Is it every version of Outlook that fails the CMDSPACE or is it the mail
server this test is for?
It is for whatever connects to IMail. If you only accept incoming E-mail,
it should be a mailserver. If you also allow outgoing E-mail, it could be
a mailserver or a mail client.
If it for a mail
The problem was having the TCP also checked. Once that was unchecked, I
set services to log server, shut off Imail syslog service, stopped and
started SMTP and Queue Man., and closed and reopened Kiwi.
However my Anti-Spam Log is not showing up, usually spam.txt.
Nothing in error log. Anyon
Thanks for all your help everyone. I will let you know what the results
are.
Thanks,
Chris Patterson, CCNA
Network Engineer
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Thursday, February 17, 2005 2:31 PM
To: Declude.JunkM
Ok, that clearly shows that some application or service is listening for
inbound syslog.
Download fport from http://www.foundstone.com and it will show the name
and path of that executable. From there, you'll solve it. Let us know
how that works out for you.
Andrew 8)
-Original Message
So you do have something running on UDP 514. Now it's time to figure out
what it is. Try looking through services or running apps.
Darin.
- Original Message -
From: "Chris Patterson" <[EMAIL PROTECTED]>
To:
Sent: Thursday, February 17, 2005 2:13 PM
Subject: RE: [Declude.JunkMail] FW:
Actually, The netstat -an showed this:
UDP0.0.0.0:514*:*
Thanks,
Chris Patterson, CCNA
Network Engineer
Rapid Systems
(813)232-4887 Ext. 112
[EMAIL PROTECTED]
"Managed Spam Filtering and Anti-Virus Protection for Your Internet
Service - Available Today from Rapid Systems"
Several people on the IMail forum have mentioned to you to try netstat -an
to see what may be listening on 514. Have you done that yet?
Darin.
- Original Message -
From: "Chris Patterson" <[EMAIL PROTECTED]>
To:
Sent: Thursday, February 17, 2005 1:41 PM
Subject: RE: [Declude.JunkMail]
The Syslogd is definetly stopped. No software firewall, we use
SonicWall.
Thanks,
Chris Patterson, CCNA
Network Engineer
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew
Sent: Thursday, February 17, 2005 12:17 PM
To: Declude.JunkMa
That did it, I should have swapped that out a while back.
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of John
> Tolmachoff (Lists)
> Sent: Thursday, February 17, 2005 12:36 AM
> To: Declude.JunkMail@declude.com
> Subject: RE: [Declude.JunkMail] Er
Chris, Declude is not the culprit. Your IMail installation likely has
syslog turned on. Check your IMail Administrator under localhost,
Services, and see if Syslogd is running.
Barring that, do you have a personal firewall installed that may need
you to approve Kiwi to use network services?
And
... and the current version. I should note that with a new
counter-counter section at the top, I'm seeing very few false positives.
Andrew 8)
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher
Sent: Thursday, February 17, 2005 6:26 AM
To: Declu
I am having issues setting up a Log Server(Kiwi) and am receiving the
error "2005-02-17 09:18:39 Unable to open UDP socket on port 514.
I have shut down IMAIL's services, I believe the declude logging may be
causing this error.
Has someone else gone down this road that has some suggestions?
Here's a thread that might help:
http://www.mail-archive.com/declude.junkmail@declude.com/msg22591.html
- Original Message -
From: "Adam Hobach" <[EMAIL PROTECTED]>
To:
Sent: Thursday, February 17, 2005 8:13 AM
Subject: RE: [Declude.JunkMail] RFCSPACE Explanation?
Yes, I meant CMDSPACE.
Yes, I meant CMDSPACE.
Is it every version of Outlook that fails the CMDSPACE or is it the mail
server this test is for? If it for a mail server is there a list of servers
that are known to fail this test?
Thanks,
Adam
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECT
> Do you mean CMDSPACE? That one looks for a space in the SMTP
> commands, such as RCPT TO:, that really shouldn't be there
> (although some people may try to argue that the RFCs do allow
> it). No legitimate mailserver that I am aware of has the
> space there, although some mail clients (m
Instead of using WEIGHT, use WEIGHTRANGE.
Then, Declude will only take one action and you will not see that error.
John Tolmachoff
Engineer/Consultant/Owner
eServices For You
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail-
> [EMAIL PROTECTED] On Behalf Of opus:i
I noticed this when checking to make sure all was well after installing
2.05:
02/17/2005 00:00:23 Q4f0d337e0150ef95 NOT bypassing whitelisting of E-mail
with weight >=80 (42) and at least 0 recipients (1).
02/17/2005 00:00:23 Q4f0d337e0150ef95 Tests failed [weight=42]: SNIFFER=LOG
MYFILTER=WARN N
17 matches
Mail list logo
