RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

2006-09-19 Thread David Barker
No, NONSTANDARDHDR is only needed in the virus.cfg if you want to turn this vulnerability test off. David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Monday, September 18, 2006 10:32 PM To:

RE: [Declude.JunkMail] Way to filter bogus FRMOM domains ?

2006-09-19 Thread IS - Systems Eng. \(Karl Drugge\)
I was using a FROMFILE, subtracting a fairly large amount, and was getting stuff past it with from the forging domains. Obviously, not the best way to do it, but it worked well for the past few years. I've got a two new files using the suggestions from yesterday, one for GOOD-REVDNS adding a

[Declude.JunkMail] automated response

2006-09-19 Thread Richardson, John E.
This is an automated reply. I will be out of the office on Tuesday, September 20 and will return on Wednesday, September 21. I will begin returning messages as soon as possible on Wednesday. Thank you. John Richardson Microcomputer Support Services Washington State Community College --- This

RE: [Declude.JunkMail] California Regional Intranet

2006-09-19 Thread Chuck Schick
Title: Message We don't block there IPs but we do have them on a high weight. I have seen nothing but spam come out of there. Chuck SchickWarp 8, Inc.(303)-421-5140www.warp8.com -Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin

[Declude.JunkMail] Spam Spike

2006-09-19 Thread Chris Anton
Hi All, We have recently gone from processing 30,000 emails daily to 85,000 daily. 75,000 are getting caught by Declude Message Sniffer (I love this combo). There are a total of 300,000 attempted RCPT TOs daily. 1) Has anyone experienced recent spikes like this? How can I reasonably handle

Re: [Declude.JunkMail] California Regional Intranet

2006-09-19 Thread Kim Premuda
-- Original Message -- From: Kevin Bilbee [EMAIL PROTECTED] This IPS seems to be very friendly with the Spammers. What are your thoughts about blocking their entire assigned IP range?? California Regional Intranet, Inc. is a San Diego, CA based ISP

Re: [Declude.JunkMail] Spam Spike

2006-09-19 Thread Darrell \([EMAIL PROTECTED])
Comment's inline, Darrell Chris Anton writes: 1) Has anyone experienced recent spikes like this? How can I reasonably handle this? Yes, we have very often see signifigant swings in spam. How to handle it is a good question. That typically depends on what the spam campaign is. We

RE: [Declude.JunkMail] Spam Spike

2006-09-19 Thread Craig Edmonds
Hi Chris, You should also consider using declude hijack even though that only catches spammers using the smtp server. It only takes 1 idiot client to make the password easy to guess and bang, spammer sits and uses your server without you really knowing until you get blacklisted. Kindest

Re: [Declude.JunkMail] Spam Spike

2006-09-19 Thread Chris Anton
Darrell, We are averaging 40 to 50% on the processor. I was just surprised because in 3 years we haven't seen a spike this large. Most of them are dictionary style. But since they aren't from the same IP, I don't think the imail 2006 dictionary feature would help us. Thoughts? --- This

Re: [Declude.JunkMail] Spam Spike

2006-09-19 Thread Scott Fisher
I say about 25% more spam yesterday than last Monday (9-11) - Original Message - From: Chris Anton [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Tuesday, September 19, 2006 11:31 AM Subject: [Declude.JunkMail] Spam Spike Hi All, We have recently gone from processing

Re: [Declude.JunkMail] California Regional Intranet

2006-09-19 Thread xx-xx- --x--x
Declude's gateway software ships with an automated block list. Default is 3 mail from the same IP with a weight of 40 blocks the IP for 14 days. On 9/19/06, Kim Premuda [EMAIL PROTECTED] wrote: -- Original Message --From: Kevin Bilbee [EMAIL PROTECTED]This

RE: [Declude.JunkMail] Spam Spike

2006-09-19 Thread IS - Systems Eng. \(Karl Drugge\)
Getting pelted here... Mostly from cinci.rr.com... Karl Drugge -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, September 19, 2006 2:29 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Spam Spike

Re: [Declude.JunkMail] Spam Spike

2006-09-19 Thread Darrell \([EMAIL PROTECTED])
Chris, Are the bulk of your users local to the server or gatewayed? Darrell --- invURIBL - Stop spam at its source.. SURBL/URIBL integration with Declude. http://www.invariantsystems.com Chris Anton writes: Darrell, We are averaging 40 to 50% on

[Declude.JunkMail] ASSP

2006-09-19 Thread Don Brown
There were a couple of recent posts from folks who had recently implemented ASSP. We have to do the same due to the vulnerability in Imail 8.22. I'd appreciate any comments, suggestions, etc. OFF LIST, from those who have already fell in the holes, etc. Thanks, Don Brown - Dallas, Texas

Re: [Declude.JunkMail] Spam Spike

2006-09-19 Thread Chris Anton
Hi Darrell, 80% of our users are local, 10% are Gatewayed, 10% are remote. The 85,000 daily are inbound. -Chris --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be

RE: [Declude.JunkMail] ASSP

2006-09-19 Thread Harry Vanderzand
I am interested in this also. Maybe it can be on list? Harry Vanderzand inTown Internet Computer Services 519-741-1222 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Tuesday, September 19, 2006 3:03 PM To:

Re: [Declude.JunkMail] ASSP

2006-09-19 Thread xx-xx- --x--x
Maybe you should run your assp gateway against the Declude interceptorOn 9/19/06, Harry Vanderzand [EMAIL PROTECTED] wrote:I am interested in this also.Maybe it can be on list?Harry Vanderzand inTown Internet Computer Services519-741-1222 -Original Message- From: [EMAIL PROTECTED]

Re: [Declude.JunkMail] ASSP

2006-09-19 Thread Darrell \([EMAIL PROTECTED])
To the best of my knowledge Declude Interceptor is really no different than the regular version of Declude packaged into a gateway. The real benefit of Interceptor is that you are no longer coupled to Imail/Smartermail in the gateway environment. From my testing you had all of the same files

[Declude.JunkMail] Spamcop blocked message but not blocked

2006-09-19 Thread Panda Consulting S.A. Luis Alberto Arango
Today I found this in a message (declude logs) Msg failed SPAMCOP (Blocked - see http://www.spamcop.net/bl.shtml?216.9.248.51; I verified why was this address blocked and found out that Spamcop site says 216.9.248.51 not listed in bl.spamcop.net Verification was done 5 hours after the blocked

RE: [Declude.JunkMail] ASSP

2006-09-19 Thread Jay Sudowski - Handy Networks LLC
The only real difference is COST!!! $12,500 for more than 5,000 users - PER YEAR. Wowza ... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, September 19, 2006 5:27 PM To: declude.junkmail@declude.com Subject: