Re: [Declude.JunkMail] Best Sniffer Weights

2006-01-30 Thread Bonno Bloksma
Hi, Sniffer is verry reliable. Place it above the weight you use to mark messages as probable spam en below your weight for holding. If you want you can have different weights for the different catagories, see below I score the travel catagorie lower as we are a travel related school. So wha

RE: Re[2]: [Declude.JunkMail] [OT] Exchange2Aliases setup question

2006-01-30 Thread Goran Jovanovic
Dave, I have done exactly what you are trying to do. For the authentication I did the following. Create an ID on the target system (say LDAP-companyname) with a password that does not expire Create the same ID on your IMail/Declude box (I am assuming that it is not part of the target domain) wit

Re[4]: [Declude.JunkMail] [OT] Exchange2Aliases setup question

2006-01-30 Thread Sanford Whiteman
> Also, My impression is that this may be an authentication issue. How can we > get a username and password into that connection string? It's both. You need to get the right LDAP container, as in my previous e-mail. And the ex2a script needs to run in the context of a user whose id and passwor

Re[4]: [Declude.JunkMail] [OT] Exchange2Aliases setup question

2006-01-30 Thread Sanford Whiteman
> Please explain the two "dc=" entries. I took "dc=" to mean the AD > Domain Controller. Not sure why there would be two dc= entries in a > system with one domain controller. dc in LDAPspeak stands for "domain component"; it is used to merge the LDAP namespace with the DNS namespace, sometime

Re: Re[2]: [Declude.JunkMail] [OT] Exchange2Aliases setup question

2006-01-30 Thread Dave Doherty
Also, My impression is that this may be an authentication issue. How can we get a username and password into that connection string? -d - Original Message - From: "Sanford Whiteman" <[EMAIL PROTECTED]> To: "Dave Doherty" Sent: Monday, January 30, 2006 6:04 PM Subject: Re[2]: [Declu

Re: Re[2]: [Declude.JunkMail] [OT] Exchange2Aliases setup question

2006-01-30 Thread Dave Doherty
Are you sure this is a valid LDAP context in your setup? No, I'm not. Part of the problem is it's not my Exchange box. It belongs to a client. I'm working with his consultant, a software developer who is not strong on LDAP. Please explain the two "dc=" entries. I took "dc=" to mean the AD D

RE: [Declude.JunkMail] Best Sniffer Weights

2006-01-30 Thread Marc Catuogno
I have it at just over 1/3 of my delete weight, but I would suggest the you use comment first before you implement any significant weight... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Anton Sent: Monday, January 30, 2006 4:56 PM To: Declude.Junk

Re[2]: [Declude.JunkMail] [OT] Exchange2Aliases setup question

2006-01-30 Thread Sanford Whiteman
> cscript exchange2con.vbs > LDAP://mail.<>.com/cn=users,dc=<> Traditionally, this would take the form ...cn=users,dc=example,dc=com -- not ...cn=users,dc=. Are you sure this is a valid LDAP context in your setup? --Sandy Sanford Whiteman, Chief Techno

Re: [Declude.JunkMail] Best Sniffer Weights

2006-01-30 Thread Dave Doherty
I value the test quite highly, and rate it 70% of my "hold or divert" weight. -Dave Doherty Skywaves, Inc. - Original Message - From: "Chris Anton" <[EMAIL PROTECTED]> To: Sent: Monday, January 30, 2006 4:56 PM Subject: [Declude.JunkMail] Best Sniffer Weights Hi all. We just instal

Re: [Declude.JunkMail] [OT] Exchange2Aliases setup question

2006-01-30 Thread Dave Doherty
cscript exchange2con.vbs LDAP://mail.<>.com/cn=users,dc=<> <>.local <>.com (Exchange2con.vbs is my adaptation that prints results to the console for test purposes. Internally, it is a direct copy except for that, and of course it doesn't have the -nc switch.) -d - Original Message ---

[Declude.JunkMail] Best Sniffer Weights

2006-01-30 Thread Chris Anton
Hi all. We just installed message sniffer tonight and are working on tweaking it. What are your recommendations for best weights? Also, suggestions on other settings welcomed. Thanks! -Anton --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the

Re: [Declude.JunkMail] ALLRECIPS

2006-01-30 Thread Sanford Whiteman
> Does anyone know if the %ALLRECIPS% variable contains bcc and cc > info? Yes; yes. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude

Re: [Declude.JunkMail] [OT] Exchange2Aliases setup question

2006-01-30 Thread Sanford Whiteman
> Do you have any suggestions for troubleshooting? Please post the full command line that you're using. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plu

[Declude.JunkMail] [OT] Exchange2Aliases setup question

2006-01-30 Thread Dave Doherty
Hi Sandy -   I'm trying to use Exchange2Aliases for the first time, and I can't seem to get it working.   The server is Exchange 2003, in case that makes a difference.   From my mailcache, outside the firewall, I get (null): An operations error occurred   I disabled the script's write to re

[Declude.JunkMail] ALLRECIPS

2006-01-30 Thread David Sullivan
Does anyone know if the %ALLRECIPS% variable contains bcc and cc info? I asked support and they told me "The list of recipients is taken from the message envelope, not from the message headers. The list of all recipients shows all recipients listed in the envelope; it is a comma-delimited list."

Re: [Declude.JunkMail] IPFILE vs REMOTEIP

2006-01-30 Thread Matt
As Scott pointed out, IPFILE will work on the same number of hops that Declude is configured for, so it is possible that you could be scanning multiple hops.  IPFILE also does not support SKIPIFWEIGHT or other tweaks to end processing of a filter.  In other words, it always runs.  A custom filt

RE: [Declude.JunkMail] IPFILE vs REMOTEIP

2006-01-30 Thread Goran Jovanovic
That sounds like IPFILE will use more resources since it is going to test up to HOPHIGH whereas REMOTEIP will have to be invoked in a filter file but it is a single test.   Goran Jovanovic Omega Network Solutions   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Beha

Re: [Declude.JunkMail] IPFILE vs REMOTEIP

2006-01-30 Thread Scott Fisher
One difference I know of, is that if you use a HOPHIGH parameter, IPFILE will search more hops. Tehrefore with a HOPHIGH and IPFILE an email with forged headers could trip the test. REMOTEIP only uses the last hop. - Original Message - From: Goran Jovanovic To: Declude.Junk

[Declude.JunkMail] IPFILE vs REMOTEIP

2006-01-30 Thread Goran Jovanovic
Hi,   Is there any performance benefit of using an IPFILE lookup vs a REMOTEIP lookup?   Is there any consensus of which option would be better to use to subtract some weight from a good mail?   I am looking into this as I have some mail coming from a server with no REVDNS and a HELOB

RE: [Declude.JunkMail] Recurring Quemgr Issues again

2006-01-30 Thread GlobalWeb.net Webmaster
Although I did have a few issues with Declude in the beginning when switching to v3.x., I know for a fact this IS NOT a Declude issue; (I had QueueMgr issues while using Declude v2.x also.) The email is hitting spool, being processed by Declude perfectly, placed back in spool, and then just sittin

RE: [Declude.JunkMail] Recurring Quemgr Issues again

2006-01-30 Thread GlobalWeb.net Webmaster
a big part of me can't wait - the migration part of me doesn;t want to go thru it, but I know it needs to be done     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David BarkerSent: Sunday, January 29, 2006 11:38 PMTo: Declude.JunkMail@declude.comSubject:

[Declude.JunkMail] 'Nigerian Sales'

2006-01-30 Thread Nick Hayer
Morning.. Below is a sample email - which I classify as Nigerian sales. I am having a tough time flagging them as the come from generally generally legit accounts, have no links, etc.  I have a filter that kinda works but no question a lot slips thru. Can anyone suggest a way I can get these?