[Declude.JunkMail] Bugfix: Imail 8.22 and ICS 2.02 released

2005-12-07 Thread Hirthe, Alexander
Hello, there are two bugs in Imail, one for authenticated users in Imap, one for all in SMTP. Please upgrade your systems! http://www.ipswitch.com/support/ics/updates/ics202.asp http://www.ipswitch.com/support/ics/updates/ics202.asp

Re: [Declude.JunkMail] Bugfix: Imail 8.22 and ICS 2.02 released

2005-12-07 Thread Darrell \([EMAIL PROTECTED])
Anyone hear anything about if 8.1x is affected? It talks only about 8.2. Darrell Hirthe, Alexander writes: Hello, there are two bugs in Imail, one for authenticated users in Imap, one for all in SMTP. Please upgrade your systems! http://www.ipswitch.com/support/ics/updates/ics202.asp

RE: [Declude.JunkMail] Bugfix: Imail 8.22 and ICS 2.02 released

2005-12-07 Thread John Carter
Check the patch page at http://www.ipswitch.com/support/imail/releases/imail_professional/index.asp. There is a 8.15 fix. John C -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, December 07, 2005 7:55 AM To:

Re: [Declude.JunkMail] Bugfix: Imail 8.22 and ICS 2.02 released

2005-12-07 Thread Darrell \([EMAIL PROTECTED])
Thanks John, Darrell John Carter writes: Check the patch page at http://www.ipswitch.com/support/imail/releases/imail_professional/index.asp. There is a 8.15 fix. John C -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL

[Declude.JunkMail] D files in spool

2005-12-07 Thread Troy D. Hilton
Title: D files in spool Hello All, Im running Declude 1.80 w/ Imail 7.15HF2 and have noticed my spool file is filling up with emails, specifically, D files. Im seeing a host of these, without corresponding T files which makes me wonder if perhaps Declude is starting to process it but isnt

Re: [Declude.JunkMail] Bugfix: Imail 8.22 and ICS 2.02 released

2005-12-07 Thread Darrell \([EMAIL PROTECTED])
After looking at that - it appears that those patches are from the exploits early this summer (May 2005) and not from this recent round. Darrell Darrell ([EMAIL PROTECTED]) writes: Thanks John, Darrell John Carter writes: Check the patch page at

RE: [Declude.JunkMail] Bugfix: Imail 8.22 and ICS 2.02 released

2005-12-07 Thread John Carter
Sorry about that. Didn't notice the date. I've got to slow down. John C -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Wednesday, December 07, 2005 8:28 AM To: Declude.JunkMail@declude.com Subject: Re:

[Declude.JunkMail] Imail Anti-spam Gateway

2005-12-07 Thread Lee Miller
Has anyone had any experience with building an Imail Anti-spam Gateway? I have found one article on the net about building a linux box running FreeBSD and putting it in front of the mail server to do the bulk mail filtering. I have also heard that spam assassin can be ran in Linux. Does

Re: [Declude.JunkMail] Bugfix: Imail 8.22 and ICS 2.02 released

2005-12-07 Thread Darrell \([EMAIL PROTECTED])
Bill, I am actually looking for any information pertaining to 8.1x specifically is 8.15 vulnerable. Darrell Bill Landry writes: Yes, 8.2 needs to be patched, as well. See: http://www.ipswitch.com/support/imail/releases/imail_professional/im822.as p Bill - Original Message -

RE: [Declude.JunkMail] D files in spool

2005-12-07 Thread David Barker
Declude only processes D*.smd and Q*.smd files not T files. IMail does not delete the data file when a message is not deliverable, not returnable, and there is no postmaster alias (or there is a problem with the postmaster or root alias accounts). In certain instances, like if you happen to

Re: [Declude.JunkMail] OT: Mail Building up in IMail Spool Directory

2005-12-07 Thread Anton
In all of my cases of this sort of thing happening to us (which has only occurred a few times in 3 years), This has been the case with us. A simple restart of DNS services usually takes care of the problem. Anton - Original Message - From: Dave Doherty [EMAIL PROTECTED] To:

Re: [Declude.JunkMail] Bugfix: Imail 8.22 and ICS 2.02 released

2005-12-07 Thread Dave Doherty
8.15HF2 fixed this problem back in May, I believe. http://www.ipswitch.com/support/imail/releases/imail_professional/index.asp -Dave Doherty Skywaves, Inc. - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday,

Re: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread Richard Farris
Can I put this in my keyword filter? Richard FarrisEthixs Online1.270.247. Office1.800.548.3877 Tech Support"Crossroads to a Cleaner Internet" - Original Message - From: Kevin Bilbee To: Declude.JunkMail@declude.com Sent: Tuesday, December 06, 2005 1:54 PM

RE: [Declude.JunkMail] Bugfix: Imail 8.22 and ICS 2.02 released

2005-12-07 Thread Colbeck, Andrew
The fixes in may for what idefense.com discovered were different issues than the ones reported for Collaboration Suite and Imail 8.2x After reading the latest advisory, I've done some testing with telnet and I am sure that Imail 8.1x does not have the same vulnerability; Ipswitch introduced the

Re: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread Todd
I created a filter with the string BODY0BEGINSWITHimg src=""> The declude.cfg goes like this GIFINBODYFILTER filter d:\imail\declude\filters\gifinbodyfilter.txt x 150 0 After searchingthe declude log I dont see where the filter has been triggered a single time in the last day. There

RE: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread Kevin Bilbee
Then it is now being embeded in html. This catches the ones with no html. Kevin Bilbee -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of ToddSent: Wednesday, December 07, 2005 11:40 AMTo: Declude.JunkMail@declude.comSubject: Re:

Re: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread Nick Hayer
Try CONTAINS instead of BEGINSWITH Make sure you have at least one crlf [a bunch would not hurt] at the end of the filter file. -Nick Todd wrote: I created a filter with the string BODY0BEGINSWITHimg src=""> The declude.cfg goes like this GIFINBODYFILTER filter

[Declude.JunkMail] Nigerian Spam

2005-12-07 Thread Brian
Anyone have a list of keywords that effectively stops the Nigerianspam emails that you would be willing to share? Thanks, Brian

RE: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread John Carter
Would adding an extra filter linebe in order? Such as: BODY 0 BEGINSWITH lt;IMG src=""> John C From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin BilbeeSent: Wednesday, December 07, 2005 2:09 PMTo: Declude.JunkMail@declude.comSubject: RE: [Declude.JunkMail] CBL:Fw:

Re: [Declude.JunkMail] HoldAnalyzer

2005-12-07 Thread Declude
Darin, I am extremely interested in your app ... Will you be announcing the release via this forum? TIA Doris Dean - Original Message - From: Darin Cox [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Tuesday, December 06, 2005 5:12 PM Subject: Re: [Declude.JunkMail]

RE: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread Dan Horne
The declude.cfg goes like this Try putting it in the global.cfg. The declude.cfg is for Declude system settings, not test definitions. (Unless that was a typo, in which case, you already know this). --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail

RE: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread Erik
Using CONTAINS will trap a lot of real email if that is the only line in your filter. Could try this and set up the $default$.junkmail to HOLD so you can monitor the filter for false positives: SKIPIFWEIGHT 125 --your delete weight MAXWEIGHT 70 --your hold weight BODY END NOTCONTAINS

Re: [Declude.JunkMail] HoldAnalyzer

2005-12-07 Thread Darin Cox
Hi Doris, Yes we will. We'll announce it once it's ready at the end of the month. Darin. - Original Message - From: Declude [EMAIL PROTECTED] To: Declude.JunkMail@declude.com Sent: Wednesday, December 07, 2005 3:33 PM Subject: Re: [Declude.JunkMail] HoldAnalyzer Darin, I am

Re: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread Nick Hayer
Erik wrote: Using CONTAINS will trap a lot of real email if that is the only line in your filter. There best way is with combo filters but that was not his question :) -Nick Could try this and set up the $default$.junkmail to HOLD so you can monitor the filter for false positives:

Re: [Declude.JunkMail] CBL:Fw: news

2005-12-07 Thread Scott Fisher
I caught a change in the headers. Some have parens and some have brackets around the IP. Use this. HEADERS END NOTCONTAINS 192.168. All of them that I have seen fail CMDSPACE. So this is a good countermeasure: TESTSFAILED END NOTCONTAINS CMDSPACE - Original Message - From: Erik

Re: [Declude.JunkMail] Nigerian Spam

2005-12-07 Thread Scott Fisher
What I use is listed on my website here: http://it.farmprogress.com/declude/Multiline.htm I'll look for various indicators of a 419 and must fail 4 of them to get weighted. (mailfrom a webemail system / subject / body filters/ Upper case subject). It is very CPU intensive (lots of body

AW: [Declude.JunkMail] Bugfix: Imail 8.22 and ICS 2.02 released

2005-12-07 Thread Goebbels, Bernd \(LDS\)
hi, we're using imail 7.15, does anybody know if this is effected too? bernd goebbels LDSNRW duesseldorf germany -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Darrell ([EMAIL PROTECTED]) Gesendet: Mittwoch, 7. Dezember 2005 17:15 An: