Gotcha.
I've been using SMTP32.exe (not the daemon).
I just wanted to check because every time I make the change it stops delivery (even
after I roll the SMTP service within Imail, which does start up successfully).
b
-- Original Message --
From: "R. Sco
I gotcha.
That could be a problem.
We do have about 5000 + web mail users.
Could this explain why when I make the changes email stops being
delivered?
I've checked the hold(s) and there is nothing being held, but maybe the
processing is delaying delivery?
b
-Original Message-
From: Jo
again.
b
-Original Message-
From: Sanford Whiteman [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 2:06 AM
To: Brian Cunningham
Subject: Re: SPAMCOP:Re: [Declude.JunkMail] HiJack Not Working ?
> I made these changes and restarted services.
> But then I stopped receiv
Should I be using the SMTP32.exe or the SMTPd32.exe for this process?
Thanks.
b
-Original Message-
From: Sanford Whiteman [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 2:06 AM
To: Brian Cunningham
Subject: Re: SPAMCOP:Re: [Declude.JunkMail] HiJack Not Working ?
> I m
I've made the changes below, but the SMTP service on Imail wouldn't
start back up.
b
-Original Message-
From: Sanford Whiteman [mailto:[EMAIL PROTECTED]
Sent: Thursday, March 27, 2003 2:06 AM
To: Brian Cunningham
Subject: Re: SPAMCOP:Re: [Declude.JunkMail] HiJack Not Worki
I've made the changes, but did not make the registry change.
I'll let you guys know what happens.
In regards to the web messaging possible trap, Do I really need to up
the limits for hijack?
It's always been my understanding that web messaging shouldn't send out
as much email as frequently than
The reverse dns is because of a nat'ing scheme we have behind two firewalls and a load
director (posts in the past have already described our config).
The freaking SpamCop is because I apparently have Spammers sending an incredible
amount of spam through our web messaging (i.e. bypassing hijack
Scott,
I made these changes and restarted services.
But then I stopped receiving emails.
When I reverted back, I'm now receiving emails again.
Any thoughts?
Thanks.
b
-- Original Message --
From: "R. Scott Perry" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PR
Will renaming declude.exe to smtp32.exe cause problems with junkmail or virus?
Do I need to rename or make a copy of declude.exe as renamed?
b
-- Original Message --
From: "R. Scott Perry" <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Date: Wed, 26 Mar
I've got you up until the "DAISYCHAIN ipsmtp.exe" point.
Do you want me to rename the two files and then add the daisychain line above to the
config file of hijack?
Thanks.
b
-- Original Message --
From: "R. Scott Perry" <[EMAIL PROTECTED]>
Reply-To: [EM
Thanks Scott.
I've emailed you the file.
We do have a few ALLOWIP's, but I they are for IP's we own.
I checked the W log files and it looks like they are coming in through web messaging
(god knows how they are sending that much email through web messaging) under several
IP's ranging from Niger
I've checked, and the Hijack is registered.
The config is set to:
RELAYTHRESHOLD1 10 20
RELAYTHRESHOLD2 30 60
And the log files have not held anything today. Everything went through
as "OK" with juat a couple not local users.
But I see that [EMAIL PROTECTED] now has about 300 outgoin
:25
SMTP-(0B6C) >RCPT To:<[EMAIL PROTECTED]>03:26 15:25
SMTP-(0254) Connect whitlock.com [209.48.126.252:25] (1)03:26 15:25
SMTP-(0B6C) 250 2.1.5 [EMAIL PROTECTED]03:26 15:25
SMTP-(0B6C) >RCPT To:<[EMAIL PROTECTED]
Any
help or guidance would be greatly appreciated.
Thanks.
b
Brian
Cunningham
What's strange is that the only thing consistent around all of the spam emails is the
IP address 169.207.38.237, which is listed with SpamCop.
Should declude pick that up? I've got spamcop listed as an automatic hold, but
somehow he keeps getting through.
Thanks.
b
-- Original Messa
Here's another example:
03:12 15:59 SMTPD(2842009C) [10.9.8.51] connect 169.207.38.237 port 4345
03:12 15:59 SMTPD(2842009C) [169.207.38.237] HELO 208.253.112.160
03:12 15:59 SMTPD(2842009C) [169.207.38.237] MAIL FROM: <[EMAIL PROTECTED]>
03:12 15:59 SMTPD(2842009C) [169.207.38.237] RCPT TO: <[EMA
Here you go:
03:12 18:35 SMTPD(0F9200BE) [169.207.38.237] HELO 208.253.112.160
03:12 18:35 SMTPD(0F9200BE) [169.207.38.237] MAIL FROM: <[EMAIL PROTECTED]>
03:12 18:35 SMTPD(0F9200BE) [169.207.38.237] RCPT TO: <[EMAIL PROTECTED]>
03:12 18:35 SMTPD(0F9200BE) [169.207.38.237] RCPT TO: <[EMAIL PROTECT
I've got several held emails from a spammer trying to use our system for
relay.
I've got the box locked down to only accept relay from "authenticated"
users, but somehow this guy got through.
Luckily, I've got hijack on the box, which has blocked all of his
emails.
Here's an example of the email
<>
Is there a limit on the number of addresses that I can blacklist within
a FROMFILE?
Thanks.
b
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED]
19 matches
Mail list logo
