RE: [Declude.JunkMail] [OT] exchange2aliases for dummies

2004-11-13 Thread Colbeck, Andrew
Thank you for the help, Sandy. It's greatly appreciated, especially at this late hour. Andrew 8) -Original Message- From: Sanford Whiteman [mailto:[EMAIL PROTECTED] Sent: Saturday, November 13, 2004 8:53 PM To: Colbeck, Andrew Subject: Re: [Declude.JunkMail] [OT] exchange2aliases for du

Re: [Declude.JunkMail] [OT] exchange2aliases for dummies

2004-11-13 Thread Sanford Whiteman
> In the production environment, the SMTP addresses for a user are > [EMAIL PROTECTED], [EMAIL PROTECTED], [EMAIL PROTECTED] etc. and not > intheActiveDirectory,i.e.notsomething like > [EMAIL PROTECTED] Okay, but the addys are definitely in AD; they may not be "feder

RE: [Declude.JunkMail] [OT] exchange2aliases for dummies

2004-11-13 Thread Colbeck, Andrew
After browsing by all 142 of the posts at mail-archive.com (that would be 135 or so hits on Sandy's .sig!) that include "exchange2aliases", I've spotted the missing link. I noted the absence of it myself while trying to provide all the diagnostics; Sandy instructed in his inaugral post: "All, I'

[Declude.JunkMail] [OT] exchange2aliases for dummies

2004-11-13 Thread Colbeck, Andrew
Sandy, I'm having problems in getting this working on a test machine. I'm missing some obvious step... Recap: My production environment is such that I run IMail+Declude as my gateway, in front of an Exchange 2000 environment, so I'm a good candidate for using your exchange2aliases script. We ga

Re: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - security against harvesting?

2004-11-13 Thread Sanford Whiteman
> One more thing - since the IMail LDAP is running on our public mail > server, isn't it a security issue that anyone can read the LDAP > directory without a login? The service is only open to spammers if you've let LDAP in through your firewall from anywhere, which is certainly not

[Declude.JunkMail] [OT] ldap2alias/alias2ldap - security against harvesting?

2004-11-13 Thread decjunkmail
One more thing - since the IMail LDAP is running on our public mail server, isn't it a security issue that anyone can read the LDAP directory without a login? Specifically, doesn't this potentially allow spammers to harvest email addresses from LDAP directories as soon as they realize this? Ca

Re[2]: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread Sanford Whiteman
> The "root" of the problem is that our clients, like most, will be > notified not to use the "nobody" alias and given a transition time > to eliminate them but as usual, most of them will ignore the notice > and we have to enforce it easily from our end in a scalable way. I have added th

Re: [Declude.JunkMail] IPBYPASS- Declude 8.1

2004-11-13 Thread Matt
Markus Gufler wrote: Matt   If I understand right this filter file will whitelist all messages as it was before the IMail HF 8.13. Yes. By adding the following line (before the whitelist line)   MAILFROM END IS <>   will whitelist only NDR's but not WebMail and othe

Re[2]: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread Sanford Whiteman
> 1. All SMTP addresses for a given user don't have aliases created. > For example, I use mark_smith, mesmith, and msmith. Only my primary > SMTP address was output. This shouldn't be the case. It's specifically written to export all of the proxyAddresses, a multi-valued field. It work

Re[2]: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread Sanford Whiteman
> Per Sandy's instructions, I'm creating a "fully qualified OHN" on > the inbound server of "storeforward.yourdomain.com" Yes, definitely necessary before performing any exports. > To make this work, that new domain on the inbound server needs a > HOST ALIAS (not user alias, but

RE: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread decjunkmail
I'm referring to creating the virtual domain on the inbound/front-end server. The real domain on the mailbox server is "yourdomain.com" Per Sandy's instructions, I'm creating a "fully qualified OHN" on the inbound server of "storeforward.yourdomain.com" To make this work, that new domain on the

RE: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread decjunkmail
Sandy, et. al. The lack of any easy way to disable the "NOBODY" alias in IMail is why I asked about adding an option in the alias2ldap script to ignore the "nobody" entries. Since this script has to be scheduled to run regularly, I think it would be better to do it all in one place instead of r

RE: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread John Tolmachoff \(Lists\)
There is either a script or some one provided the information to create a script that could be scheduled to find and delete the nobody alias. AFAIK, there is no way in Imail itself to configure to disallow the nobody alias, but that is something that should be added. John Tolmachoff Engineer/Consu

Re: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread Dave Doherty
John- Instead of trying to mask the problem, why not deal with it and go to the root and disallow the nobody alias? How do you do this in Imail (running 8.05 currently)? I have not been able to find it in the control applet, and I do not see any references to disabling this feature in the IMail k

RE: [Declude.JunkMail] IPBYPASS- Declude 8.1

2004-11-13 Thread Markus Gufler
Matt   If I understand right this filter file will whitelist all messages as it was before the IMail HF 8.13.   By adding the following line (before the whitelist line)   MAILFROM END IS <>   will whitelist only NDR's but not WebMail and other system generated messages.   Correct?   Markus  

Re: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread Sanford Whiteman
> Some of our existing domains on our mailbox server have a "nobody" > alias and since there is no way to stop domain admins from creating > "nobody" alias at any time in the future; rather than trying to > delete all the existing "nobody" domains, I would like to alter the > alias2ldap sc

Re: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - examples of how to "wrap" scripts

2004-11-13 Thread Sanford Whiteman
> Since the scripts process one virtual domain, I was wondering if > Sandy or anyone else could post their own batch files/scripts they > use to "wrap" around and loop through all their domains. Do an search in the IMail Forum archives for "domlist" and you'll see some examples for looping

Re: [Declude.JunkMail] Is DNSStuff Down?

2004-11-13 Thread Serge
OK, That was TESTSFAILED END CONTAINS SNIFFER TESTSFAILED 0 CONTAINS WEIGHT20 Does not seems the weight tests are processed until everything else is processed Am i correct ? if that is the case, the above will not work, even if the filter is AFTER the Weight20 test in global.cfg can anyone confir

Re: [Declude.JunkMail] IPBYPASS- Declude 8.1

2004-11-13 Thread Matt
Kami, There was a change in IMail 8.13 that now sends Web mail, system notifications, and messages that call IMail1.exe to external tests such as Declude.  Before these things weren't being scanned. See the following thread for a discussion.  There is a filter that I shared in a post called W

RE: [Declude.JunkMail] IPBYPASS- Declude 8.1

2004-11-13 Thread Kami Razvan
Hi Markus..   I think you are right..   Any downside to whitelisting that IP?  Since version 8 of IMail all the server reports are getting caught as spam..   WHITELIST  IP  127.0.0.1   Regards, Kami From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Markus GuflerSent: Saturday

RE: [Declude.JunkMail] IPBYPASS- Declude 8.1

2004-11-13 Thread Markus Gufler
Wow! ver 8.1   ...  I must have missed something  :-)   As I know IPBYPASS will not prevent the message from beeing scanned. It will only bypass this IP for DNS-based test lookups. Other tests will still score and add weights to the final result.   Markus     From: [EMAIL PROTECTED]

RE: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread John Tolmachoff \(Lists\)
> 1. All SMTP addresses for a given user don't have aliases created. For > example, I use mark_smith, mesmith, and msmith. Only my primary SMTP address > was output. > 2. Distribution Lists aren't exported > 3. Mail enabled public folders aren't exported. Well, that depends on how you set up the s

RE: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread John Tolmachoff \(Lists\)
> On the front-end/inbound mail server, you should create the virtual domain normally > and be sure to set the host alias. For example, if the mailbox server domain is > yourdomain.com, then create a virtual domain on the front-end server called > storeforward.yourdomain.com but set the host alias

RE: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - examples of how to "wrap" scripts

2004-11-13 Thread John Tolmachoff \(Lists\)
> Since the scripts process one virtual domain, I was wondering if Sandy or anyone else > could post their own batch files/scripts they use to "wrap" around and loop through all > their domains. Use one line in the batch file for each domain. You even need to use one line for each OU in AD. Howeve

[Declude.JunkMail] SPAMDOMAINS entry for Suntrust

2004-11-13 Thread Kami Razvan
Hi;   Does anyone know the spamdomain entry for Suntrust Bank?   @Suntrust.com    .suntrust.com   Is it different from above?  I have not seen a legit email from Suntrust to use as a guide.   Regards, Kami

[Declude.JunkMail] IPBYPASS- Declude 8.1

2004-11-13 Thread Kami Razvan
Hi;   The IMail reports are getting caught as spam - the following is from the email header:   *** Subject: [~18] IMail Daily Report for ferdowsy.foroosh.comX-RBL-Warning: IPNOTINMX: X-RBL-Warning: NOLEGITCONTENT: No content unique to legitimate E-mail detected.X-RBL-Warnin

RE: [Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread Mark E. Smith
One other thing that I noticed (and reported to Sandy) was that in an Exchange environment: 1. All SMTP addresses for a given user don't have aliases created. For example, I use mark_smith, mesmith, and msmith. Only my primary SMTP address was output. 2. Distribution Lists aren't exported 3. Mail

[Declude.JunkMail] [OT] ldap2alias/alias2ldap - finer points

2004-11-13 Thread decjunkmail
A few things that I have discovered/stumbled upon. These may be obvious to others, but it took me a while to realize these and get past them: On the front-end/inbound mail server, you should create the virtual domain normally and be sure to set the host alias. For example, if the mailbox serve

[Declude.JunkMail] [OT] ldap2alias/alias2ldap - examples of how to "wrap" scripts

2004-11-13 Thread decjunkmail
Hi, I working with these two scripts to implement an inbound gateway for our mail server that will avoid dictionary attacks. I've managed to get the scripts working (and will post a few things I discovered that were not obvious in another message to help anyone else also trying to use them).