RE: [Declude.JunkMail] maybe a dumb question

2002-07-01 Thread Darrell LaRock

The WARN action only generates a line in the header of the message.
Are you trying to send an alert to the user that sent it?  

Darrell
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]] On Behalf Of Stanley Lyzak
Sent: Monday, July 01, 2002 12:34 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] maybe a dumb question

Ok,

If this is too easy a question, cut me a break...we have been using
declude for 4 days (and are LOVING it!) (hitting about 65% - 75% catch
rate- trying to improve).

We have an IMail 6.x mailbag server (no actual mailboxes or domains
exist). It uses relay for IP and a hosts file per IMail recommendation.


Using declude, we are seeing two odd behaviors:

1) No setting for inbound mail in $default$.junkmail can be made to
generate a warning (we are testing with a piece of software that can be
made to violate the rules enough to cause a warning). Outbound warnings
in the global.cfg work like a champ. Is this because we have no actual
domains/mailboxes hosted on this server???

2) (Possibly related to above?): Although we are running the Pro version
of Declude, we cannot get a per-domain variation in the rule set. The
only warnings that are effective, are from the global.cfg file in the
imail/declude folder. We have tried creating a subfolder under declude
with the same name as our domain name, but it ignores any global.cfg or
$default$.junkmail file setting in that folder (yes I restarted the
IMail SMTP service after the changes).


Any ideas?


Thanks

BTW, the manual doesn't seem to be very inclusive in how everything can
be set. I have done some searches on the Internet and found a few nice
tools (and this forum has been helping a lot). But is there a good
repository of hints and specs (settings) that I could get my hands on???
I am very technically literate.

Thanks again!

Stan Lyzak, BSEE, CISSP, MCSE², CCNA, A+
Network Security Engineer
ASysTech, Inc.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] maybe a dumb question

2002-07-01 Thread Stanley Lyzak

ok, I think I see my error.

I need to make a sub under the declude folder whose name matches the alias.

But if my official hostname is server.company.com, I see in the alias field that we 
don't have an alias defined!

Is this necessary if the server is only a mailbagger? (maybe just for declude to 
identify each domain separately???)


If I put in the alias, I assume we can then create settings (the two config files) in 
that company.com subfolder and they will supercede the files in the main declude 
folder? 

What about all the other domains we mailbag for? Will I need to create aliases for 
each one?

Thanks for the help



Stan Lyzak, BSEE, CISSP, MCSE², CCNA, A+
Network Security Engineer
ASysTech, Inc.


-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 01, 2002 1:03 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] maybe a dumb question



We have an IMail 6.x mailbag server (no actual mailboxes or domains 
exist). It uses relay for IP and a hosts file per IMail recommendation.

1) No setting for inbound mail in $default$.junkmail can be made to 
generate a warning (we are testing with a piece of software that can be 
made to violate the rules enough to cause a warning). Outbound warnings in 
the global.cfg work like a champ. Is this because we have no actual 
domains/mailboxes hosted on this server???

That is correct.  If an E-mail is destined to an address that isn't hosted 
locally, IMail and Declude treat it as outgoing mail.

You can either use the outgoing settings, or have per-domain settings for 
those domains.

2) (Possibly related to above?): Although we are running the Pro version 
of Declude, we cannot get a per-domain variation in the rule set. The only 
warnings that are effective, are from the global.cfg file in the 
imail/declude folder. We have tried creating a subfolder under declude 
with the same name as our domain name, but it ignores any global.cfg or 
$default$.junkmail file setting in that folder (yes I restarted the IMail 
SMTP service after the changes).

I'm guessing your host name in IMail is mail.example.com, with 
example.com as an alias?  In that case, you need to use 
\IMail\Declude\mail.example.com\ as the directory for the 
per-user/per-domain settings.
  -Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] maybe a dumb question

2002-07-01 Thread R. Scott Perry


I need to make a sub under the declude folder whose name matches the alias.

But if my official hostname is server.company.com, I see in the alias 
field that we don't have an alias defined!

Is this necessary if the server is only a mailbagger? (maybe just for 
declude to identify each domain separately???)

Actually, since your server is just acting as a gateway, you can just use 
company.com (assuming that E-mail is just addressed to [EMAIL PROTECTED], 
not [EMAIL PROTECTED]).

There is no need to put in the alias.

What about all the other domains we mailbag for? Will I need to create 
aliases for each one?

No.  You can either set up per-domain settings for those domains, or they 
can use the outgoing actions as listed in the global.cfg file.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .



RE: [Declude.JunkMail] maybe a dumb question

2002-07-01 Thread R. Scott Perry


It is my understanding that the only file needed in these subs is the 
$default$.junkmail file.

That is correct (other files would only be needed for per-user configurations).

Am I right in assuming the global.cfg and wordfilter.txt files are only 
good at the declude folder level???

Declude doesn't have a wordfilter.txt file.  If that is part of the 
fromfile/ipfile/filter test types, it would NOT work in one of those 
folders.  It would need to go in the \IMail\Declude directory.

The global.cfg file also only belongs in the \IMail\Declude directory.

I read through the manual and it doesn't even mention the wordfilter.txt file!

G  Several people have referred to the new (beta) filter feature as 
wordfilter.  Only filter (the test type) is something that Declude 
knows about.  wordfilter or wordfilter.txt may be test names or files 
used by tests that some Declude JunkMail users have added.
-Scott

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---

This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail.  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .