are mere details

Jim Rooth
http://www.usmcfew.com/3516 

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Bill Landry
Sent: Saturday, March 30, 2002 3:17 PM
To: '[EMAIL PROTECTED]'
Subject: RE: [Declude.JunkMail] HELP: I just got listed on ORDB

What he said is that relay for addresses and no relay are the only
two
options that protect your mail server from being an open relay--the
other
options do not.  You can use the no relay option if you are using SMTP
Auth, otherwise, relay for addresses is the way to go.

Bill

-Original Message-
From: Bennie [mailto:[EMAIL PROTECTED]]
Sent: Saturday, March 30, 2002 10:20 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] HELP: I just got listed on ORDB


Scott,

Are you saying that relay for address is not a good idea.. We have
customer that has a static IP address with a different provider but we
provide their mail and webspace.
I have their Static IP listed in my allowed addresses

Bennie


- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 28, 2002 10:23 AM
Subject: Re: [Declude.JunkMail] HELP: I just got listed on ORDB



 I have my IMail set to Relay for local hosts only

 To make sure that you are not an open relay, you can either use
IMail's
 Relay for addresses (in which case you would enter a list of safe
IP
 addresses that your users may come from; anyone not coming from those
safe
 IPs would need to use SMTP AUTH), or No mail relay (which really
means
 that everyone must use SMTP AUTH).  Note that relay setting apply only
to
 outgoing E-mail, so no matter what your settings are, your users will
still
 be able to get mail.

 Any other relay options will allow spammers to send mail through your
 server.  In the case of Relay for local hosts, IMail will allow
spammers
 to send unlimited spam if they pretend to be using a return address on
one
 of your domains.

 Are you running Declude Hijack (which would limit the amount of mail
that
a
 spammer could send)?
  -Scott

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---

 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .
 ---
 [This E-mail scanned for viruses by Declude Virus]





---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.343 / Virus Database: 190 - Release Date: 3/22/2002
 

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.343 / Virus Database: 190 - Release Date: 3/22/2002
 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-31 Thread Don Brown

If the IP is not defined in Relay for Addresses they will not be
able to send via your SMTP, unless they authenticate.  However, if you are
using an external database, each mail host will need an IP assigned,
since authentication does not work with virtual mail hosts and an
external database in Imail version 6.xx (dunno about version 7.xx).


Sunday, March 31, 2002, 8:33:37 AM, Jim Rooth [EMAIL PROTECTED] wrote:
JR I have a question then.  I have a small setup (only two IP's with maybe
JR 1000 users).  If I set up relay for addresses, what happens if someone
JR tries to send an email from their home?  We have web access available as
JR well.

JR I understand it works great as long as all mail is sent through the SMTP
JR with the address listed in the 'relay for addresses' but will it block
JR email if they are using another computer at a different location or does
JR it pick up only from the SMTP server?

JR Family, God, and Corps...all else are mere details

JR Jim Rooth
JR http://www.usmcfew.com/3516 

JR -Original Message-
JR From: [EMAIL PROTECTED]
JR [mailto:[EMAIL PROTECTED]] On Behalf Of Bill Landry
JR Sent: Saturday, March 30, 2002 3:17 PM
JR To: '[EMAIL PROTECTED]'
JR Subject: RE: [Declude.JunkMail] HELP: I just got listed on ORDB

JR What he said is that relay for addresses and no relay are the only
JR two
JR options that protect your mail server from being an open relay--the
JR other
JR options do not.  You can use the no relay option if you are using SMTP
JR Auth, otherwise, relay for addresses is the way to go.

JR Bill

JR -Original Message-
JR From: Bennie [mailto:[EMAIL PROTECTED]]
JR Sent: Saturday, March 30, 2002 10:20 AM
JR To: [EMAIL PROTECTED]
JR Subject: Re: [Declude.JunkMail] HELP: I just got listed on ORDB


JR Scott,

JR Are you saying that relay for address is not a good idea.. We have
JR customer that has a static IP address with a different provider but we
JR provide their mail and webspace.
JR I have their Static IP listed in my allowed addresses

JR Bennie


JR - Original Message -
JR From: R. Scott Perry [EMAIL PROTECTED]
JR To: [EMAIL PROTECTED]
JR Sent: Thursday, March 28, 2002 10:23 AM
JR Subject: Re: [Declude.JunkMail] HELP: I just got listed on ORDB



 I have my IMail set to Relay for local hosts only

 To make sure that you are not an open relay, you can either use
JR IMail's
 Relay for addresses (in which case you would enter a list of safe
JR IP
 addresses that your users may come from; anyone not coming from those
JR safe
 IPs would need to use SMTP AUTH), or No mail relay (which really
JR means
 that everyone must use SMTP AUTH).  Note that relay setting apply only
JR to
 outgoing E-mail, so no matter what your settings are, your users will
JR still
 be able to get mail.

 Any other relay options will allow spammers to send mail through your
 server.  In the case of Relay for local hosts, IMail will allow
JR spammers
 to send unlimited spam if they pretend to be using a return address on
JR one
 of your domains.

 Are you running Declude Hijack (which would limit the amount of mail
JR that
JR a
 spammer could send)?
  -Scott

 ---
 [This E-mail was scanned for viruses by Declude Virus
JR (http://www.declude.com)]

 ---

 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .
 ---
 [This E-mail scanned for viruses by Declude Virus]





JR ---
JR [This E-mail scanned for viruses by Declude Virus]

JR ---
JR [This E-mail was scanned for viruses by Declude Virus
JR (http://www.declude.com)]

JR ---

JR This E-mail came from the Declude.JunkMail mailing list.  To
JR unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
JR type unsubscribe Declude.JunkMail.  You can E-mail
JR [EMAIL PROTECTED] for assistance.  You can visit our web
JR site at http://www.declude.com .
JR ---
JR [This E-mail was scanned for viruses by Declude Virus
JR (http://www.declude.com)]

JR ---

JR This E-mail came from the Declude.JunkMail mailing list.  To
JR unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
JR type unsubscribe Declude.JunkMail.  You can E-mail
JR [EMAIL PROTECTED] for assistance.  You can visit our web
JR site at http://www.declude.com .

JR ---
JR Incoming mail is certified Virus Free.
JR Checked by AVG anti-virus system (http://www.grisoft.com).
JR Version: 6.0.343 / Virus Database: 190 - Release Date: 3/22/2002
 

JR ---
JR Outgoing mail is certified Virus Free.
JR Checked by AVG anti-virus system (http://www.grisoft.com).
JR Version: 6.0.343 / Virus Database: 190 - Release Date: 3/22/2002
 

JR ---
JR [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

JR ---

JR This E-mail came from the Declude.JunkMail mailing list.  To
JR unsubscribe, just send an E-mail

Re: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-30 Thread Bennie

Scott,

Are you saying that relay for address is not a good idea.. We have
customer that has a static IP address with a different provider but we
provide their mail and webspace.
I have their Static IP listed in my allowed addresses

Bennie


- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 28, 2002 10:23 AM
Subject: Re: [Declude.JunkMail] HELP: I just got listed on ORDB



 I have my IMail set to Relay for local hosts only

 To make sure that you are not an open relay, you can either use IMail's
 Relay for addresses (in which case you would enter a list of safe IP
 addresses that your users may come from; anyone not coming from those safe
 IPs would need to use SMTP AUTH), or No mail relay (which really means
 that everyone must use SMTP AUTH).  Note that relay setting apply only to
 outgoing E-mail, so no matter what your settings are, your users will
still
 be able to get mail.

 Any other relay options will allow spammers to send mail through your
 server.  In the case of Relay for local hosts, IMail will allow spammers
 to send unlimited spam if they pretend to be using a return address on one
 of your domains.

 Are you running Declude Hijack (which would limit the amount of mail that
a
 spammer could send)?
  -Scott

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---

 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .
 ---
 [This E-mail scanned for viruses by Declude Virus]





---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-30 Thread Bill Landry

What he said is that relay for addresses and no relay are the only two
options that protect your mail server from being an open relay--the other
options do not.  You can use the no relay option if you are using SMTP
Auth, otherwise, relay for addresses is the way to go.

Bill

-Original Message-
From: Bennie [mailto:[EMAIL PROTECTED]]
Sent: Saturday, March 30, 2002 10:20 AM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] HELP: I just got listed on ORDB


Scott,

Are you saying that relay for address is not a good idea.. We have
customer that has a static IP address with a different provider but we
provide their mail and webspace.
I have their Static IP listed in my allowed addresses

Bennie


- Original Message -
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, March 28, 2002 10:23 AM
Subject: Re: [Declude.JunkMail] HELP: I just got listed on ORDB



 I have my IMail set to Relay for local hosts only

 To make sure that you are not an open relay, you can either use IMail's
 Relay for addresses (in which case you would enter a list of safe IP
 addresses that your users may come from; anyone not coming from those safe
 IPs would need to use SMTP AUTH), or No mail relay (which really means
 that everyone must use SMTP AUTH).  Note that relay setting apply only to
 outgoing E-mail, so no matter what your settings are, your users will
still
 be able to get mail.

 Any other relay options will allow spammers to send mail through your
 server.  In the case of Relay for local hosts, IMail will allow spammers
 to send unlimited spam if they pretend to be using a return address on one
 of your domains.

 Are you running Declude Hijack (which would limit the amount of mail that
a
 spammer could send)?
  -Scott

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---

 This E-mail came from the Declude.JunkMail mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.JunkMail.  You can E-mail
 [EMAIL PROTECTED] for assistance.  You can visit our web
 site at http://www.declude.com .
 ---
 [This E-mail scanned for viruses by Declude Virus]





---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread R. Scott Perry


I have my IMail set to Relay for local hosts only

To make sure that you are not an open relay, you can either use IMail's 
Relay for addresses (in which case you would enter a list of safe IP 
addresses that your users may come from; anyone not coming from those safe 
IPs would need to use SMTP AUTH), or No mail relay (which really means 
that everyone must use SMTP AUTH).  Note that relay setting apply only to 
outgoing E-mail, so no matter what your settings are, your users will still 
be able to get mail.

Any other relay options will allow spammers to send mail through your 
server.  In the case of Relay for local hosts, IMail will allow spammers 
to send unlimited spam if they pretend to be using a return address on one 
of your domains.

Are you running Declude Hijack (which would limit the amount of mail that a 
spammer could send)?
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread Chris Bone

thanks!

I have done this

Chris

 [EMAIL PROTECTED] 03/28/02 10:21AM 
Please see:

http://support.ipswitch.com/kb/IM-19980116-JB02.htm 

about relay options.  Particularly the paragraph that reads:

Note that only 'No Mail Relay' or 'Relay for Addresses' can prevent
unauthorized relaying by remote senders who spoof as local users.


You MUST set your options to 'No Mail Relay' or 'Relay for Addresses' to
close your open relay!

Todd

-Original Message-
From: [EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]]On Behalf Of Chris Bone
Sent: Thursday, March 28, 2002 9:11 AM
To: [EMAIL PROTECTED] 
Subject: [Declude.JunkMail] HELP: I just got listed on ORDB



I just got listed on ORDB !

please see

http://ordb.org/lookup/?host=216.54.53.68 

How can this have happened?

I have my IMail set to Relay for local hosts only and I have passed open
relay tests before!

How can I resolve this?

thanks!

Chris Bone
Web Engineer
Chartway Federal Credit Union

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)] 

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail scanned for viruses by Declude Virus]


---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread Chris Bone

thanks Scott

Yes, I have the Hijack in place and it is saying 2 got relayed ;)

I have now gone to the No relay option

Chris

 [EMAIL PROTECTED] 03/28/02 10:23AM 

I have my IMail set to Relay for local hosts only

To make sure that you are not an open relay, you can either use IMail's 
Relay for addresses (in which case you would enter a list of safe IP 
addresses that your users may come from; anyone not coming from those safe 
IPs would need to use SMTP AUTH), or No mail relay (which really means 
that everyone must use SMTP AUTH).  Note that relay setting apply only to 
outgoing E-mail, so no matter what your settings are, your users will still 
be able to get mail.

Any other relay options will allow spammers to send mail through your 
server.  In the case of Relay for local hosts, IMail will allow spammers 
to send unlimited spam if they pretend to be using a return address on one 
of your domains.

Are you running Declude Hijack (which would limit the amount of mail that a 
spammer could send)?
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] 

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread Scott MacLean

I know this is slightly off-topic for here, but has anyone
had problems with entering subnet masks in the Relay for
addresses? When I enter individual IP addresses here, the server
works fine, requiring SMTP AUTH for anyone not connection from one of the
listed IP's. However when I enter our subnet mask, the server opens wide,
letting anyone send email from or to anyone, like an open 
relay.
At 10:23 AM 3/28/2002, R. Scott Perry wrote:
I
have my IMail set to Relay for local hosts
only
To make sure that you are not an open relay, you can either use IMail's
Relay for addresses (in which case you would enter a list of
safe IP addresses that your users may come from; anyone not
coming from those safe IPs would need to use SMTP AUTH), or No mail
relay (which really means that everyone must use SMTP AUTH).
Note that relay setting apply only to outgoing E-mail, so no matter what
your settings are, your users will still be able to get mail.
Any other relay options will allow spammers to send mail through your
server. In the case of Relay for local hosts, IMail
will allow spammers to send unlimited spam if they pretend to be using a
return address on one of your domains.
Are you running Declude Hijack (which would limit the amount of mail that
a spammer could send)?

-Scott
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at
http://www.declude.com
.


___
Scott MacLean
[EMAIL PROTECTED]
ICQ: 9184011
http://www.nerosoft.com



RE: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread R. Scott Perry


[NOTE: Your mail server [65.204.98.70] is missing a reverse DNS entry. All 
Internet hosts are required to have a reverse DNS entry. The missing 
reverse DNS entry will cause your mail to be treated as spam on some 
servers, such as AOL.]


Speaking of the 2 got relayed and HiJack.  What exactly does that
mean?  I have a few in my DeConn that shows like 12 got relayed, and 4
got relayed.  How do I read this, or I guess what does that mean??

That just lists the number of E-mails that were relayed from a specific 
IP.  So 192.168.100.112  relayed 4 E-mails would mean that the IP address 
192.168.100.112 sent 4 E-mails to external addresses (with only 4 E-mails, 
this would probably be a legitimate local user).

A 1 indicates that E-mail is now being held, and a 2 means that E-mail 
is permanently being held.  So if you see 192.168.100.115 12 relayed 480 
E-mails, that would mean that the E-mail is being held permanently (the 
12), and that they had sent out 480 E-mails so far.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread Charles Frolick

Along the lines of Hijack, I still occasionally get customers complaining of
mail disappearing when the send to a large number of recipients in a single
email, usually in the order of 80 or more.  I have a tough time convincing
customers to break up messages and it does not seem to be universal.
However, the customers that it happens to, it seems to be consistant.  This
number of recipients will trip my first level on Hijack, but hold 2 is at
400 because I have one customer that is absolutely insistant that she has to
send to her whole list at once (it's a church bulletin they sent to a
varying list once a month). That email is never stopped, exept in the first
hold.  These others diassappear completely, nothing in hold 1 or 2.  If I
turn off Hijack they send just fine.

To finish up, has anyone else seen this?

Thanks,
Chuck Frolick
ArgoNet, Inc.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Thursday, March 28, 2002 9:44 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] HELP: I just got listed on ORDB



[NOTE: Your mail server [65.204.98.70] is missing a reverse DNS entry. All
Internet hosts are required to have a reverse DNS entry. The missing
reverse DNS entry will cause your mail to be treated as spam on some
servers, such as AOL.]


Speaking of the 2 got relayed and HiJack.  What exactly does that
mean?  I have a few in my DeConn that shows like 12 got relayed, and 4
got relayed.  How do I read this, or I guess what does that mean??

That just lists the number of E-mails that were relayed from a specific
IP.  So 192.168.100.112  relayed 4 E-mails would mean that the IP address
192.168.100.112 sent 4 E-mails to external addresses (with only 4 E-mails,
this would probably be a legitimate local user).

A 1 indicates that E-mail is now being held, and a 2 means that E-mail
is permanently being held.  So if you see 192.168.100.115 12 relayed 480
E-mails, that would mean that the E-mail is being held permanently (the
12), and that they had sent out 480 E-mails so far.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .


__ Information from NOD32 1.237 (20020327) __

This message was checked by NOD32 for Exchange e-mail monitor.
http://www.nod32.com



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread R. Scott Perry


I know this is slightly off-topic for here, but has anyone had problems 
with entering subnet masks in the Relay for addresses? When I enter 
individual IP addresses here, the server works fine, requiring SMTP AUTH 
for anyone not connection from one of the listed IP's. However when I 
enter our subnet mask, the server opens wide, letting anyone send email 
from or to anyone, like an open relay.

What do you have listed as the IPs and subnet mask?
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread Chad Killion

[NOTE: Your mail server [65.204.98.70] is missing a reverse DNS entry. All Internet 
hosts are required to have a reverse DNS entry. The missing reverse DNS entry will 
cause your mail to be treated as spam on some servers, such as AOL.]


What is a good threshhold to use for both of the holds in your honest
opinion.  I am running about 9000 addresses in an ISP.  So ocassionaly
some of those people are going to be sending those anoying chain message
to everyone on their address book.  Just looking for a little guidance.
Thanks in advacne.

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of R. Scott Perry
Sent: Thursday, March 28, 2002 11:39 AM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] HELP: I just got listed on ORDB



Along the lines of Hijack, I still occasionally get customers 
complaining of mail disappearing when the send to a large number of 
recipients in a single email, usually in the order of 80 or more.

Do you see a line Outgoing from xxx.xxx.xxx.xxx HOLDING (1) in the 
Declude Hijack logs when this happens?  That would indicate that Declude

Hijack starting holding the E-mail.

Have you checked the IMail SMTP logs to see if the E-mail was sent out
by 
IMail (or if any error messages appear there)?

What doesn't seem to make sense is that it would happen when 80 or so 
E-mails were sent out, but not when 400 were sent out (since the mail 
should be handled the same in both cases, since the first threshold is
hit 
but not the second one).
 -Scott

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
unsubscribe Declude.JunkMail.  You can E-mail [EMAIL PROTECTED] for
assistance.  You can visit our web site at http://www.declude.com .



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread R. Scott Perry


I have the top 64 IP's of a class C, so I was using 216.13.3.192 for both.

If you use 216.13.3.192 as the IP, and 255.255.255.192 as the netmask, it 
should work.

A netmask should (except in the most unusual cases, such as if one person 
got odd IPs in a given range whereas someone else got the even IPs) be a 
binary number of all 1's followed by all 0's.  By using 216.13.3.192 as the 
netmask, you'll get unusual results.
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread Scott MacLean

oops. Sorry, that's what I meant. 216.13.3.192 for the IP
and 255.255.255.192 for the netmask, just as you said. When doing so, it
acted as an open relay to any connection.
At 01:17 PM 3/28/2002, R. Scott Perry wrote:

I
have the top 64 IP's of a class C, so I was using 216.13.3.192 for
both.
If you use 216.13.3.192 as the IP, and 255.255.255.192 as the netmask, it
should work.
A netmask should (except in the most unusual cases, such as if one person
got odd IPs in a given range whereas someone else got the even IPs) be a
binary number of all 1's followed by all 0's. By using 216.13.3.192
as the netmask, you'll get unusual results.

-Scott
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at
http://www.declude.com
.


___
Scott MacLean
[EMAIL PROTECTED]
ICQ: 9184011
http://www.nerosoft.com



Re: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread R. Scott Perry


oops. Sorry, that's what I meant. 216.13.3.192 for the IP and 
255.255.255.192 for the netmask, just as you said. When doing so, it acted 
as an open relay to any connection.

Ah, that's not good.  Unless there was an oversight somewhere, that sounds 
like a bug in IMail.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



Re: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread Scott MacLean

I'm running 6.06. Can anyone else running 6.06 confirm this
behavior?
At 01:46 PM 3/28/2002, R. Scott Perry wrote:
oops.
Sorry, that's what I meant. 216.13.3.192 for the IP and 255.255.255.192
for the netmask, just as you said. When doing so, it acted as an open
relay to any connection.
Ah, that's not good. Unless there was an oversight somewhere, that
sounds like a bug in IMail.

-Scott
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at
http://www.declude.com
.


___
Scott MacLean
[EMAIL PROTECTED]
ICQ: 9184011
http://www.nerosoft.com



RE: [Declude.JunkMail] HELP: I just got listed on ORDB

2002-03-28 Thread John Shacklett



I have a 
6.06 installation, and I have a combination of differently-sized subnets in my 
local address table, and I have never seen this happen. For example, my IMail 
server itself sits in a 255.255.255.240 netmask.
-Original Message-From: 
[EMAIL PROTECTED] 
[mailto:[EMAIL PROTECTED]]On Behalf Of Scott 
MacLeanSent: Thursday, March 28, 2002 1:59 PMTo: 
[EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] HELP: I 
just got listed on ORDBI'm running 6.06. Can 
anyone else running 6.06 confirm this behavior?At 01:46 PM 3/28/2002, R. 
Scott Perry wrote:

  oops. Sorry, that's what I meant. 
216.13.3.192 for the IP and 255.255.255.192 for the netmask, just as you 
said. When doing so, it acted as an open relay to any 
  connection.Ah, that's not good. Unless there was an 
  oversight somewhere, that sounds like a bug in 
  IMail. 
  -Scott---[This E-mail was scanned for viruses by Declude Virus 
  (http://www.declude.com)]---This E-mail came from the 
  Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to 
  [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". You 
  can E-mail[EMAIL PROTECTED] for assistance. You can visit our 
  website at http://www.declude.com .___Scott MacLean[EMAIL PROTECTED]ICQ: 9184011http://www.nerosoft.com