RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted

2008-01-24 Thread John T (lists)
> If the user authenticates then all tests are bypassed if WHITELIST AUTH is > set ON in the global.cfg Not quite true. This is only true if "PREWHITELIST ON" is set in the global.cfg file. Otherwise, externals do run, but no action is taken by Declude. > Since Declude's whitelisting bypasses a

RE: [Declude.JunkMail] Message authenticator

2008-01-24 Thread John T (lists)
Out of the box, not that I am aware of. It is recorded in the Imail SMTP log. This however would be a good feature request for Declude. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Wednesday, January 23, 2008 5:05 PM To: declude.junkmail@declude.com Subj

RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted

2008-01-24 Thread John T (lists)
2 years ago, I would have had a dozen replies by now and even possible a nice discussion going on. Where is everybody? John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Monday, January 21, 2008 1:05 PM To: declude.junkmail@declude.com Subject

[Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted

2008-01-21 Thread John T (lists)
I am trying to figure out how to add a line in the header of a message to indicate it is over xKB in size with that incoming message being whitelisted via authenticated sender. Example, user1 on the local Imail server sends a message to user2 on the local Imail server, hence the email is white

RE: [Declude.JunkMail] Hardware Upgrade

2007-12-21 Thread John T (lists)
Processing email is more CPU and memory and storage driven than seen with databases. Yes, there is a lot of I/O, but that is fairly small footprints (unless you have a lot of IMAP or webmail users with lots of very large mail boxes) which is easily handled by modern hard drive, speed depending upon

[Declude.JunkMail] CommTouch FP reporting

2007-11-24 Thread John T (lists)
There was a discussion back in March about improving the way FPs are reported to CommTouch. What is the current recommended method for reporting FPs? John T --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and typ

RE: [Declude.JunkMail] SPAMDOMAINS update for the att conglomerate

2007-10-26 Thread John T (lists)
omerate > > > John, > > Can you list multiple REVDNS on a single line when using spamdomains? > > For example > > @bellsouth.net.bellsouth. isp.att. > > Thanks, > > Keith > > -----Original Message- > From: [EMAIL PROT

RE: [Declude.JunkMail] Test or filtering option for authenticated messages

2007-10-12 Thread John T (lists)
> I'll explain what I'm doing: instead of using IMail's copyall function for > archival, which BTW is very resource intensive, I use Declude's COPYTO Please explain. The Imail copyall function simply adds the copyall configured email address to the envelope of the email as it is received. As such,

RE: [Declude.JunkMail] OT: Setting Up DNS Service on Server 2003

2007-10-08 Thread John T \(lists\)
1) My policy and the way I setup my servers and clients is that the local DNS service on the Imail server is ONLY used for Imail and related software. I leave the OS to use what ever DNS server is used normally on the network. 2) On your forwarder question, yes, if the forward look up zone is for

RE: [Declude.JunkMail] SMTP_DELIV_FAILED

2007-10-08 Thread John T (lists)
Are you using DNS caching, turn that off. It is on the QueueManger service properties. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers > Sent: Monday, October 08, 2007 4:37 PM > To: declude.junkmail@declude.com > Subject: Re: [Declu

RE: [Declude.JunkMail] Decludeproc stops for no reason

2007-10-04 Thread John T \(lists\)
Since Hobbies are something we do when we have the time, my hobby is sleeping. ;-)> Oh, sorry, your question. When this happens, is the service actually stopped? (Is decludeproc listed in Task Manager?) When you try to restart it, what error is displayed or logged in the Windows Event log? Wha

RE: [Declude.JunkMail] What am I doing wrong with Revdns filter?

2007-09-08 Thread John T \(lists\)
> Are being caught as spam ... I have in file I call REVDNSFILE > > > REVDNS -99 ENDSWITH .ebay.com In addition to what Darrell suggested about putting the log into debug, make sure there is no space after .com in your filter. John T --- This E-mail came from the Declude.JunkMail mailing li

RE: [Declude.JunkMail] RE: David, Linda...

2007-09-04 Thread John T \(lists\)
Rename the hijack.cfg to hijack.cfg.txt. You will then need to stop and restart the decludeproc service. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Gufler Markus > Sent: Tuesday, September 04, 2007 6:50 AM > To: declude.junkmail@declude.c

[Declude.JunkMail] SPAMDOMAINS update for the att conglomerate

2007-08-20 Thread John T (lists)
Does anyone have an updated listed for SPAMDOMAINS test for the AT & T conglomerate? I know there is .att. and bellsouth.com and sbc.com but what else is there that could originate from an att.com REVDNS? John T --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, jus

RE: [Declude.JunkMail] FW: Problems

2007-08-05 Thread John T \(lists\)
Post a log snippet showing the errors or send off list. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Todd Richards > Sent: Sunday, August 05, 2007 2:19 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] FW: Problems > >

RE: [Declude.JunkMail] Spam Increase?

2007-08-03 Thread John T \(lists\)
I actually saw it ramping up since last weekend and every day there have been a change or 2 in the spam to keep it from being caught. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Todd Richards > Sent: Friday, August 03, 2007 2:35 PM > To: d

RE: [Declude.JunkMail] Excel files in zip files spreading

2007-07-28 Thread John T \(lists\)
@declude.com Subject: Re: [Declude.JunkMail] Excel files in zip files spreading John, It's just another one of the viruses from the Storm botnet. Same guys as the ones sending fake greeting card viruses and PDF stock spam among other things. Matt John T (lists) wrote: I am not sure what i

[Declude.JunkMail] Excel files in zip files spreading

2007-07-28 Thread John T \(lists\)
I am not sure what is the purpose yet, but I am catching a lot of emails this morning with a blank subject, Thunderbird in the header, attached zip file and the zip file contains an single xls file. THESE ARE NOT LEGIT EMAILS. Any body else seeing this and know what they are, virus or spam?

[Declude.JunkMail] Fidelity Independent Adviser

2007-07-18 Thread John T \(lists\)
First time I am seeing this one, caught by Sniffer. Any one have experience with their newsletters? Legit? Ham? Spam? John T --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The a

RE: [Declude.JunkMail] Possible Declude Memory Leak???

2007-07-07 Thread John T \(lists\)
While I am not getting the errors you have seen, I have noticed that the number of handles is extremely high, right now it showed over 67K. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Anton Sent: Friday, July 06, 2007 3:58 PM To: declude.junkmail@declude.com

RE: [Declude.JunkMail] More accidental whitelisting

2007-05-28 Thread John T \(lists\)
The point you have missed is that just because YOU are using Imail 2006.2 does not mean every one else is. Declude is doing exactly as it should, checking to see if an aliases.txt file exists and if so use it. As for the option of turning whitelisting based on the address book on or off, uh,

RE: [Declude.JunkMail] accidental whitelisting

2007-05-24 Thread John T \(lists\)
Put the log into debug mode. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Imail Admin Sent: Thursday, May 24, 2007 5:42 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] accidental whitelisting Hi All, We're in the process of tesing JM 4.x as a

RE: [Declude.JunkMail] OT: server monitoring

2007-05-22 Thread John T \(lists\)
That is also why in my monitoring server I have a modem connected to an analog phone line. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Tuesday, May 22, 2007 5:29 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] OT: server moni

RE: [Declude.JunkMail] OT: server monitoring

2007-05-22 Thread John T \(lists\)
I have switched from WhatsUp to Network Monitor by Numara Software, the same company that sells Track IT. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Monday, May 21, 2007 7:47 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] O

RE: [Declude.JunkMail] all_list.dat ?

2007-05-17 Thread John T \(lists\)
OK, would some one at Declude give a good swift kick to your list server? John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > John T (lists) > Sent: Thursday, May 17, 2007 12:31 PM > To: declude.junkmail@declude.co

RE: [Declude.JunkMail] all_list.dat ?

2007-05-17 Thread John T \(lists\)
I think we all fully understand that now Andrew. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Colbeck, Andrew > Sent: Thursday, May 17, 2007 9:54 AM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMail] all_list.dat ? > > Th

RE: [Declude.JunkMail] all_list.dat ?

2007-05-17 Thread John T \(lists\)
I think we all fully understand that now Andrew. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Colbeck, Andrew > Sent: Thursday, May 17, 2007 9:54 AM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMail] all_list.dat ? > > Th

RE: [Declude.JunkMail] all_list.dat ?

2007-05-17 Thread John T \(lists\)
I think we all fully understand that now Andrew. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Colbeck, Andrew > Sent: Thursday, May 17, 2007 9:54 AM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMail] all_list.dat ? > > Th

RE: [Declude.JunkMail] PCRE

2007-05-10 Thread John T \(lists\)
Linda, thanks for the Laugh. How are you at making coffee? I haven't had my morning cup yet. OOPS, mornings over already. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Linda Pagillo > Sent: Thursday, May 10, 2007 11:59 AM > To: declude.jun

RE: [Declude.JunkMail] Possible bug after upgrading to 4.3.46

2007-04-25 Thread John T \(lists\)
Behalf > Of David Barker > DB> Sent: Tuesday, April 24, 2007 10:56 AM > DB> To: declude.junkmail@declude.com > DB> Subject: RE: [Declude.JunkMail] Possible bug after upgrading to > 4.3.46 > > DB> > DB> > DB> Hopefully I will have a status on time by

RE: [Declude.JunkMail] Possible bug after upgrading to 4.3.46

2007-04-24 Thread John T \(lists\)
4.3.46 Have you been given any estimate when a fix will be available? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Tuesday, April 24, 2007 10:10 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Possible bug after upgrading to 4.3.46 In

RE: [Declude.JunkMail] Possible bug after upgrading to 4.3.46

2007-04-24 Thread John T \(lists\)
? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Tuesday, April 24, 2007 3:28 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Possible bug after upgrading to 4.3.46 Just so everyone else is clear, if you are using IPBYPASS in the Global.CFG

RE: [Declude.JunkMail] Possible bug after upgrading to 4.3.46

2007-04-24 Thread John T \(lists\)
] Possible bug after upgrading to 4.3.46 No changes were made to the HELO for IMail, can you send some log lines to verify this so I can look into it ? _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Wednesday, April 18, 2007 11:46 AM To

[Declude.JunkMail] Possible bug after upgrading to 4.3.46

2007-04-18 Thread John T \(lists\)
Since upgrading to 4.3.46 yesterday, I have noticed that Declude is not honoring the IP Skip list when it comes to what server it records for the HELO. I have a IPBYPASS line for each of my incoming gateway servers. %REVDNS% is correctly recording from the server before my gateway servers.

RE: [Declude.JunkMail] Warning re: "DECLUDE - CRITICAL VIRUS SCANNING UPDATE"

2007-04-16 Thread John T \(lists\)
The upgrade that came out today, 4.3.46, was specifically and pointedly only to correct a problem with the built-in AVG scanner that was created by a change AVG recently made. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Monday, April 16, 2007 7:5

RE: [Declude.JunkMail] Warning re: "DECLUDE - CRITICAL VIRUS SCANNING UPDATE"

2007-04-16 Thread John T \(lists\)
FYI, this was resolved about 3 hours earlier and was reported on the Declude Virus list. As others have reported, re-download the upgrade installer and the missing file will be there. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Doherty Sent: Monday, April

RE: [Declude.JunkMail] Vulnerability in RPC on Windows DNS Server Could Allow Remote Code Execution

2007-04-13 Thread John T \(lists\)
But from what I read last night, it is only serious if some one is running a MS DNS server that is not behind a firewall or otherwise has the range of ports in question open from the Internet. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of >

RE: [Declude.JunkMail] Spam gateway/proxy...

2007-04-11 Thread John T \(lists\)
My Imail server is behind 3 Windows 2003 servers running IIS SMTP virtual server which are acting as a gateway. They all have ORF installed and ORF is blocking about 75% of the spam and viruses coming in purely by simple rules and policies. John T > -Original Message- > From: [EMAIL PROT

RE: [Declude.JunkMail] Imail Anti-spam

2007-04-11 Thread John T \(lists\)
What, David, biased? Shock. Who would have thought. ;-)> John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > David Barker > Sent: Wednesday, April 11, 2007 9:33 AM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMail] Imail Anti-sp

RE: [Declude.JunkMail] SNMP / Smarter Mail 4

2007-03-21 Thread John T \(lists\)
Better get out the fluoride toothpaste. ;) Sorry, could not resist. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Michael Cummins > Sent: Wednesday, March 21, 2007 2:09 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] S

RE: [Declude.JunkMail] PCRE FILTERING

2007-03-14 Thread John T \(lists\)
> > This was an old, old feature request/bug fix from back in the > > Scott days, where it was desired not include encoded base64 > > I requested this as a change long ago for two reasons: > > 1) To avoid false positives where search text matches the MIME or UUENCODE > formatting > > 2) To provi

RE: [Declude.JunkMail] IMail 2006.2 Known Issues with Declude...

2007-03-07 Thread John T \(lists\)
No problems seen on my server. John T > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike > Hardrick > Sent: Wednesday, March 07, 2007 2:01 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] IMail 2006.2 Known Issues with Declude...

RE: [Declude.JunkMail] Help: Domain not found

2007-02-26 Thread John T \(lists\)
At least for the night. John T   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Monday, February 26, 2007 8:19 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Help: Domain not found DUH !!! I read this several time and did

RE: [Declude.JunkMail] Decludeproc.ex Faulting Applicaction

2007-02-19 Thread John T \(lists\)
What does the Declude Junkmail or Virus log say? John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Luis Alberto Arango E. Sent: Monday, February 19, 2007 7:51 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Decludeproc.ex Fa

RE: [Declude.JunkMail] NOTIFY=FAILURE,DELAY

2007-02-15 Thread John T \(lists\)
Some one requested a delivery receipt. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Thursday, February 15, 2007 2:55 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] NOTIFY=FAILURE,DELAY Can someone explain what this

RE: [Declude.JunkMail] [Declude.JunkMail] IMail 2006.2

2007-02-12 Thread John T \(lists\)
tch product that includes the IMail Server. This includes products such as its Collaboration Suite packages. - Original Message - From: "John T (lists)" <[EMAIL PROTECTED]> To: Sent: Monday, February 12, 2007 2:16 PM Subject: RE: [Declude.JunkMail] [Declude.JunkMail]

RE: [Declude.JunkMail] [Declude.JunkMail] IMail 2006.2

2007-02-12 Thread John T \(lists\)
AFAIK, there is no change in the SMTP service in IMail 2006.2 compared to IMail 2006.1, so there will be no problem running any version of Declude on 2006.2 that runs on 2006.1. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Stephan Sent: Mo

RE: [Declude.JunkMail] [Declude.JunkMail] IMail 2006.2

2007-02-12 Thread John T \(lists\)
What vulnerability in 2006.1 are you referring to? AFAIK, there is none. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N Sent: Monday, February 12, 2007 9:44 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] [Declude.JunkMa

RE: [Declude.JunkMail] Need hep - mail server sending out stock reports email

2007-02-07 Thread John T \(lists\)
Going aGoogling found that the Intel LANDesk uses a file called ssm.exe and there are a couple of programs listed as monitors using it, so be careful before just deleting that file. Exactly where was the file? Since Howard is running IMail 8.15 this means that his server has been compromise

RE: [Declude.JunkMail] Need hep - mail server sending out stock reports email

2007-02-07 Thread John T \(lists\)
Since you are using Declude, start using Hijack NOW! That is for starters. Review the logs to see where the IP is and block that IP. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard Smith (N.O.R.A.D.) Sent: Wednesday, February 07, 2007

RE: [Declude.JunkMail] SmarterMail Admins - Relay Hole

2007-02-07 Thread John T \(lists\)
Well, might be news to you but Imail has the same problem. There was discussion about this on the Imail list awhile back and IIRC Kevin said it is now on the list of features to be added. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michae

RE: [Declude.JunkMail] Hijack with latest Declude 4.2.23 & Imail

2007-02-05 Thread John T \(lists\)
Deccon.exe is a Declude file no longer used. You restart the DecludeProc.exe. John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Wiegers Sent: Monday, February 05, 2007 8:25 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Hijack

RE: [Declude.JunkMail] Slipping through Declude

2007-02-03 Thread John T \(lists\)
What version of Declude? Is that the entire message? Have you reviewed the IMail SMTP log for the message, and check of a queue run just happened to fire at that time? John T -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson Sent: Saturday,

RE: [Declude.JunkMail] Specific filter for individual users

2007-01-24 Thread John T \(Lists\)
Correct. Now, some advice. I have created a script I use when ever I make changes to tests including adding or removing. This script then updates the Global.cfg file and the $default$.junkmail file as well as any other .junkmail files that are per user or per domain. If you are going to use per

RE: [Declude.JunkMail] Windows 2003 X64 Operating System

2007-01-16 Thread John T \(Lists\)
There is some one on the Imail Forum that was complaining about lack of support in Imail for x64. You may want to do a search on that to review it. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Me

RE: [Declude.JunkMail] roconner -can he be stopped???

2007-01-05 Thread John T \(Lists\)
There was a major problem caused by roconner on the Declude Virus list today. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED

RE: [Declude.JunkMail] Valid Senders - Best Declude Practices

2006-12-28 Thread John T \(Lists\)
Does SmarterMail allow you to create aliases for a domain, such as [EMAIL PROTECTED] is an alias for [EMAIL PROTECTED] John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Message- > From: [EMAIL PR

RE: [Declude.JunkMail] Solution for tooo much junkmail?

2006-12-22 Thread John T \(Lists\)
> I'd like to be more "proactive" and go on an education crusade to provide > folks with the knowledge of how to detect if their systems are infected and > what to do about it, but I have no idea of what to look for or what software > to use to "fix" it. You're going to educate: 1. Little ole' Mrs

RE: [Declude.JunkMail] Upgraded to Security Suite - Whitelist stopped working.

2006-12-22 Thread John T \(Lists\)
You said it is being skipped. What does the junkmail log say? John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > S.J.Stan

RE: [Declude.JunkMail] WAY OT: Registry Repair

2006-12-19 Thread John T \(Lists\)
ERD Commander will let you edit the registry directly as well. However, their licensing scheme now makes use of their more recent versions prohibitive. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) -

RE: [Declude.JunkMail] WAY OT: Registry Repair

2006-12-18 Thread John T \(Lists\)
Did you try right clicking on it and going into permissions? How about restarting in Safe Mode and then accessing it? John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) -Original Message- From

RE: [Declude.JunkMail] Interesting ORF stats

2006-12-15 Thread John T \(Lists\)
EMAIL PROTECTED] On Behalf Of Nick > Hayer > Sent: Friday, December 15, 2006 9:42 AM > To: declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] Interesting ORF stats > > > Hi John, > > John T (Lists) wrote: > > I have 3 gateway servers running IIS with ORF

[Declude.JunkMail] Interesting ORF stats

2006-12-14 Thread John T \(Lists\)
I have 3 gateway servers running IIS with ORF. These are my MX records for all my domains. ORF has identified and blocked 71% of incoming email on my primary gateway. ORF has identified and blocked 81% of incoming email on my secondary gateway. (Interesting in that my primary and secondary carry t

[Declude.JunkMail] OT: Interesting Discussions

2006-12-14 Thread John T \(Lists\)
Please, no one take this the wrong way, it is only meant in fun: I actually miss the twice annual entertaining discussions on the Imail forum between Scott and Len with Sandy added for spice. Popcorn anyone? ;-)> John T eServices For You "Life is a succession of lessons which must be lived to

RE: [Declude.JunkMail] OT: "Message" Storage

2006-12-14 Thread John T \(Lists\)
The Imail CopyAll account will work, along with Imail Rules on that account. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Beha

RE: [Declude.JunkMail] testfailed in filters

2006-12-09 Thread John T \(Lists\)
> Not really, my goal is doing some analysis on TESTA (see why high weight > messages did not fail testA) , using an action on Filter2 (copy or route), > not to add weight AH, now see, if you had answered my question that I posted 9 hours ago... Now that we know the WHY... Using Declude in that

RE: [Declude.JunkMail] testfailed in filters

2006-12-09 Thread John T \(Lists\)
> SKIPIFWEIGHT 100 would skip for weight over 100 > SKIPIFMINWEIGHT 0 would skip for weight under 0. So actually, to be self explainitory, you would want: SKIPIFNOTWEIGHT 0 John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802

RE: [Declude.JunkMail] testfailed in filters

2006-12-09 Thread John T \(Lists\)
> the manual says that MINWEIGHTTOFAIL is the total weight attributed by the > filter > I need the weight ON STARTING the filter OOPS, your right. Forgot that. > What I want, is a test of messages that did NOT fail TestA, but do have a > TOTAL weight > 10 To do what, run the filter or cause a f

RE: [Declude.JunkMail] testfailed in filters

2006-12-09 Thread John T \(Lists\)
> I've requested a SKIPIFMINWEIGHT addition to filters, but no luck getting > that added. > I would think the code to add it would be extremely similiar to add since > the SKIPIFWEIGHT for a max weight already exists. Sounds like you just flip > that > to a <... Scott, I do not see any difference

RE: [Declude.JunkMail] testfailed in filters

2006-12-09 Thread John T \(Lists\)
Weight "tests" are last. What are you trying to do? Maybe something like this? MINWEIGHTTOFAIL 10 TESTSFAILED END CONTAINS TESTA John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Message- > Fro

RE: [Declude.JunkMail] Undocumented Directive 4.x

2006-12-04 Thread John T \(Lists\)
I used to know what sleep is. But a couple years ago Scott convinced me it is a four letter word so I stopped getting so much, keeping it to a bare minimum. Hey wait a minute, isn't he getting more of that four letter word now? John T eServices For You "Life is a succession of lessons which must

[Declude.JunkMail] Filter format question

2006-12-04 Thread John T \(Lists\)
I am trying to come up with a filter that will check to see if a HELO only contains a TLD and a domain but not a host or child domain. Example of HELO: Domain.com trigger 1.domain.comnot triggered 1.ustrigger 1.1.us trigger Basically,

RE: [Declude.JunkMail] How Accurate is Sniffer?

2006-11-30 Thread John T \(Lists\)
Make sure you forward all false positives to them for review. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary > St

RE: [Declude.JunkMail] Deborah campaign changed

2006-11-30 Thread John T \(Lists\)
FYI, from day one on Sunday, I was seeing subject lines with at least 6 different first names before wrote: so AFAIK there is no such thing as a Debora spam campaign, I have called it the " wrote:" campaign which Sniffer has been catching since Sunday night. John T eServices For You "Life

[Declude.JunkMail] NOTSTARTSWITH

2006-11-24 Thread John T \(Lists\)
Back in February, NOTSTARSWITH was mentioned by some as a requested "filter type" Any progress on getting this added? John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) --- This E-mail came from the Declude.JunkMa

RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?

2006-11-17 Thread John T \(Lists\)
to add a little extra for Sniffer-IP. Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 02:41 PM To: declude.junkmail@declude

RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?

2006-11-17 Thread John T \(Lists\)
414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 12:57 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGH

RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?

2006-11-17 Thread John T \(Lists\)
1 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 11:34 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT

RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?

2006-11-17 Thread John T \(Lists\)
ld do this in a single filter? Best Regards Andy Schmidt Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (Lists) Sent: Friday, November 17, 2006 11:34 AM To: declude.junkmail@declude.com Subject:

RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?

2006-11-17 Thread John T \(Lists\)
Was never changed. Look at the directives. END means end the filter. What you should have been using is MAXWEIGHT at the top, or STOPATFIRSTHIT. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) -Ori

RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?

2006-11-17 Thread John T \(Lists\)
END still works the way Scott intended it to work, ENDs the filter at that point with no fail. No need to add STOP. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Message- > From: [EMAIL PROT

RE: [Declude.JunkMail] Filter 'END' statement in 4.3.14 flushes WEIGHT?

2006-11-17 Thread John T \(Lists\)
Nope, never was that way. You want to use MAXWEIGHT for that. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of C

RE: [Declude.JunkMail] AUTOREVIEW OFF

2006-11-10 Thread John T \(Lists\)
I believe it goes in the declude.cfg and any changes to the file require a restart of the Decludeproc service. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Message- > From: [EMAIL PROTECTED]

RE: [Declude.JunkMail] Paid Subscription Black Lists

2006-11-09 Thread John T \(Lists\)
Message Sniffer and invURIBL are very worthwhile/ John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Anton > Sent: Th

RE: [Declude.JunkMail] Re: blocking GIF attachments again ...

2006-11-08 Thread John T \(Lists\)
Yes, if you block GIF attachments in Declude Virus, if a HTML email as embedded GIFs, that email will be blocked.   John T eServices For You   "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882)     -Original Message

RE: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread John T \(Lists\)
What I do is send those grey ones to HOLD and then use fpReview to directly view them and take appropriate action. Much faster and easier than using a mailbox. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > ---

RE: [Declude.JunkMail] Re: WEIGHT for a File Attachment

2006-11-06 Thread John T \(Lists\)
Yes, that is what the other Dave was refereeing to. John T eServices For You "Life is a succession of lessons which must be lived to be understood." Ralph Waldo Emerson (1802-1882) > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David > Dodell > Sen

RE: [Declude.JunkMail] Can someone help?

2006-11-02 Thread John T \(Lists\)
> To turn on auditing (which I never understand, why it's not turned on by > default in Windows) - MS gives you quite a run-around: First, in the NT 4.0 days, auditing could easily use up resources and create a huge security log file depending upon the configuration of the security log file. Seco

RE: [Declude.JunkMail] Can someone help?

2006-11-02 Thread John T \(Lists\)
Accessing the services page requires authentication to the OS since specific credentials are required to start/stop services. If you have tweaked the IIS security for the IAdmin page, this may be what is happening. John T eServices For You "Life is a succession of lessons which must be lived to

RE: [Declude.JunkMail] bad header mods by Declude

2006-10-25 Thread John T \(Lists\)
Hello Herb and welcome to the Declude JunkMail list. This is a known issue with spam that has "improper" coding in the header and has been discussed at length. Here are some links to the existing discussions: http://www.mail-archive.com/declude.junkmail@declude.com/msg30444.html http://www.mail-a

RE: [Declude.JunkMail] bad header mods by Declude

2006-10-25 Thread John T \(Lists\)
tegration, and Log Parsers. > > - Original Message - > From: "John T (Lists)" <[EMAIL PROTECTED]> > To: > Sent: Wednesday, October 25, 2006 11:32 AM > Subject: RE: [Declude.JunkMail] bad header mods by Declude > > > Gee, some one not reading pos

RE: [Declude.JunkMail] RE: Declude's To-Do List

2006-10-25 Thread John T \(Lists\)
To be sure, my next post to the list is not at you. It is for your bosses. John Tolmachoff Owner, eServices For You [EMAIL PROTECTED] 626-737-6003 Fax 626-737-6004 > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David > Barker > Sent: Wednesday, Oct

RE: [Declude.JunkMail] RE: Declude's To-Do List

2006-10-25 Thread John T \(Lists\)
Exactly. It needs to be either available at a reasonable price of all of us to use or it should not show up in the headers of those that are prevented from using it. Goes back to my point when it first became available: Declude wetted our appetite about ZEROHOUR and then when it became available t

RE: SPAM-WARN: Re: [Declude.JunkMail] RE: On RFC Violation - Declude allows attachments and Virus to pass through untouched and unscanned

2006-10-25 Thread John T \(Lists\)
Darin, let me put it plainly. If you put "WHITELIST AUTH" line in the Global.cfg file any user the sends out through your server via smtp and who authenticates to the server will be Whitelisted. In other words, SMTP AUTH whitelisting is and has been working. I have provided clear proof and others

RE: SPAM-WARN: Re: [Declude.JunkMail] RE: On RFC Violation - Declude allows attachments and Virus to pass through untouched and unscanned

2006-10-25 Thread John T \(Lists\)
> The Auto whitelist IMail 2006 is the issue I was referring to a few days ago > in regards to wanting users that SMTP AUTH to be whitelisted. Were you were > saying that this was working with 2006 and Declude 4.x? "WHITELIST AUTH" line in the Global.cfg is working as expected. The Auto Whitelis

RE: [Declude.JunkMail] bad header mods by Declude

2006-10-25 Thread John T \(Lists\)
Gee, some one not reading posts to the list for the last week? John T eServices For You "Seek, and ye shall find!" > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Herb > Guenther > Sent: Wednesday, October 25, 2006 8:02 AM > To: declude.junkmail@decl

RE: [Declude.JunkMail] OT: imail q files magically dissapearing

2006-10-24 Thread John T \(Lists\)
Only problem his, how do you know what the recipient email address is without parsing either the Declude or SMTP logs?   Oh, BTW, no the to address in the headers is not always the email address the message is destined to.   John T eServices For You   "Seek, and ye shall find!"

RE: [Declude.JunkMail] Different issue - Process flow question

2006-10-23 Thread John T \(Lists\)
> 1. Is it not true that when properly installed and running, that Declude > handles EVERY message that passes through the mail server? Every message that (in the case of Imail) SMTPD32 service hands it. > 2. There is only one GLOBAL.CFG. Correct. > 3. Every message processed should attempt to

RE: [Declude.JunkMail] On RFC Violation - Declude allows attachments and Virus to pass through untouched and unscanned

2006-10-19 Thread John T \(Lists\)
> But Declude let RfcNoCr.eml pass straight through without calling the virus > scanners, because Declude did NOT see an attachment. Also, because Declude > did not see an attachment, Declude did not ban the .EXE extension. OK, question. What happened then when that message got to your email clien

RE: [Declude.JunkMail] Licensing problem after upgrade

2006-10-12 Thread John T \(Lists\)
What file is used and for what. Declude.cfg and Global.cfg - Original Message - From: John T (Lists) To: declude.junkmail@declude.com Sent: Wednesday, October 11, 2006 1:23 AM Subject: RE: [Declude.JunkMail] Licensing problem after upgrade   The de

  1   2   3   4   >