>NTVDM.exe is used for 16-bit processes, and can indeed cause some servers
>to slow down to a crawl. Are you using F-Prot.exe with Declude Virus? If
>so, you should switch to the 32-bit fpcmd.exe version.
We are using f-prot.exe with Declude Virus. How do we check to make
sure it is running in t
See http://www.declude.com/virus/manual.htm for instruction on what to
change in your virus.cfg file.
Bill
- Original Message -
From: "TC Online Support" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 12, 2004 2:20 PM
Subject: RE: [Declude.JunkMail] Server Recommendation
Chuck,
The info was there, however I will give you that the archive is
incomplete and these things can be hard to follow.
Please note the gentile nudge to research the more obvious/common
questions in the archive, manual and release notes before posting. To
some, the repetitive posts are some
I find the info on how to fix it WHITELIST AUTH.
But nothing on what it is and why to use it.
Chuck Shaffer
NETsense, Inc.
- Original Message -
From: "Matt" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 12, 2004 3:08 PM
Subject: Re: [Declude.JunkMail] What is CMDSPACE
This was a recent topic that has been covered before.
http://www.declude.com/relnotes.htm
http://www.mail-archive.com/cgi-bin/htsearch?method=and&format=short&config=declude_junkmail_declude_com&restrict=&exclude=&words=CMDSPACE
Matt
Chuck Shaffer wrote:
What is CMDSPACE
It has a weight of
What is CMDSPACE
It has a weight of 8, and Ican't dind it in the docs
Chuck Shaffer
NETsense, Inc.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL P
>NTVDM.exe is used for 16-bit processes, and can indeed cause some
servers
>to slow down to a crawl. Are you using F-Prot.exe with Declude Virus?
If
>so, you should switch to the 32-bit fpcmd.exe version.
We are using f-prot.exe with Declude Virus. How do we check to make
sure it is running in
03:03 11:32 SMTPD(01F6030E) [64.88.83.251] HELO xmail1.macombisd.org
03:03 11:32 SMTPD(01F6030E) [64.88.83.251] MAIL FROM:<[EMAIL PROTECTED]>
03:03 11:32 SMTPD(01F6030E) [64.88.83.251] RCPT TO:<[EMAIL PROTECTED]>
03:03 11:32 SMTPD(01F6030E) [64.88.83.251]
D:\IMAIL\spool\D089f01f6030ea26c.SMD 22274
Reply to: Matt
Re: [Declude.JunkMail] Test for e-mail size? on Friday 2:15:52 PM
I would also like to see a size test. Imail is too hard to manage in
this respect. I also like the idea of a SKIPIFWEIGHT function that
could be universal or in the $default$.junkmail per domain.
We are
Here is my log entry from SMTP.
03:03 11:32 SMTPD(01F6030E) [64.88.83.251] HELO xmail1.macombisd.org
03:03 11:32 SMTPD(01F6030E) [64.88.83.251] MAIL FROM:<[EMAIL PROTECTED]>
03:03 11:32 SMTPD(01F6030E) [64.88.83.251] RCPT TO:<[EMAIL PROTECTED]>
03:03 11:32 SMTPD(01F6030E) [64.88.83.251]
D:\IMAIL\s
Big thumbs up on this one. No need to process even the beginning of an
E-mail containing a 1 MB attachment in JunkMail. You mentioned
introducing a low weighted version of SKIPIFWEIGHT, and this would work
nicely with that to defeat custom filters.
BTW, have you given any thought to putting t
Isaias,
NTVDM would also be kicked off if you were using the 16-bit version of
AVG (avg.exe), in which case using the 32-bit version, avgscan.exe is
now possible with version 7.
Regarding the filters, Scott made many large improvements since 1.75 to
the efficiency of the filtering. The SKIPI
>(Gibberish, Y!directed, etc). Are these tests really worth having to
>test for SPAM or can they be removed?
On our system they are very helpful. Are you using SKIFIFWEIGHT
and MAXWEIGHT in your filters? These switches really help CPU usage.
They are explained in the archives...
-Nick Hayer
>
>I
>(Gibberish, Y!directed, etc). Are these tests really worth having to
>test for SPAM or can they be removed?
On our system they are very helpful. Are you using SKIFIFWEIGHT
and MAXWEIGHT in your filters? These switches really help CPU usage.
They are explained in the archives...
-Nick Hayer
>
>I
At 11:35 AM 3/12/2004, TC Online Support wrote:
We are currently looking to upgrade our mail server. Lately the
processing of the CPU has causing the SMTP to be working real slow,
causing a lot of timeouts. We currently we are running a P3 1.133GHz
with 512MB RAM. We are looking to upgrade to a
What is the best way to find lost/missing messages.
There's a very definitive process.
First, find the E-mail in the IMail SMTP log file, to see that it was
received. Look for the Q file name.
Then, search the Declude log file(s) for the Q file name minus the first
character and extension (so
Hello All.
What is the best way to find lost/missing messages.
1. How do I find missing messages that were most likely caught by
declude.
2. How do I find missing messages that passed declude but didn't pass
Imail?
Which logs do I start with? I need to find a message that came in and I
am no
> Is there anything that can test for e-mail size? Often I have people
> sending those damn pictures through Kodak and so on and they often get
> caught by filters (gibberish, spam domains, and so on) these messages are
> often over 75kb, so I was wondering if there was a way that I could add a
>
Are the Monkey definitely list no longer working then?
They definitely are not working anymore. They have been down since late
last year.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Vi
> It turns out
> that several of the tests provided in the original config
> have since been turned off (no this is not Scotts or Decludes
> fault, its our fault/problem for just not having enough time
> to read up everything for every single server we have). So we
> removed all of the monkeyl
Thanks Scott. You're saying the whiltelist file needs a blank line at the
end? I didn't have one, but I just added one now.
All Windows text files should have one (it's Microsoft code that won't read
the last line). I don't know off-hand which files in Declude require one,
but it's best to as
Because of what happened this week we were forced to look at our tests etc
more than we have had in the past. We could not understand why our CPU was
always so damn high. Once we looked at the tests and compared that to our
DNS log files we noticed that there were a lot of DNS errors. It turns ou
Thanks Scott. You're saying the whiltelist file needs a blank line at the
end? I didn't have one, but I just added one now.
Ben
- Original Message -
From: "R. Scott Perry" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 12, 2004 10:09 AM
Subject: Re: [Declude.JunkMail] W
Is there anything that can test for e-mail size?
No, but that sounds like it may make for a good test. :)
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Catches known viruses and is
Did I miss something here? I created a whitelist for a client (we use DJ
Pro) by adding this line to their domain-specific $default$.junkmail file:
WHITELISTFILE D:\IMail\Declude\PaulsonCommodities\whitelist.txt
(I put it in right before their list of weighted tests).
Inside the whilte list fil
We currently send and receive about 40,000 to 50,000 e-mails daily. The
processes that are taking up the most CPU are multiple instances of
declude.exe and NTVDM.exe.
NTVDM.exe is used for 16-bit processes, and can indeed cause some servers
to slow down to a crawl. Are you using F-Prot.exe with
Did I miss something here? I created a whitelist for a client (we use DJ
Pro) by adding this line to their domain-specific $default$.junkmail file:
WHITELISTFILE D:\IMail\Declude\PaulsonCommodities\whitelist.txt
(I put it in right before their list of weighted tests).
Inside the whilte list fil
We currently send and receive about 40,000 to 50,000 e-mails daily. The
processes that are taking up the most CPU are multiple instances of
declude.exe and NTVDM.exe. We tried to comment out some of our SPAM
test to see if it would help and it has freed up some CPU. The SPAM
test that were comme
Marc,
I have seen several of these this week. I have been blocking the domains
that are listed for the redirect.
Darrell
Check Out DLAnalyzer a comprehensive reporting tool for
Declude Junkmail Logs - http://www.dlanalyzer.com
Marc Hilliker
We're a small ISP and receive about 30,000 emails per day with 60 to 80%
being kicked out as either spam or viruses.
I upgraded about 6 months ago from a P2 running NT4 Workstation to a 2.4
Xeon (single processor on a dual processor motherboard) running Win2K with
only 256MB RAM.
I've never been
I have noticed that with the later interim release, the X-RBL-Warning lines
have changed to include the test number.
Can this be adjusted?
That's part of the latest interim release, to troubleshoot a specific
issue. It will be removed.
-Scott
-
We are currently looking to upgrade our mail server. Lately the
processing of the CPU has causing the SMTP to be working real slow,
causing a lot of timeouts. We currently we are running a P3 1.133GHz
with 512MB RAM. We are looking to upgrade to a dual processor.
How many E-mails do you send/re
I've always wondered how much e-mail I could flow. Based on your
figures I think I would be able to push 5 to 6 million.
Were directly connect to an OC12 as well, via GB Ethernet.
I love speed...
I've setup my 68 Camaro the same way ;)
Aaron
On Mar 12, 2004, at 8:53 AM, Darryl Koster wro
I have noticed that with the later interim release, the X-RBL-Warning lines
have changed to include the test number.
Can this be adjusted?
Reason is it is causing those lines not to show up in the appropriate
section in SpamReview.
Example:
X-RBL-Warning-82: GIBBERISH: Message failed GIBBERISH
I will leave hardware recommendations to others for now.
However spam/ham ratios I can provide. Currently we are seeing typical
spam/ham numbers above 77%. Often this number flirts with 80+. This is
based on logs from approximately 100 systems. Live data updated several
times per day:
http://w
Hello,
I was wondering if any one has tried the new declude beta
release, and if so has there been any issues with it?
From what i understand the new version of declude has the ability
to stop testing an email once it has reached the delete weight.
Is this true, and if so does it require some sp
That's killer horsepower,
We are running dual 800's right now with a gig of ram and other than the
spam we receiving the other day our server setup has never had a hiccup.
Even then they only hiccupped at receiving over 1,000,000 spam in a 12 hour
period.
Darryl
-Original Message-
Fr
Isaias,
We currently receive about 70-80% of SPAM. Are servers are a little
bit overkill for our needs, about 3,000 - 4,000 e-mails a day. But the
server has never hiccuped in over a year now. Only need to reboot to
patch windows. Its also weathered a couple of SPAM floods as well,
(10,0
We are currently looking to upgrade our mail server. Lately the
processing of the CPU has causing the SMTP to be working real slow,
causing a lot of timeouts. We currently we are running a P3 1.133GHz
with 512MB RAM. We are looking to upgrade to a dual processor.
I was wondering if anybody wa
Is there anything that can test for e-mail size? Often I have people
sending those damn pictures through Kodak and so on and they often get
caught by filters (gibberish, spam domains, and so on) these messages are
often over 75kb, so I was wondering if there was a way that I could add a
small nega
Hi all,
I have am evaluating JunkMail and so far it looks really good. I would
love to see how other people have configured their $default$.junkmail
and global.cfg files.
What I am specifically interested in is how the weights are setup (do
you change them from Scott's defaults)?
What you do wi
Hi marc-
I've been seeing them for a while now. A body filter looking for the domain
name (choice-is-yours.com) does the trick, but only for repeats.
I don't know whether the g.msn.com string is common to all of these, or
whether it's a legit address, so I have not been filtering on that. It does
Has any one else seeing redirects using msn.com as the one below? My testing
shows that they work like the yahoo redirects.
http://g.msn.com/0US!s5.31472_315529/HP.1001?http://choice-is-yours.com/?par
tid=98235
-M
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)
43 matches
Mail list logo
