Not that I can think of, the real advantage is it shuts off all internal
validations, AVG which has already stopped, SNF and CT which will stop anytime
soon.
-Original Message-
From: Andy Schmidt [mailto:andy_schm...@hm-software.com]
Sent: Thursday, April 18, 2013 1:43 AM
To: Declude.Ju
Thanks David,
So, OTHER than Sniffer, any OTHER advantages of using the HOSTS trick vs. the
Bypass key?
-Original Message-
From: David Barker [mailto:david.bar...@mailsbestfriend.com]
Sent: Thursday, April 18, 2013 1:09 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail]
If internal SNF is still ON then it can conflict with external Message Sniffer
by grabbing the port which SNF uses. By using our fix will ensure internal SNF
is turned OFF. If using the bypass key has everything OFF then that is fine too.
-Original Message-
From: Andy Schmidt [mailto:and
So - is there any advantage of using the hosts file trick (to invalidate the
license server IP address) http://mailsbestfriend.com/declude-fix
vs. using the special "bypass" license code?
Does one enable more functions that the other?
-Original Message-
From: David Barker [mailto:david.b
Yes Internal Sniffer is no longer a valid option. Need to switch to external.
-Original Message-
From: Andy Schmidt [mailto:andy_schm...@hm-software.com]
Sent: Thursday, April 18, 2013 12:06 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] No one at Declude?
Uh - but wi
Uh - but with that code, the internal SNF is turned off?
So one has to configure Sniffer has an external test with a separate Sniffer
license code?
-Original Message-
From: Stephan Chayer [mailto:scha...@intrasoft.net]
Sent: Wednesday, April 17, 2013 5:37 AM
To: Declude.JunkMail@declude.
Phew - thanks for posting this.
This WAS scary. Within a few minutes I had hundreds of spam emails in my
inbox... Stopped the SMTP service and Queue service. This CODE did seem to help!
-Original Message-
From: Stephan Chayer [mailto:scha...@intrasoft.net]
Sent: Wednesday, April 17, 2013
I'm going to share some old information from 2009 that I put together
for integrating ClamAV. Note that I cannot confirm at this moment
whether these directions are perfectly accurate for the most recent code
available, so please update this if you find issues. _Please also pay
close attention to
On 2013-04-17 15:20, Nick Hayer wrote:
Is the data in truncate.gbudb.net duplicated in Sniffer?
No.
Each SNF node has it's own view of the world.
The truncate bl has an aggregate view from all SNF nodes.
That means that it's good to use truncate be
This list server went gone down last week.
Be sure to send David an email and get on his new list.
If this goes down, there won't be any communication between those of us
who are left.
David Barker [david.bar...@mailsbestfriend.com]
I have declude patched and running with Sniffer and Clam. (I do
Matt
I've been told if you have sniffer running and you block SNF RETURN CODE
049 AND 055 you block most virus's.
I ended up putting different weights for the return codes years ago.
I score them high enough to delete on weight only and as well delete on
the names
Here is my setup from global confi
Pete,
Is the data in truncate.gbudb.net duplicated in Sniffer?
Thank you
-Nick
MadRiverAccess.com|Skywaves.net Tech Support
US/Canada 877-873-6482 or International +1-802-229-6574
Emergency Support 24/7: supp...@skywaves.net
General and Non-Emergency support ticket:
http://www.skywaves.net/cont
So what needs to be done with ClamAV?
-Original Message-
From: Matt
Sent: Wednesday, April 17, 2013 11:24 AM
To: Declude.JunkMail@declude.com
Subject: [Declude.JunkMail] ***DECLUDE NO-AUTHENTICATION KEY***
It seems clear at this point that the failure of Declude's licensing
system is caus
Hi Darin,
I don't have stats but in manual checks it seems to be about 50% of my spam.
stepvalve.net
Creation date: 16 Apr 2013 16:13:00
Expiration date: 16 Apr 2014 08:13:00
kunstkennis.com
Updated Date: 17-apr-2013
Creation Date: 16-apr-2013
shoputc.com
Creation date: 16 Apr 2013 19:24:13
Ex
It seems clear at this point that the failure of Declude's licensing
system is causing widespread havoc for their customers, and they are not
responding to support issues, or any issues at all, and that they are in
fact out of business. Therefore I am going to share the key that allows
Declude to
FYI... I spot-checked some of the domains involved in what we were seeing.
Many were two or three years old, so the new domain test would not work on
them.
On the report, there are log parsers that will do that for you, including
Grep and Sawmill. We don’t use those, but import our logs into SQL
Sorry for the confusion: This is the correct VERSION. Please update your
Sniffer Configs. (Sorry I missed this lack of sleep trying to keep everyone
afloat) I am going to post this same information to the MBF Message List.
SNIFFER external NONZERO
On 2013-04-17 13:52, SM Admin wrote:
> Why the negative weight on Caution? What’s the logic behind that?
The Caution result is based on a special case with a small amount of
information:
Sniffer is saying: "This IP is new, and the first message or two that it
sent was spam. The current message di
Why the negative weight on Caution? What’s the logic behind that?
Thanks,
Ben
From: Pete McNeil
Sent: Wednesday, April 17, 2013 10:47 AM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] No one at Declude?
On 2013-04-17 13:36, David Barker wrote:
SNIFFER
For IMail that was true, but I switched to SM last fall and that no longer
appears to be the case. There is no license code in my declude.cfg file and
the cod line says "SmarterMail can removed this line".
Ben
-Original Message-
From: Randy Armbrecht
Sent: Wednesday, April 17, 2013 10:43
On 2013-04-17 13:43, Katie La
Salle-Lowery wrote:
Just
to be clear – 020 should be the truncate and 040 the caution
(opposite of below) according to what Pete sent (http://www.armresearch.com/support/articles/software/snfServer/core.jsp),
right?
On 2013-04-17 13:36, David Barker
wrote:
SNIFFER
external NONZERO
"C:\Smartermail\Declude\SNF\SNFClient.exe"
20 0
SNIFFER-CAUTION
e
License code is in the declude.cfg file
Sincerely,
Randy A.
-Original Message-
From: SM Admin [mailto:imailad...@bcwebhost.net]
Sent: Wednesday, April 17, 2013 1:27 PM
To: Declude.JunkMail@declude.com
Subject: Re: [Declude.JunkMail] No one at Declude?
Hi,
I haven't seen anyone else
1. Makes sure that SNF is OFF in the \Diags.txt
2. These are my suggested values (please note that you path if
copy/paste) also NONZERO weight can be 20 or 25. Also if you want to break out
the NONZERO codes that is fine too.
SNIFFER external
Hi,
I haven't seen anyone else comment on this post and I wondered if it was one
of the perpetual licenses. I would test it but I can't recall or figure out
how to change the license code manually. So how do I do that?
Thanks,
Ben
-Original Message-
From: Stephan Chayer
Sent: Wednesday
I do know. Let me put it this way, it is up not for the benefit of customers.
From: Nick Hayer [mailto:n...@madriveraccess.com]
Sent: Wednesday, April 17, 2013 12:43 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] No one at Declude?
Well the only thing that has not gone aw
In short. That is the reason.
From: Nick Hayer [mailto:n...@madriveraccess.com]
Sent: Wednesday, April 17, 2013 12:23 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] No one at Declude?
>There is no-one at Declude, not one person involved in operations. No
>engineers, no
Not many IPs in that range in use yet according to SenderBase, but those
that are are very bad.
We’ve been seeing a lot of spam traffic where SenderBase didn’t have any
measurements on the IP yet that we were seeing, but had a number of others
in the same subnet... all bad.
Darin.
From: Katie
On 2013-04-17 13:06, Katie La
Salle-Lowery wrote:
X-MessageSniffer-Rules:
20-0-0--1-f
Message Sniffer tagged this message with a truncate result.
Result code 20.
Normally we recommend that a Truncate result shoul
We run an older Declude perpetual license, so we weren’t affected by this
issue, and don’t use Postini, so it’s just the new spam nets over the past
week or so that have affected us.
Darin.
From: Katie La Salle-Lowery
Sent: Wednesday, April 17, 2013 12:56 PM
To: Declude.JunkMail@declude.com
Sub
There are a lot of new spam nets that have just been turned up over the past
few days. Volumes more than doubled for us, with a lot slipping through.
We’ve added quite a few class Cs to our firewall blocks this week as we see
new ones light up that are entirely owned by a spammer. That’s helped c
Well the only thing that has not gone away is this list for some reason.
Even the site went dark for awhile. Why have the the site up, phones on,
list work but kill the license server?David - do you have any insight?
Thank you
-Nick
MadRiverAccess.com|Skywaves.net Tech Support
US/Canada 877
Ours went down as well this morning. Declude stopped processing with a
licensing error.
I have left several phone messages.
Todd
From: "Nick Hayer"
Sent: Wednesday, April 17, 2013 10:47 AM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.Jun
>There is no-one at Declude, not one person involved in operations. No
>engineers, no sales people, no support people no management nothing.
That is too bad. Who would have guessed this would happen.
So why did Declude die? You were its VP - thoughts?
Is Chuck still around by chance?
http://ww
So how do we get this key?
We have been a Declude customer for over 10 years.
We are using smartermail.
H
From: "David Barker"
Sent: Sunday, April 14, 2013 9:10 PM
To: Declude.JunkMail@declude.com
Subject: RE: [Declude.JunkMail] No one at Declude?
Look
There is no-one at Declude, not one person involved in operations. No
engineers, no sales people, no support people no management nothing. The
company right now simply exists as an entity.
The only help you are going to get from MBF.
David
From: Nick Hayer [mailto:n...@madriveraccess.
Thanks David for the vote of confidence. Who do we contact at Declude for
customer support? They seem to be radio silent for now - at least on this list.
Thank you
-Nick
MadRiverAccess.com|Skywaves.net Tech Support
US/Canada 877-873-6482 or International +1-802-229-6574
Emergency Support 24/7:
Just my 2c - users do not need to abandon the Declude product. Declude still
has tremendous value, hijack, routing email, rules etc all you need is a way
to keep Declude running and support which MBF can help you do.
The solution to this tragedy is Declude+Message Sniffer.
David Barker
Mail’s
Hi John -
Thanks - I actually talked with Linda on Monday afternoon and she got me set
"back up" with a working installation of Declude.
What about you?
Todd
__
Todd Richards
Director of Technology
National Network, LLC.
Email: to...@nnepa.com
Toll
On 2013-04-17 11:11, John Doyle wrote:
> You also should go to message sniffer and email them for help on getting
> message sniffer to run standalone.
Message Sniffer can run standalone on both IMail and SmarterMail.
On IMail, use the MINIMI (minimal IMail Shim) plugin:
http://www.armresearch.com
Todd
It appears that there is no one at Declude
The server that handles this apparently is down and has been for a week
or so.
Go to mail list archive using the link below
Go to the spam version of declude and sort the messages by date
Go back a week or so and read the threads
There is some contact
Is there a current sample global.cfg available? I haven't looked through
mine in awhile and I may have some outdated RBLs, etc. Would like to see
the current sample just to get an idea of what may have changed.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, ju
Use this key: CODE 28607230-BF21-4CDE-A59B-A451CC7C9CA0
-Message d'origine-
De : SM Admin [mailto:imailad...@bcwebhost.net]
Envoyé : 17 avril, 2013 2:43
À : Declude.JunkMail@declude.com
Objet : Re: [Declude.JunkMail] No one at Declude?
Apparently I was too quick on the draw as this li
43 matches
Mail list logo
