Are you running the DOS or Windows version of F-Prot? If the 32bit Windows
version, how do you have F-Prot setup in your virus.cfg file? It should be
setup like:
C:\Progra~1\FSI\F-Prot\fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE -NOBOOT -DUMB
-REPORT=report.txt
using "fpcmd.exe" instead of "f-prot
We're running Imail Version 8.0 with Hot Fix 1 and Declude Anti-virus
(F-PROT), Anti-SPAM, HIJACK on a Windows 2003 Enterprise Server with dual
CPU, 2GB of RAM and RAID 5. After running for over six hours we're seeing
"NTVDM.EXE - The Application failed to initialize properly (0xc142)
click on
Kami,
Great idea!!! This is much better then using contains on the header (since header
forging is easy).
Darrell
-- Original Message --
From: "Kami Razvan" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Mon, 23 Jun 2003 18:15:06 -0400
>Hi;
>
>D
Version 1.70
The next thing to check for is to make sure that the ".checkyourinbox.com"
line in your blacklist doesn't have any characters after it (watch out for
spaces/tabs), and does have a carriage return after it (IE there is at
least one line after it, even a blank line -- most programs t
Version 1.70
Jeffrey Di Gregorio
Systems Administrator
Pacific School of Religion
-Original Message-
From: R. Scott Perry [mailto:[EMAIL PROTECTED]
Sent: Monday, June 23, 2003 4:36 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] messages getting through the blacklist fro m
fil
Since I have not got around to
publishing the white paper on implementing SpamManager (Now Alligate) as an integrated
test within Declude, here is a simple run down:
Here is what I do and what is
recommended:
I defined 6 tests as below. Using the
greater than and less than signs al
Sorry, I should have posted the complete header for you to see. Notice the
x-declude-sender entry in the header is a subdomain of my entry in the
blacklist file.
What version of Declude are you running (typing "\IMail\Declude -diag" from
a command prompt will show you)? I believe that there was
Sorry, I should have posted the complete header for you to see. Notice the
x-declude-sender entry in the header is a subdomain of my entry in the
blacklist file.
Received: from mecca.psr.edu ([209.76.204.2]) by chirala.psr.edu with SMTP
(Microsoft Exchange Internet Mail Service Version 5.5.2653.13
Kami, why not use "ENDSWITH" with your RDNS entries instead of "CONTAINS",
since any spammer monitoring this list could easily setup something like
this in their reverse DNS:
junk.yahoo.com.spammer.com or spam.aol.com.junkmail.net
and get a nice weight reduction of 20, which would certainly h
> SPAMDOMAINS spamdomains C:\IMail\Declude\spamdomainlist.txt x 5 0
Now if I understand this correctly, this particular line means that 5 points
will be added on to the total weight if a message fails the SPAMDOMAINS
test?
Correct.
How would one go about forcing a hold for the failure of on
Can anyone clarify why this message would get past the blacklist file I
have set-up. The test is working fine most of the time, only once in a
while one seems to sneak through.
The entry in the fromfile is:
.checkyourinbox.com
(from the manual):
---
Blacklisting is not working
The "fromfile"
Hi, Scott,
Thanks for your original response to my e-mail. Sorry it took so long to
follow-up.
> >I've been trying to read all the messages related to this test and I'm
> >having a hard time understanding what exactly the test is, i.e. what
purpose
> >it serves, and how I go about putting it in
Can anyone clarify why this message would get past the
blacklist file I have set-up. The test is working fine most of the time, only
once in a while one seems to sneak through.
The entry in the fromfile is:
.checkyourinbox.com
The partial header of the message is:
Received: fr
Hi;
Do you know what the REVDNS is? We are finding good results for adding
negative weight to domains that are like this. We simply have a negative
REVDNS list.
REVDNS -20 CONTAINS .yahoo.com
REVDNS -20 CONTAINS .aol.com
The above are two e
Holding for a specific test, and not a specific weight, for me, is a waste
of the $$$ you paid for declude, and all the programming hours Scott and his
team has put on this great product and its weighting technique.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Be
I have been seeing a lot of mail failing the spam domains test with kodak's
picture cd. It allows users to use their own email address when sending
pictures, but it comes from Kodak's servers.
Is their any other way around this? Right now I setup a filter to subtract
the spam domains weight if p
Hello, Samantha,
> I was having a problem this morning receiving mail from outside. I test
> from a Hotmail and Yahoo account and could not receive from either.
>
> I put a HOLD on the IPNOTINMX in the $Default$Junkmail. I had to take it
> off this morning because of alot of calls not getting ma
Hi,
I've got SpamManager
running as a test only in Declude, and while it catches nearly everything SPAM
it also has a lot of false positives, so I was wondering if I could create
specific HEADER tests with different actions taken based on the SpamManager
points system results. A SpamManage
Make the spamdomains entry for yahoo:
yahoo.
instead of:
@yahoo. .yahoo.
There is no need to have it setup with these extra parameters. Let us know
if that resolves your problem.
Bill
- Original Message -
From: "Sheldon Koehler" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Se
> This E-mail should not have failed the SPAMDOMAINS test, but it was
> whitelisted, so it is not possible to tell whether or not it failed the
> SPAMDOMAINS test without looking at the log file.
This was the last email she received from the list. She is now getting
messages saying her email is be
I was having a problem this morning receiving mail from outside. I test
from a Hotmail and Yahoo account and could not receive from either.
I put a HOLD on the IPNOTINMX in the $Default$Junkmail. I had to take it
off this morning because of alot of calls not getting mail.
Why would putting a HOL
Some yahoogroups.com email is bouncing and some is not... Below is a header.
Right now my sd.txt file has:
@yahoo. .yahoo.
That line means that any E-mail with a return address including "@yahoo"
must have a reverse DNS entry with ".yahoo." in it (or "@yahoo.", but that
won't appear in a revers
Some yahoogroups.com email is bouncing and some is not... Below is a header.
Right now my sd.txt file has:
@yahoo. .yahoo.
Any suggestions?
Received: from Hyperion.tenforward.com [65.161.10.61] by tenforward.com with
ESMTP
(SMTPD32-7.15) id A4CA78D0088; Mon, 16 Jun 2003 15:29:30 -0700
Received
use spamdomains. works great.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of Doug McKee
> Sent: Sunday, June 22, 2003 5:34 PM
> To: [EMAIL PROTECTED]
> Subject: [Declude.JunkMail] Another new test
>
>
> This morning I received three spam from my own
Below are the header lines of a piece of spam. I am certain that my mail
server (65.38.154.56) delivered the e-mail to mail.tahoemountainclub.com (an
exchange server).
Is the mail.com server (63.243.127.170) sending spam to [EMAIL PROTECTED]
Most likely, since that is the address in the "To:" hea
25 matches
Mail list logo
