RE: [Declude.JunkMail] No one at Declude?

Hi David, Would you mind explaining your hosts trick? Not how a host file works but why this will circumvent licensing Thank you -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and

Re: [Declude.JunkMail] No one at Declude? topic change - gbudb

Pete, Is the data in truncate.gbudb.net duplicated in Sniffer? Thank you -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket: http://www.skywaves.net/cont

RE: [Declude.JunkMail] No one at Declude?

2:26 PM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] No one at Declude? Ours went down as well this morning. Declude stopped processing with a licensing error. I have left several phone messages. Todd ---- From: "Nick Hayer" Sent:

RE: [Declude.JunkMail] No one at Declude?

o get from MBF. David From: Nick Hayer [mailto:n...@madriveraccess.com] Sent: Wednesday, April 17, 2013 11:47 AM To: Declude.JunkMail@declude.com Subject: RE: [Declude.JunkMail] No one at Declude? Thanks David for the vote of confidence. Who do we contact at Declude for customer support? They

RE: [Declude.JunkMail] No one at Declude?

Thanks David for the vote of confidence. Who do we contact at Declude for customer support? They seem to be radio silent for now - at least on this list. Thank you -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7:

RE: [Declude.JunkMail] why have spam scores jumped?

Thank you Andrew. Every time you write something its an education. Much appreciated. -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket: http://www.skywa

RE: [Declude.JunkMail] invisible attachments? - change topic

e improved performance, less disk i/o and automated updates for the Decludeproc engine, all_list.dat, filters etc. What gets updated will be decided by the mail admin. David Barker VP Operations Declude Your Email security is our business 978.499.2933 office 978.988.1311 fax dbar...@declude.com

RE: [Declude.JunkMail] invisible attachments? - change topic

Hi Linda, What are the plans for newer versions of Declude? -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket: https://www.skywaves.com/content/sec

Re: [Declude.JunkMail] Time to upgrade and to what?

Sm has a free version - I'd say grab it and check it out. Regarding any performance bottlenecks - probably the folks at SM would be the most help. -Nick MadRiverAccess.com|Skywaves.net Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywa

Re: [Declude.JunkMail] Performance issues with SM 8.2 w Declude

I have it on a VM - vmware 4.1 - no issues at all. Why not just PTV it now - give it more ram and processors in the migration and see what happens? -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.

Re: [Declude.JunkMail] regular expressions and "IS"

BODY. CONTAINS. Bla bla Is that what you are looking for? -Nick On Aug 9, 2011, at 3:26 PM, "David Barker" wrote: > > The expression is the IS > > Can you post a few examples of what you trying to catch ? > > -Original Message- > From: Rick Davidson [mailto:rdavid...@nat.com] > S

RE: [Declude.JunkMail] white list or positive weight for a specific To address?

ync Remote-BackUp Solutions! Web Hosting - E-Mail - Spam/Virus Gateway Services Hi-Speed DSL and Wireless Internet - T-1/T-3's PC Support - Networking - Virus/MalWare Removal 25% discount on most services for Non-Profits! Call us today! From: Nick Hayer [mailto:n...@madrivera

Re: [Declude.JunkMail] white list or positive weight for a specific To address?

An easy way to whitelist these in your global.cfg > WHITELISTFROM@declude.com -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket: https://www.skywa

re: [Declude.JunkMail] Time to upgrade and to what?

I have the latest versions of both; I bought SM to dump Imail but found that some customers are simply resistant to change. So rather than risk losing them I am keeping Imail up to date. Privately Imail maybe receptive to price matching SM [give them a call?] - so that is a 3rd option. -Nick

re: [Declude.JunkMail] FROMNOMATCH returning high scores

I haven't seen it on FROMNOMATCH but have seen it elsewhere; specifically when an external app throws an exception. Bottom line somewhere declude or some other app threw an exception - the wacko score is the result. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or Int

Re: [Declude.JunkMail] error 0xC0000142 smtp.exe

With declude.cfg you can allocate the # of threads - but what do your logs show? Are sending out a lot of email? Maybe there are other issues like the box needs more physical ram/processing power - does task mgr say all ik kool? Dunno the answer here - just giving you some ideas for things to

re: [Declude.JunkMail] OT: Web analytics

This will do what you want, does not require any code on the pages, and its free: http://www.mrunix.net/webalizer/ You just set up a config file and run the app with Windows scheduler. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Em

Re: [Declude.JunkMail] How do you use NOLEGITCONTENT and IPNOTINMX

try jackie99 MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket: https://www.skywaves.com/content/secure/support_ticket.htm --

Re: [Declude.JunkMail] How do you use NOLEGITCONTENT and IPNOTINMX

example, I weight Sniffer at 8, so I get a lot of spam that score 8. They're true spam, but the other tests don't confirm it and my delete threshold is 12 (although I would be happy to get just to 10 on these spams). Any suggestions welcome. Thanks, Ben From: Nick Hayer Sent:

re: [Declude.JunkMail] How do you use NOLEGITCONTENT and IPNOTINMX

the defs are in the junkmail manual https://www.declude.com/searchresults.asp?Cat=109 IPNOTINMX - The IPNOTINMX test is good for helping reduce false positives. By default, Declude JunkMail will subtract several points from the weighting system when an email does not fail this test (which is very

Re: [Declude.JunkMail] How do you read the Inv-Uribl log file?

It crashed - through an exception and either Declude was unsure of what to do with it or that was the score it returned.I have seen this happen when I was developing my own app. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emerge

re: [Declude.JunkMail] How do you read the Inv-Uribl log file?

maybe it scores bitmask results and 127.0.0.4 response is not tagged? -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket: https://www.skywaves.com/content/

re: [Declude.JunkMail] Sniffer settings

I suggest monitoring the sniffer hits and increase/decrease the scoring accordingly depending on the false positives you see. Ideally you should be combo'ing a sniffer hit w/other tests to maximize sniffers effectiveness. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482

Re: [Declude.JunkMail] How effective should Inv-Uribl be?

** In the inv-uribl log file I find references to multi.surbl.org, sbl.spamhaus.org, multi.uribl.com, and xx.countries.nerd.dk (where xx is a country code such as ru). All the lines that end in Total Weight = 0 don't list any tests at all - they just resolve the IP. Thanks

re: [Declude.JunkMail] How effective should Inv-Uribl be?

What uribl tests are you using and are you getting hits on them - check your logs.. I'm suggesting you may need different tests - the one you are using may have blacklisted you or are dead even... -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-22

re: [Declude.JunkMail] SSD vs HDD

Dunno what you are using for a controller but if you couple these drives as a controller cache with an adaptec 5805 for example the system will be wicked fast almost regardless of the hdd drives used - as long as they are enterprise class.. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Ca

Re: [Declude.JunkMail] weird processing of lists

Ben, No idea how to fix it - all I can suggest though is to run your log in debug mode and duplicate the problem. Then the logs may give you a clue as to what is going on. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Su

RE: [Declude.JunkMail] Large amount of hotmail, msn, aol, yahoo and other free account blacklisted servers

fyi - the 'X-Originating-IP" as well as "'X-AOL-IP" are the senders ip - they have no relation to yahoo or aol. What you can do with these ip's - which is what I do - is look up 'um up in blacklists.. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International

RE: [Declude.JunkMail] Good filter?

.@declude.com [mailto:supp...@declude.com] On Behalf Of Nick Hayer Sent: Monday, October 18, 2010 11:50 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Good filter? Hi David, I think it will FP though - Here is an example: http://eimages.ratepoint.com/7cb5f36dd6464c

RE: [Declude.JunkMail] Good filter?

ca1 cja244.larickcoppas.com/6878d778dcffdc763118115082cc190a3c0343 From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick Hayer Sent: Monday, October 18, 2010 8:53 AM To: declude.junkmail@declude.com Subject: re: [Declude.JunkMail] Good filter?

re: [Declude.JunkMail] Good filter?

Post a few of his/her base domains - just to be sure we will be taking about the same guy.. Thanks -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support ticket:

RE: [Declude.JunkMail] Declude queue alert

But we've since switched to SmarterMail. Does anyone know what to call instead of imail1.exe? Would it be the mailserver.exe file, located in the Program Files\Smarter Tools\SmarterMail\Service folder? Todd From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick Hayer

re: [Declude.JunkMail] Declude queue alert

Hi Harry, Below is a script I copied from the list long ago - edit as applicable for your setup, save it as a .vbs file and run it every 15 min or so -Nick fHold1 = "\\192.168.254.23\goofy\imail\spool" fHold2 = "\\192.168.254.23\goofy\imail\spool\proc" aMail = "e:\imail\imail1.exe " mFrom

RE: [Declude.JunkMail] Fine tuning Declude

Hi Michael, I guess this is best said - "let it go",,,Alligate is the the way to go in front of Declude - Contact them again - they probaby will be glad to set you up with at trial even of some sort, -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or Internationa

RE: [Declude.JunkMail] We have opened up truncate.gbudb.net

- Michael Cummins From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Nick Hayer Sent: Friday, April 30, 2010 11:00 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] We have opened up truncate.gbudb.net here ya go IP4R.GBUBD ip4r truncate.gbudb.net

RE: [Declude.JunkMail] We have opened up truncate.gbudb.net

here ya go IP4R.GBUBD ip4r truncate.gbudb.net 127.0.0.1 9 0 Above scores a 9 on a hit.. -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 Emergency Support 24/7: supp...@skywaves.net General and Non-Emergency support

re: [Declude.JunkMail] We have opened up truncate.gbudb.net

Hi Pete, Question - is this blacklist info already contained withing any Sniffer test? I am wondering about double dipping so to speak - if the info is within Sniffer which rulebase? -Nick MadRiverAccess.com|Skywaves.com Tech Support US/Canada 877-873-6482 or International +1-802-229-6574 E

re: [Declude.JunkMail] Missing Messages

maybe hijack is grabbing them? Look in the /spam2 dir -Nick From: "Scott Fosseen [Prairie Lakes AEA]" Sent: Wednesday, August 26, 2009 2:46 PM To: "decludejunkmail" Subject: [Declude.JunkMail] Missing Messages I am running SmarterMail 5 with declude.

RE: [Declude.JunkMail] Imail 11

SmarterMail. Its the way to go. Ver 6 will support ActiveSync [ as an addon] and the web interface is excellent. I have one remaining Imail server - 9x version - to convert.. -Nick From: "Chuck Schick" Sent: Tuesday, August 11, 2009 1:07 PM To: declude

re: [Declude.JunkMail] Upgrade 4.6.35 AVG not scanning - FIX

Was it not working? yawn. Never noticed. On my end AVG is superfluous behind Alligate. We just do not see a virii leakage. We run ClamD for phishing and I do not see in its logs any virus captures. -Nick From: "David Barker" Sent: Monday, June 01, 2009

Re: [Declude.JunkMail] BackScatter

Todd - I will second David on this - Alligate is the best gateway - no question about it - and it does integrate perfectly with Declude. -Nick David Barker wrote: Hi Todd, Alligate has way better greylisting capabilities than SmarterMail. SmarterMails implementation is somewhat dangero

Re: [Declude.JunkMail] Imail frowarding bypasses Declude JunkMail?

Kathy Leonard wrote: I have a number of people complaining about a lot of spam getting through to mailboxes. After checking, I found that these people either had Inbound rules copying messages or just forwarding to another mailbox outside the server. Hi Kathy, If you would post a header

Re: [Declude.JunkMail] Blacklist Based on TO Address?

Not sure if this is what you are asking - you could do something like this for a particular recip subject pairing: ALLRECIPS END NOTCONTAINS x SUBJECT END NOTCONTAINS xx REVDNS CONTAINS . -Nick David Barker wrote: No there is not. If you want to blacklist I would suggest using yo

Re: [Declude.JunkMail] country chain

Hi David, David Barker wrote: We may want to create a new test which would trigger if multiple countries are in the routing. Any thoughts would be welcome. I do not think it would add much value For example I have a Russian company that send all their email via Hong Kong. I suspect there ar

Re: [Declude.JunkMail] doprewhitelist

Hi David, Are there any new features, etc for Declude, soon to be released or planned? If so would you elaborate? -Nick David Barker wrote: Part of the interim release debug logging it will be removed for the actual release. David Barker VP Operations Declude Your Email security is

Re: [Declude.JunkMail] version 4.4.20

at the interim site provides the updates (release notes). As we have just put out the 4.4.20 I have not as of yet updated the .txt file, which I will do later today. David B -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Sunday, September

[Declude.JunkMail] version 4.4.20

Hi - Are there any release notes as to how this version differs from 4.4.18? Are these release notes posted on the Declude site? Thanks -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declud

Re: [Declude.JunkMail] Re:Declude vs Perry (ES)

no? Kindest Regards Craig Edmonds 123 Marbella Internet Services W: www.123marbella.com <http://www.123marbella.net/> E : [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Nick Hayer *Sent:* 09 September 20

[Declude.JunkMail] Re:Declude vs Perry

Hi David - Below was forwarded to me - as a long time Decluder I am very disappointed in seeing something like this - -Nick http://dozierinternetlawpc.cybertriallawyer.com/computer-lawyer DECLUDE, INC. AND DNSSTUFF, LLC. v. R. SCOTT PERRY DISTRICT OF MASSACHUSETTS (BOSTON) 1:08-cv-1107

Re: [Declude.JunkMail] OT: Alligate Problems (ES)

fyi - Alligate has started its own maillist - to join: [EMAIL PROTECTED] The mailing list address is [EMAIL PROTECTED] -Nick Dave Marchette wrote: Always copy and paste, and always don't allow a trailing space at the end of the domai

Re: [Declude.JunkMail] OT: Alligate Problems

Hi Scott, Scott Fosseen wrote: I guess I am looking for a word of encouragement from the alligate supporters out there that I should stay diligent or if there are any tips you can share. Alligate is unbelievable with what it does and with what little resource it uses. It is the way to go - be

Re: [Declude.JunkMail] Mail Pre-Processor recommendations

Colbeck, Andrew wrote: I use Alligate from Solid Oak Software, and I like it a lot. as do I. The really slick part is how it reduces bandwidth - it *very* accurately distinguishes spam etal before the DATA command thereby preventing the unwanted emails from ever being received.. Shameles

[Declude.JunkMail] Declude on Alligate

Fellow Declude users - . I have a small application that will allow Declude for Imail to run - without Imail - on an Alligate server. The result is Declude functionality on an Alligate gateway! The app is in production but before any formal release I am looking for a few folks to help me wi

Re: [Declude.JunkMail] 4.4.00 Released

Andre - Colbeck, Andrew wrote: David Barker said: DEC ADD Added date, Time, Email, Spool name, Weight and Tests failed to the BLKLST log I thinks its the recording to the blklst.txt file that lives in the \spool dir. I have forgotten the files purpose... -Nick Da

Re: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list

Hi Rick, Having a bad day? -Nick Rick Klinge wrote: Will you morons please remove me from your spam list? *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *Sent:* Monday, February 04, 2008 10:33 PM *To:* declude.junkmail@declude.com *Subject:* [Declude.JunkMail] re: [384-0F3A4F35-9

Re: [Declude.JunkMail] OT: Virus pb

Thinking along the lines of another scanner may find the virus 0 Have you tried http://housecall.trendmicro.com/ -Nick -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Monday, January 28, 2008 3:00 PM To: declude.junkmail@declude.com Sub

Re: [Declude.JunkMail] Warning re: "DECLUDE - CRITICAL VIRUS SCANNING UPDATE"

David, Do not take all these suggestions personal. You are our pinata - remember? :) -Nick David Barker wrote: >>- Pulled out the bad package Did this. - Rolled a new package (with an incremented version number) with the missing DLL, tested the package successfully and post

Re: [Declude.JunkMail] Spam gateway/proxy...

Hi Chuck, I use Alligate. It does some very fancy stuff prior to the 'data' command [among other things afterward] that on my system block 95% of incoming traffic prior to receiving the email. And this is not done with ip blacklists.. -Nick Chuck Schick wrote: Anyone using a spam g

Re: [Declude.JunkMail] PCRE FILTERING

fyi - #CIALIS ANYWHERE3 PCRE (?i:\bc.{0,2}[\|li1í\!].{0,[EMAIL PROTECTED],2}[\|li1í\!].{0,2}[\|i1í\!].{0,2}s) This one will false positive onclassifieds -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL

Re: [Declude.JunkMail] Image spam

Hi Scott, Scott Fisher wrote: Are there any end users who are using the VAMSOFT IMAGE SPAM AGENT tht would like to comment on it's effectiveness / processor utilization? it seems to not use much cpu; its effectiveness is ok. In case you are unaware it does not ocr the email, it just works on pr

[Declude.JunkMail] dns attacks today

fyi - http://www.darkreading.com/document.asp?doc_id=116685&WT.svl=news2_1 -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive

Re: [Declude.JunkMail] Interesting ORF stats

Hi John, John T (Lists) wrote: I have 3 gateway servers running IIS with ORF. These are my MX records for all my domains. ORF has identified and blocked 71% of incoming email on my primary gateway. ORF has identified and blocked 81% of incoming email on my secondary gateway. I see the secondari

Re: [Declude.JunkMail] New Reporting Tool

Thanks for sharing Karl, nice work! -Nick IS - Systems Eng. (Karl Drugge) wrote: The newest PERL script. Slices, dices, etc ... Throw it in a directory, edit a few environment variables at the top of the script, dump in a few Declude logs, run it, enjoy. Requires PERL, of course. Ad

Re: [Declude.JunkMail] Undocumented Directive 4.x

Any other undocumented's that you can share? :) -Nick David Barker wrote: Just an FYI you may find it useful, in the global.cfg: BLKLST ON Writes a text file to the \spool\blklst.txt containing the IP and weight of emails eg. 1.1.1.1 23 2.2.2.2 7 David Barker Director of P

Re: [Declude.JunkMail] New pattern

ED STATES->NICARAGUA->UNITED STATES->destination X-Declude-Skywaves-REVDNS: This message was sent from gadreel-24.cablenet.com.ni ([165.98.168.24]) X-Declude-Skywaves-Code: e X-Declude-Skywaves-Recipcount: 1 -Dave Doherty Skywaves, Inc. 97 Webster Street Worcester, MA 01603 508-425-717

Re: [Declude.JunkMail] Spamhaus

nothing - Matt with his trickery is adding more weight to a last hop that fails the test... -Nick Darin Cox wrote: Then what was wrong with my example? Darin. - Original Message - *From:* Matt *To:* declude.junkmail@declude.com

Re: [Declude.JunkMail] New pattern

can you post the headers from samples that were delivered on different days? Then we can help I betcha -Nick Dave Doherty wrote: Yes, it is similar. For some reason, sniffer doesn't seem to getting all of them. I wonder if something like FROM 10 CONTAINS %SUBJECT% might work -Dave Dohert

Re: [Declude.JunkMail] Clam AV Updates

Hi Mark, I just sent you off list my \share\clamav dir zipped up... -Nick Mark Reimer wrote: My daily.inc folder is missing from the clam directory. Could anyone please help me?   Mark Reimer IT System Admin American CareSource 972-308-6887   F

Re: [Declude.JunkMail] Spam not being caught

Scott Fisher wrote: I get over a 1000 spam a day from this spammer. If you don't have a pattern would you mind sending me off list a few of the ones you do receive from different days? I do not recognize this gut so I would like to see more of his product. -Nick ---Thi

Re: [Declude.JunkMail] Spam not being caught

is zombies effectively with any IP4r list. - Original Message - From: Nick Hayer To: declude.junkmail@declude.com Sent: Thursday, November 09, 2006 4:51 PM Subject: Re: [Declude.JunkMail] Spam not being caught So far -  and I have been hammered

Re: [Declude.JunkMail] Spam not being caught

tus: U X-IMail-Rule: H~x-imail-spam:xxx@ourdomain.com Data- X-IMAIL-SPAM-PHRASE  IT'S BUD X-UIDL: 463095290     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Thursday, November 09, 2006 11:31 AM To: declude.junkmail@declude.com Subject:

Re: [Declude.JunkMail] Spam not being caught

Hi Karl, Post a sample with full headers so we can see what the scofflaw is sending you -Nick Karl Hentschel wrote: Thanks for the tip, but unfortunately I am not using the Pro version of Declude so I cannot create my own filters. Are others being slammed with stock spam recently? Declud

Re: [Declude.JunkMail] declude not modifying subject line

Hi David F, David Franco-Rocha [ Declude ] wrote: The broken line terminators are not necessarily of the same type in a given message. In addition, they are not necessarily adjacent to each other (with leading whitespace or unprintable characters on a line).What may appear obvious to the eye

Re: [Declude.JunkMail] whitelisting based on rev dns

Craig Edmonds wrote: How can I whitelist based on Reverse DNS? REMOTEIP    WHITELIST    CIDR        64.4.240.0/20 REVDNS        WHITELIST    ENDSWITH    .paypal.com etc... -Nick   Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com     --- This E

Re: [Declude.JunkMail] Help with Configuration

Todd Richards wrote: Thanks Kevin. This is what I was wondering about, so I will look into how to implement. something like this: WEIGHTRANGE.SPAM.LOW        weightrange    x    x    10    12     && triggered  on a weight of 10 to 12 inclusive WEIGHTRANGE.SPAM.MID        weightrange   

Re: [Declude.JunkMail] How long is each test taking?

Chris Anton wrote: Hello... We are using declude 2.somethign... we are pegged at 100% processor usage and are wondering what is the best way to determine how long each test takes. Do you have filter 'optimizers'  in your filters eg - SKIPIFWEIGHT and STOPATFIRSTHIT in your filter files? -

Re: [Declude.JunkMail] picture spam

Matt wrote: Let me jump in here for a moment. You guys should have made a deal with Pete instead of CommTouch.  Sniffer blows it out of the water and he has no licensing restrictions.  IMO of course. mine too!  Sniffer does a very good job.. -Nick ---This E-mail came from the Decl

Re: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7

Harry, Please post to the list the details - Thanks -Nick chris wrote: Harry     Contact me off the list if you can, I would like to help     Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833  toll free

Re: [Declude.JunkMail] Newest version

This regex works \b(PHA)+([a-zA-Z]+(RMA))\b as well as this one for the other morph \b(PHA)+([a-zA-Z]+(RMACY))\b -Nick Ferrell Ard wrote: We are seeing a lot of email with the Subject line Subject: X-IMail-SPAM PHAujyRMA The KEY to the subject line is (1) 1st 3 letters are "always" PHA (2

Re: [Declude.JunkMail] IPBYPASS Broke?

: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] IPBYPASS Broke? Nick, Do you buy any chance have have this IP also covered by a whitelist entry of any type in your Global.cfg? Matt Nick Hayer wrote: To David at Declude - or anyone else... I have these lines in my global

Re: [Declude.JunkMail] IPBYPASS Broke?

Matt wrote: Nick, Do you buy any chance have have this IP also covered by a whitelist entry of any type in your Global.cfg? Nope. No where is it listed except on the IPBYPASS line - -Nick Matt Nick Hayer wrote: To David at Declude - or anyone else... I have these lines in my

[Declude.JunkMail] IPBYPASS Broke?

To David at Declude - or anyone else... I have these lines in my global config Declude 4.3.7: IPBYPASS12.152.254.14 XINHEADER X-Note: Sent from: [Revdns: %REVDNS%] [RemoteHostDomain: %REMOTEHOST%] [RemoteIP: %REMOTEIP%] [SenderHost: %SENDERHOST%] I received this email below where

[Declude.JunkMail] manual install of 4x

Is there a way to do this without the wizard? Thanks for any info -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.

Re: [Declude.JunkMail] Fw: New ClamAV "scam" database

Thanks much Bill, -Nick Bill Landry wrote: For anyone that is possibly running ClamAV for virus scanning, and is already taking advantage of the added "phish" detection provided by Steve Basford's phish.ndb, he has put together another database geared to tagging "scam" e-mails, including th

Re: [Declude.JunkMail] OT SNMP Monitor Program

we use http://www.jffnms.org/ -Nick dfn Systems wrote: Quiet times are good for off topic subjects Right? I need a Monitoring program that will show me bandwidth utilization of my dsl customers to help track down compromised/infected machines. Regular sniffer programs won't work because the

Re: [Declude.JunkMail] Commtouch, etc

Hi David, David Barker wrote: Nick, With regards to outstanding bugs I have a list which we are working on, and as you know I have committed to get these fixed as well That you have, and your participation on this list is greatly appreciated. I was only trying to suggest that the past couple

[Declude.JunkMail] Commtouch, etc

David, You have asked for some constructive feedback here regarding this new offering - I will not ask for a show of hands here :) but I bet a lot of folks are rolling their eyes simply because of the core Declude product and its outstanding bugs., inability to release a stable product, serv

Re: [Declude.JunkMail] Declude 4.3 - Commtouch trial ?

ahh like Razor? -Nick David Barker wrote: Darrell, It is not a DNS test. Commtouch analyzes large volumes of Internet traffic in real time. New spam and Malware outbreaks are identified as soon as they emerge, and recorded in the Commtouch Detection Center. The Commtouch Engine in Declude

Re: [Declude.JunkMail] Declude 4.3

Current Service Providers (ie. Before 1 June 06) are under no restrictions for using Declude; only the CommTouch add-in component. Excellent! Thanks for the reply - -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROT

Re: [Declude.JunkMail] Declude 4.3

David - at Declude - Would you kindly comment on this? Also on what is Declude 4.3? -Nick John T (Lists) wrote: I guess we all missed the following paragraph in the license agreement: 3.2.6 sub-license, rent, sell, lease, distribute, or otherwise transfer the Licensed Program save as p

Re: [Declude.JunkMail] Speaking of Decludes AVG scanner

Chris Asaro wrote: Try opening the diags.txt file in your \mailserver\declude directory. Check to see if you are receiving an invalid key code error. When I went to 4.20 I had no such error code however the evidently there was a one hence Declude ceased to function without warning. -Nick

Re: [Declude.JunkMail] F-Prot Licensing

Sorry but I have not been keeping up w/this thread - we no longer can use the desktop fpcmd.exe as we have been w/Declude without paying alot more $$?  Can we use the version we have and still get defs? -Nick Matt wrote: F-Prot doesn't care.  They don't do volume as a plug-in to mail ser

Re: [Declude.JunkMail] F-Prot Licensing

Don Brown wrote: What is the URL to Brian Burns' port? http://www.sosdg.org/clamav-win32/ -Nick Monday, July 17, 2006, 2:05:34 PM, Nick Hayer <[EMAIL PROTECTED]> wrote: NH> David Barker wrote: Declude has this process and functionality built in

Re: [Declude.JunkMail] F-Prot Licensing

David Barker wrote: Declude has this process and functionality built in to the Declude product which enables customers to use a command line scanners like ClamWin Brian Burns port called ClamAV supports clamd which is wicked fast [and free]. This is a different product from ClamWin. I had

[Declude.JunkMail] [Fwd: [0A6-0C4E22B9-4D5B] ZEROHOUR]

please do not hesitate to contact me either by email or call Toll free 1-866-332-5833 Ext.7008 Linda Pagillo Technical Support Engineer Declude - Your Email security is our businessT 978.499.2933 office 978.477.8930 efax [EMAIL PROTECTED] www.declude.com From: Nick Hayer <[EMAIL PROTECTED]&g

Re: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

Andy Schmidt wrote: Hi Dave, Sorry everyone -- my mistake. no biggie. That is what David, our pinada, is for. :) -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The

Re: [Declude.JunkMail] Country tests

Hi Mike, Here is my understanding of the 2 tests: If an email originates from a country it will fail the COUNTRY test If an email passes through a country it will fail the COUNTRIES test -Nick Mike N wrote: I looked in the 4.x Junkmail manual, and couldn't find an authoritative definition o

Re: [Declude.JunkMail] Latest All_LIst.dat file

There is a much more recent avail you can download from 'my account' on the declude site. If you cannot find it let me know and I will send it to you. -Nick Darrell ([EMAIL PROTECTED]) wrote: What is the latest all_list.dat file. Mine is dated 9/28/2005. I am seeing an issue with 67.111.13

Re: [Declude.JunkMail] upgrade to 4x

Hi Sandy, Sanford Whiteman wrote: I have been running 2.0.16 however it has a bug that external tests will double-dip; eg fail the same external test multiple times... I reported it to tech support with no resolution - so my only recourse is to run the latest ver. Is i

[Declude.JunkMail] upgrade to 4x

I have been running 2.0.16 however it has a bug that external tests will double-dip; eg fail the same external test multiple times... I reported it to tech support with no resolution - so my only recourse is to run the latest ver. I am licensed for declude virus, hijack and JMPro - so I d

  1   2   3   4   >