[Declude.Virus] Feature Request: Wild Card SKIPIFRECIP
I would like to be able to use wildcards in the SKIPIFRECIP command. More specifically, I would like to be able to used one SKIPIFRECIP line for a user and all of his sub-mailboxes. Currently, if I have a user with the e-mail address of [EMAIL PROTECTED], I can add this like to my recip.eml file: SKIPIFRECIP [EMAIL PROTECTED] However, if the they use sub-mailboxes like [EMAIL PROTECTED], [EMAIL PROTECTED] and [EMAIL PROTECTED], or if the Sub-mailbox creation option is turned on in Imail, the above SKIPIFRECIP will not work for any of the sub-mailboxes. Would it be possible to add a command like: SKIPIFRECIP [EMAIL PROTECTED] Thanks, Bill --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Feature Request: Wild Card SKIPIFRECIP
I would like to be able to use wildcards in the SKIPIFRECIP command. More specifically, I would like to be able to used one SKIPIFRECIP line for a user and all of his sub-mailboxes. This has been added to the suggestion database, and will be considered for upcoming releases. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] info on Worm.SomeFool.P
I'm looking for info on Worm.SomeFool.P Anyone know where I can find out about this one? [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] info on Worm.SomeFool.P
I'm looking for info on Worm.SomeFool.P Anyone know where I can find out about this one? I believe that is the name that ClamAV uses for Netsky.P -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Scott, what do you use to generate this report
Thanks Scott, While I have your attention, what do you use to generate this report from your log files? Each month, we go through our spamtraps (E-mail addresses designed to collect spam), to find out which spam tests were most effective at catching spam. snip WEIGHT1099.48% WEIGHT2095.45% NOLEGITCONTENT 95.43% SNIFFER 94.06% SPAMCHK 93.20% IPNOTINMX 90.76% SPAMCOP 79.83% CMDSPACE77.37% snip [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Scott, what do you use to generate this report
While I have your attention, what do you use to generate this report from your log files? Each month, we go through our spamtraps (E-mail addresses designed to collect spam), to find out which spam tests were most effective at catching spam. snip WEIGHT1099.48% ... We actually have a custom setup here that records the information on tests that an E-mail fails to a special log file (which is how we get the live stats on the web site), and have a program to go through that log file to come up with the stats. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Scott, what do you use to generate this report
Sell it :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, April 12, 2004 6:48 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Scott, what do you use to generate this report While I have your attention, what do you use to generate this report from your log files? Each month, we go through our spamtraps (E-mail addresses designed to collect spam), to find out which spam tests were most effective at catching spam. snip WEIGHT1099.48% ... We actually have a custom setup here that records the information on tests that an E-mail fails to a special log file (which is how we get the live stats on the web site), and have a program to go through that log file to come up with the stats. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
[Declude.Virus] OT: Call for beta testers
All, MailMage is seeking beta testers for our latest utility, MilterSink. MilterSink is a highly configurable DLL event sink for Microsoft's IIS SMTP service (a.k.a. MS SMTP) allowing for the integration of command-line content scanners. Originally designed to wrap our SPAMC32 client for SpamAssassin, MilterSink can also be used with SortMonster's Message Sniffer or any console-mode milter, and even offers rudimentary support for Declude Junkmail. Basic actions to be taken on scanned messages include header insertion, subject modification, server-side quarantine, or deletion. Advanced features will include multiple milter support (up to four per server), compound tests, message rerouting, and more. All interested should subscribe to the miltersink-beta mailing list at http://listbot.cypressintegrated.com and pursue additional discussion there--I don't want to clutter this list. We'll give the list a couple of days to fill up and will likely distribute the 0.5.0 Beta on Wednesday. As always, documentation brings up the rear. :) Regards, Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.mailmage.com/download/software/freeutils/SPAMC32/Release/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] BANEZIPEXTS and BANZIPEXTS question and suggestion
The new site looks good. But where can I find the interim releases now? Peter -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, 8 April 2004 2:57 a.m. To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] BANEZIPEXTS and BANZIPEXTS question and suggestion I did some tests again, and the zips where caught. However the initial test file I used wasn't caught. I haven't been able to reproduce the file again in away it is not caught by declude. But I have the original file that I tested and retested and that Declude let it pass. I am sure that the problem is not declude, but the file. I will send it to your virustrap address so you can take a look and test it your self. There is indeed something odd about that .ZIP file, that doesn't appear to conform to the specs for .ZIP files. But, a standard copy of pkunzip is able to handle the file, so we have a new interim release 1.79i2 at http://www.declude.com/interim that will handle this as expected. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Scott, what do you use to generate this report
If your looking for a reporting tool that can generate that type of report as well as many other types of reporting including domain breakdowns and user breakdowns. In addition to the ability to automate and email those reports... Please check out DLAnalyzer... http://www.invariantsystems.com Darrell Mike Hyslip writes: Sell it :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, April 12, 2004 6:48 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Scott, what do you use to generate this report While I have your attention, what do you use to generate this report from your log files? Each month, we go through our spamtraps (E-mail addresses designed to collect spam), to find out which spam tests were most effective at catching spam. snip WEIGHT1099.48% ... We actually have a custom setup here that records the information on tests that an E-mail fails to a special log file (which is how we get the live stats on the web site), and have a program to go through that log file to come up with the stats. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. Check Out DLAnalyzer a comprehensive reporting tool for Declude Junkmail Logs - http://www.dlanalyzer.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] info on Worm.SomeFool.P
Agreed. somefool is definitely a breed of netsky but most of the major vendors aren't mentioning the alias somefool, here is a link to fsecure which was one of the few vendors mentioning it. http://www.f-secure.com/v-descs/netsky_b.shtml -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Monday, April 12, 2004 5:46 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] info on Worm.SomeFool.P I'm looking for info on Worm.SomeFool.P Anyone know where I can find out about this one? I believe that is the name that ClamAV uses for Netsky.P -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] OT: Call for beta testers
All, While no one has protested, it's possible that the beta invitation might have looked like a commercial plug to some of you. We initially thought of indicating otherwise outright, but decided that it that might look as if _we_ had protested too much. grin For the record, this project is mostly underway to treat our Exchange clients to a taste of Sniffer and get a little more respect for our coding group. We currently expect to make MilterSink available free of charge. True, it's impossible to rule out a huge volume of feature requests and a pay (shareware-cheap) version down the line, but this is not in any current plan and was not the motivation for my post. Again, sorry if y'all felt spammed. Incidentally, I have kept this off the IMail Forum because it embraces competitive technology, even if free. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] OT: Call for beta testers
I didn't see any harm...actually though it was helpful as we all share tools to get the job done. Sorry if I contributed to a bad evening because I wasn't looking at the recipient address and thought you sent it twice... Darin. - Original Message - From: Sanford Whiteman [EMAIL PROTECTED] To: Sanford Whiteman [EMAIL PROTECTED] Sent: Monday, April 12, 2004 11:50 PM Subject: Re: [Declude.Virus] OT: Call for beta testers All, While no one has protested, it's possible that the beta invitation might have looked like a commercial plug to some of you. We initially thought of indicating otherwise outright, but decided that it that might look as if _we_ had protested too much. grin For the record, this project is mostly underway to treat our Exchange clients to a taste of Sniffer and get a little more respect for our coding group. We currently expect to make MilterSink available free of charge. True, it's impossible to rule out a huge volume of feature requests and a pay (shareware-cheap) version down the line, but this is not in any current plan and was not the motivation for my post. Again, sorry if y'all felt spammed. Incidentally, I have kept this off the IMail Forum because it embraces competitive technology, even if free. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives can be found at http://www.mail-archive.com.
