Re: [Declude.JunkMail] New ALL_LIST.DAT File?

Maybe I'm way behind here, but what is the all_list.dat file? It is used by the experimental geolocation system in Declude JunkMail Pro (which identifies the country(ies) the E-mail passed through based on the IP(s)). This then lets you have a header showing the list of countries, and filter b

Re: [Declude.JunkMail] New ALL_LIST.DAT File?

Has the file been updated? It has just been updated, and is at http://www.declude.com/version/release/all_list.dat . -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable v

Re: [Declude.JunkMail] New ALL_LIST.DAT File?

Has the file been updated? Not yet, but it should be later today. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerabi

Re: [Declude.JunkMail] New ALL_LIST.DAT File?

Has the ALL_LIST.DAT been updated recently? www.declude.com/release/179/all_list.dat There is a new one, but it isn't on the website yet. I'll make sure that it gets updated. -Scott --- Declude J

Re: [Declude.JunkMail] SPF Setup

We virtual host (as well as store/forward) for a lot of domains. It is a given to add SPF support, I need to setup records for the main IP and name of our servers. However, what about all the virtuals? SPF doesn't know or care whether a domain is virtual or "real". So: Do I only need to setup S

Re: [Declude.JunkMail] Bogus Date header

Doesn't the Imail SMTP control only allow for 20 ip addresses? It's unclear -- I believe that there is no limit, although someone from Ipswitch did post that there was a limit (20? 100?), but I believe he was mistaken. -Scott --- Declude JunkMa

Re: [Declude.JunkMail] Bogus Date header

what is the easiest way to refuse mail from a remote ip imail or declude ? if imail, how to configure ? The best way (and probably easiest) is the IMail SMTP Control Access file (in the SMTP security settings). It should be fairly straightforward to block individual IPs there. That will preven

Re: [Declude.JunkMail] Bogus Date header

I am trying to help out the admin of another server by showing him results from Declude here on our server. I am unclear as to what's wrong with the Date: header below. I suspect that it was added by Imail. That is exactly the problem. Since it was added by IMail, it means that there was no Dat

Re: [Declude.JunkMail] Unique spam/hold directories

Okay, final question on this subject. Can I setup declude to send me the final resolved message instead of sending it back to IMail? I seem to recall that Declude supported something like chaining? Yes, you can do that, by adding a line such as "DAISYCHAIN C:\IMail\Declude\program.exe" to the \

Re: [Declude.JunkMail] Unique spam/hold directories

Are external tests run after all Declude internal tests have been run? No. They are run in the middle. Do external tests get run in the order they are placed in the global.cfg file? If there are multiple external tests, the external tests will be run in the order they are placed in the global.cf

Re: [Declude.JunkMail] Unique spam/hold directories

Scott, has any more thought been given to implementing different spam/hold directories for different domains or for matching certain weights? It's something we still want to do, but it isn't as easy as it sounds, which is why it has not happened yet.

Re: [Declude.JunkMail] maybe problem within combination declude junkmail/declude virus

maybe we have detected a problem within the combination of junkmail and declude virus. we think we found a spammer bypassing junkmail by a simple trick. Just for the record, the issue here was that if an E-mail is caught by Declude Virus *and* the recipient wants the E-mail delivered, it won't b

Re: [Declude.JunkMail] maybe problem within combination declude junkmail/declude virus

maybe we have detected a problem within the combination of junkmail and declude virus. we think we found a spammer bypassing junkmail by a simple trick. we are afraid to describe the problem here on list because other spammers may be on the list too and if they see how it works, all of them wou

RE: [Declude.JunkMail] 1.79i16 - changes?

No -- if you'd like to know the details of why, you can search the archives. :)" Gone the good ol' days... Time to move on... So sad If you look at the archives, that's my (personal) standard response. :) The interim releases are designed to get fixes and new features out more quickly

Re: [Declude.JunkMail] 1.79i16 - changes?

Since not much has been discussed could you possibly provide a list of changes since i8? No -- if you'd like to know the details of why, you can search the archives. :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mail

Re: [Declude.JunkMail] MTLDB observations

> >Unless the database gets cleaned up, I don't see this as a useable test. > > We're working on that. There will be a major change to the listings within > the next week. Scott, has this happened yet? No. There's an issue with the SQL database that is storing the information, where it can't up

Re: [Declude.JunkMail] Declude reporting wrong IP... why?

Complete "Received:" headers below: Received: from smtp.fidnet.com [216.229.64.74] by mail.csimo.com (SMTPD32-8.12) id AD2B20D0070; Thu, 22 Jul 2004 16:10:03 -0500 This shows that IMail received the E-mail from 216.229.64.74, so: > > X-Declude-Sender: [EMAIL PROTECTED]

Re: [Declude.JunkMail] Declude reporting wrong IP... why?

I've had a couple of reports that my messages were failing SPF. I sent a message to myself via a loop and am totally confused at the message header. The message was actually sent from my computer on private IP 192.168.1.177 to my IMail server at 216.229.87.4. For some reason Declude reports t

Re: [Declude.JunkMail] Message header review

Can someone help me with the header of this message. I think this came from earthlink.net mail server. According to earthlink abuse they can't do anything about this type of spam since it did not originate from their network. We get porn spam from this segement all the time. You can always trust

RE: [Declude.JunkMail] bannotify.eml

Correction: Should read "If we want to block all zips, but we want to NOT send an 'attachment blocked' message if the zip is an EZIP, can this be accomplished with SKIPIFEXT EZIP?" Correct. -Scott --- Declude JunkMail: The advanced anti-spam solut

Re: [Declude.JunkMail] bannotify.eml

This is still the 1.79i8 interim that is listed on your site and it's not the one that handles the SKIPIFEXT exception. Thanks for pointing this out -- I'll get that updated. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail

RE: [Declude.JunkMail] Tagging a mail if its weighted as spam

so this WEIGHT10SUBJECT [Spam] WEIGHT10HEADER [This E-mail is likely to be spam; see http://www.example.com/spam for details] will put a subject line and a header ? No. You can't have multiple actions per test -- to do what you want, you would need to create a new test, such as

Re: [Declude.JunkMail] bannotify.eml

Is there a line I can add to not send this email message that fail EZIP? With the latest interim (http://www.declude.com/version/interim), you can add a line "SKIPIFEXT EZIP" to the bannotify.eml file. -Scott --- Declude JunkMail: The advanced a

RE: [Declude.JunkMail] WhiteList FILES Question

If we use: WHITELISTFILE mywhitelist.txt instead of: WHITELISTFILE D:\IMail\Declude\mywhitelist.txt Will Declude search in the same (per domain) directory as the $default$.junkmail file, or do we have to manually edit the 25 different $default$.junkmail files? It will look at \IMail\mywhitelist.tx

Re: [Declude.JunkMail] WhiteList FILES Question

I am not clear on the WhiteListFiles option. ... Using the WhitelistFiles option, my would look like this? WHITELISTFILE D:\IMail\Declude\mywhitelist.txt AHBLWARN DSBLMulti WARN CBL WARN DSBLWARN ORDBWARN ... Etc ... Correct. Declude JunkMail

Re: [Declude.JunkMail] Tagging a mail if its weighted as spam

I know it's possible to do this in subject line but I wonder if its possible to add a line or two in the start of the mail. with a link ot a FAQ of why its marked as spam. Yes -- you can use the HEADER action to do that. For example: WEIGHT10HEADER [This E-mail is likely to be spam; see

RE: [Declude.JunkMail] Spam now (should) fail tests, didn't when received.

> More likely is that your DNS didn't respond in time when Declude inspected > this particular message. Is this timeout adjustable? My email server isn't that busy so I could afford to increase this timeout a bit and see if that helps. Unfortunately, it is not adjustable. However, Declude JunkMa

Re: [Declude.JunkMail] Spam now (should) fail tests, didn't when received.

... Today if I feed these IP addresses into www.dnsstuff.com, they now fail multiple tests that I have enabled (SPAMCOP, CBL for example). ... The only explanation I can come up with is that they were just added to the lists. Is this reasonable? Are there other explanations? Can I find out when t

Re: [Declude.JunkMail] Whitelisted[0]

We tag email with the subject tag "SPAM*-" when email gets a score of higher than 10. What happened here. It says that it was whitelisted but it still tagged with "SPAM*-" What happened here is that someone got an E-mail with "*SPAM" in the subject, and replied to it: Subject: RE: *SPAM -FW:

Re: [Declude.JunkMail] SURBL Question

07/19/2004 08:04:25 Qb8bf32820036f483 Triggered CONTAINS filter SURBL on ly.to [weight->0; [EMAIL PROTECTED] Does this mean that the line the SURBL filter tripped on was [EMAIL PROTECTED] and then it assigned a weight of 7 to the score. No. It means that the SURBL fi

Re: [Declude.JunkMail] Reconfiguring sorbs.net tests

I currently have 9 sorbs.net lookups: ... It seems I can replace these 9 lookups with 1: rhsbl.sorbs.net - Aggregate zone (contains all RHS zones) Would the new config file line would look like this? (replacing the ip numbers with a *)? SORBS-DUHL ip4rdnsbl.sorbs.net * 4 0 Tha

Re: [Declude.JunkMail] misconfiguration in following line

Im getting this error in my logs 07/20/2004 00:01:19 Warning: misconfiguration in following line in configuration file (filter is not an ACTION). May be a duplicate test definition? Is this causing this error? Yes, it is: IPLINKED filter E:\IMail\Declude\Filters\IPLinked.txt

RE: [Declude.JunkMail] CORRUPTEDVIRUS v1.0.0

Some of our customers today received messages containing a (encrypted?) zip file with no files inside. The body contains something like "Password: 12345" As it doesn't contain any viral code it's not so problematic, but it creates a lot of doubt's on customer side if our mailboxes are realy protec

Re: [Declude.JunkMail] CORRUPTEDVIRUS v1.0.0

This results in a zero-byte attachment and it will always get past Declude Virus, even if it has one of the commonly banned extensions associated with viruses (unless this has been addressed in a more recent interim that I'm not aware of ). I haven't hit a single file as yet with this filter.

Re: [Declude.JunkMail] What seems to work better for others?

It seems that more smaller ones are easier to manage using categories. But what uses less CPU/Memory usage? Which way is faster? Fewer larger files are slightly faster, but the difference is not likely to be noticed. So my question is the same as asked previous (listed below) but also, would i

Re: [Declude.JunkMail] Declude vs iMail

OK this is what I thought. Now if a user sets up forwarding, should/will iMail forward all mail or only that destined for the Inbox. That is, will mail that Declude says goes into the 'spam' mailbox be forwarded instead of 'filed'? Is this a possible over-ride behavior? In this case, it will go

Re: [Declude.JunkMail] Declude vs iMail

Does Declude actually place messages, besides those that make it through, in the folder/mailbox or does it deliver to iMail with a suggestion (?) of which folder to place the message in? Example: SPAMCOPMAILBOX spam With the MAILBOX action, Declude JunkMail tells IMail to deliver the

Re: [Declude.JunkMail] Sender 'Reverse Account Verification' ??

When an email is attempted delivery and account does not exist, it bounces... Can this be 'reverse checked' at delivery by Declude? No -- because more and more people that have that ability (with other programs) are reporting that it doesn't work as well as they would like. And, some mailserver

Re: [Declude.JunkMail] Types of Filters

I have a myfilter test that has been working quite well but is growing too large. I want to break these down into body, subject and header filters so it narrows down where to look (as opposed to logs). Any ideas which other filter tests are recognized by declude? I tried a HEADERCONTAINS b

RE: [Declude.JunkMail] maybe a silly question

domain.com is on local server running the tests domain.com has also per domain settings that differs for the test running for all the domains on the same server In this case, E-mail to [EMAIL PROTECTED] (I'm assuming you don't own the domain.com domain -- the RFCs request that people use example

RE: [Declude.JunkMail] maybe a silly question

hmm ok but which run first ? the default junkmail file or the per domain? Neither runs first. The actions are handled after all the tests are run. Declude JunkMail then goes through each recipient, and handles the actions for all the tests failed for each recipient. If the first recipient is

Re: [Declude.JunkMail] Regular Expressions?

Can you use regular expressions in Declude filter definitions? No. We have been considering adding them, but the main drawback would be the potential for making the filters much slower. -Scott --- Declude JunkMail: The advanced anti-spam soluti

Re: [Declude.JunkMail] maybe a silly question

If i put a [ spam ] marking i subject line at a certain weight level in the global.cfg how will this interrupt with the per domain settings? Which wil run first The global.cfg file is used for outgoing E-mail, whereas the per-domain settings are used for incoming E-mail, so this would only be a

Re: [Declude.JunkMail] My whitelist not working correctly

I have a whitelist to prevent certain domain names and ip addresses being being scanned by declude. The whitelist includes the IP from where a form is sent to a series of email addresses of one client The list is called from global.cfg WHITELISTFILE C:\IMail\declude\filters\whitelist.txt The

RE: [Declude.JunkMail] MTLDB observations

Unless the database gets cleaned up, I don't see this as a useable test. We're working on that. There will be a major change to the listings within the next week. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailserver

Re: [Declude.JunkMail] E-mail message ID and declude

Is there a way to get the actions for a message from the Declude log files when all I have is the Message-ID. The To/From fields are suspect. Unfortunately, I do not believe that is possible, since neither Declude nor IMail record the Message-ID:.

Re: [Declude.JunkMail] 2 copyto action

what happens if we have 2 test with copyto actions to different directories ? will this create 2 copies ? Yes, it will. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable v

RE: [Declude.JunkMail] stopping one particular spam

Your help did not stop them unfortunately. From the declude log Can you suggest a simple way deleting these from rock.com? This is the simple way -- remember, there is no "blacklist" command in Declude JunkMail (some people think that there should be one just like whitelisting, until they realiz

Re: [Declude.JunkMail] Tracking down cause of whitelist

Do you just say AUTOWHIITELIST OFF or just take it out of the Global.. You can do either. If there are no lines beginning with AUTOWHITELIST in the \IMail\Declude\global.cfg file, Declude JunkMail will default to OFF. -Scott --- Declude JunkMai

Re: [Declude.JunkMail] NOABUSE test

This email (part headers) failed the NOABUSE test, yet dnsreport show the domain as accepting [EMAIL PROTECTED] Any ideas? That's because Declude JunkMail uses the NOABUSE spam database, rather than connecting to check to see if the abuse@ address exists. In this case, http://www.rfc-ignorant.o

Re: [Declude.JunkMail] stopping one particular spam

My attempts to stop spam from this particular poster are failing I want to stop all mail delivered from @rock.com I created a file called badaddress.txt and in that place "@rock.com" The file is called from global.cfg MYBLACKLIST fromfile C:\IMail\Declude\filters\badaddress.txt x 5 0 but is not st

Re: [Declude.JunkMail] Tracking down cause of whitelist

I keep getting spam from Hong Kong that is whitelisted. According to the Declude logs, it's because he's using my return address. I suspected something in the global.cfg file because there was no weighting and none of the other tests ran. However, repeated searches of the global.cfg file (and a

Re: [Declude.JunkMail] Filter reporting improvement idea

Unfortunately, we probably won't be able to make such a change. In this case, you should check the Declude JunkMail log file for further details. The problem is that if the E-mail fails multiple lines in the filter file, or if the search term is very long, it can make for very long and confus

Re: [Declude.JunkMail] feature request

When/if support for SURBL do come (I imagine the full MIME support will be needed first), as a companion request to that, can you create a urlfile test that would act similiarly to fromfile test. I do think that we will add a urlfile test when SURBL support is added. :)

Re: [Declude.JunkMail] IPFILE test size question

Is there a size limit on the IPFILE test? No, there is not. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability d

Re: [Declude.JunkMail] MTLDB Issue?

> We are looking into an issue where the MTLDB may not be returning positive > responses, and should have more information later today on that. Is there going to be another release that fixes this issue? Or is there a solution at this point? The issue was on our end, and fixed yesterday.

Re: [Declude.JunkMail] GUI - End-User is the priority!

Something getting lost here in the discussion of the installation GUI is the request from time-to-time for an end-user GUI. This is something that we would love to do -- and would have been done *years* ago if Ipswitch allowed third-party access to web messaging (with about 20 lines of code, th

RE: [Declude.JunkMail] SPF and MTLDB Issue?

I know the list has been flooded, but I can not get any of these tests working, anyone have any advice? What lines do you have in your global.cfg that begin with SPF? We are looking into an issue where the MTLDB may not be returning positive responses, and should have more information later today

Re: [Declude.JunkMail] Browsing .smd

Is there a utility that can brows the .smd files in the hold directory showing date,sender,size,subject, and recepients (somehing similar to "view queue" in imail admin. You may want to check out the Spam Review Program at http://www.slsoft.com/spamreview.htm .

Re: [Declude.JunkMail] MTLD test -- Relationship between Viruses and Spam

Are these zombie machines also not trying to spread the same virus allowing them to exploit smtp to other machines? This was my understanding this occurred and my previous reference to using similar strategy with BlackIce blocking IP's for 24 hours with detected signatures. Thus also blocking Spam

Re: [Declude.JunkMail] MTLD test -- Relationship between Viruses and Spam

Most reports are that more than 50% of all spam is now coming from "zombies", which typically are home computers that were infected by a virus that installs a trojan horse that the spammer has control over. I don't know if that's an accurate figure or not, but it seems like a lot of work for a s

RE: [Declude.JunkMail] New Multiple Threat Lookup Database test for Declude JunkMail

But isn't this list considered the first line of support? This list often discusses very technical issues, pushing Declude to its limits, feature requests, etc. Those are important issues for management to be aware of, but for them to get up to speed, monitoring the day-to-day support requests

Re: [Declude.JunkMail] MTLD test -- Relationship between Viruses and Spam

Forgive me, but I don't really see the rationale that because an IP address has been flagged as sending viruses that it is also sending out SPAM. Can someone enlighten me on this ? Most reports are that more than 50% of all spam is now coming from "zombies", which typically are home computers tha

Re: [Declude.JunkMail] Support Agreements

Example, on this new test. (Which I have not implemented yet.) Instead of registering for each server I work on, I could just check the database or file or webpage or whatever to see if there is a valid SA for it, and if so just add the line to their configuration files. If not, advise them that t

RE: [Declude.JunkMail] New Multiple Threat Lookup Database test for Declude JunkMail

But there is one thing missing in this whole issue that I have been waiting to see if it would come about, but has not. Therefore, I am going to state the fact. Yes, this is a good way for them to get their feet wet and all that. But... I have not seen any post by Barry or any others of the new te

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

At some point when this gets ironed out will the config line be made available either through the list or through directly emailing support to verify that you have an active support agreement? I'm going to recommend that in the future, they provide a way of bypassing the whole 5MB download proces

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

I wouldn't blame them for that choice if they made it, although I think that the brain trust of Declude to date has evolved as combination of yourself and those that participate on this list, and that represents both goodwill and intellectual value which is hard to measure in terms of revenue.

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

The mistakes with this were not "relatively minor". While I'm not using the test, others seem to indicate that it is better at detecting ham than it is at detecting spam. Now anyone that installed this is scoring a massive number of false positives at 8 points on their system, and there has

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

Standing by the sidelines here trying to keep up with this interesting thread and actually have some extra time to chime in. I am very concerned about installing this upgrade with the false positives being reported, dlls and uninstall bug reported, etc. Will Declude be addressing these issues and

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

And how are you preventing anyone but current customers with active SAs from using the DNSBL? If someone knows the test site hostname, what is to prevent them from using it? We'll be monitoring it, and if it appears as though it is being misused, we may restrict by IP address. Also, it does not

Re: [Declude.JunkMail] New Multiple Threat Lookup Database test for Declude JunkMail

SECOND -- I too am very disappointed by this whole scenario. The biggest attaction to Declude has been the "transparency" of the product and it's support. An official slogan for Declude might have been "of the tech, for the tech, by the tech". It's the only product that was 100% on the same

Re: [Declude.JunkMail] MTLDB effectiveness

I can't say that I am overwhelmed with the effectiveness of the MTLDB test thus far. Every single email I have seen come through my server with the MTLDB test triggered on it has been a false positive - in fact, it seems that "user not found" automated messages originating from the mail servers

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

does this mean we should stop using the test once our SA expires if we choose not to renew ? That is correct. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detec

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

An I missing something? When I try to resolve mtldb.declude.com I get; >tracert mtldb.declude.com Unable to resolve target system name mtldb.declude.com. That is by design -- mtldb.declude.com should not be resolvable. :) -Scott --- Declude JunkM

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

I understand that new declude versions requires an up to date service agreement. But this is a simple IP4r test that can be run with existing versions, so why are they requiring a SA ? BTW, i do have a current SA, so that is not why i am bitchin, but it seems things are starting to get out of hand

RE: Re[2]: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

Maybe, since this was such a different item than what we are used to, a small group of invited beta tests would have been prudent. There was a beta test -- just not quite as thorough as it might have been. -Scott --- Declude JunkMail: The advanced

RE: Re[2]: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

Well, I think this new "test" is maybe testing the waters, as so far, even though I like the idea, I do not like the implementation of this test, and have not yet done it on my server, nor on the other Imail/Declude servers I consult/maintain on. The reports so far from those that have implemented

Re: [Declude.JunkMail] MTLDB Uninstall

I also looked in the Control Panel Add/Remove Programs and there is no entry for the MTLDB "program" that was installed. I looked for an uninstall method and couldn't find anything. Did I miss something or is it my imagination that the MTLDB test code or registry entries must be manually removed?

Re: Re[2]: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

We know the Computer Horizons was sold, how much control do you have over Declude these days? That depends on how you define "control" (no, I'm not a politician!). In this case, the level of control isn't clearly defined. The transition of management can be tricky, and needs to be handled carefu

RE: Re[2]: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

I recommend in the future to just tell us what line to add. So do I. :) But management won this one. A 5mb download seems overkill for this. Agreed. I didn't even know until today that the install program was going to be more than 10 times the size of the Declude.exe file. But people that li

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

Sounds like new features are going to be slow going from this point??? Until the next release, most likely. But after that, it should be back to the usual rate. :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailserve

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

> The owners of the company make the final decisions. However, I can say > that for the time being at least, no changes will be made to the > declude.exe code without my knowledge (there could potentially be changes I > don't agree with, but at least I'll know if that does happen). But what about

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

Scott, did you create this test, or is it otherwise your idea? I helped come up with the original idea. However, most of the design and development work was done by others, with occasional input from me. Scott, are you in control of features and changes to declude.exe, or are others now influen

Re[2]: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

M> Why a 5 MB download for an IP4R test? Yea, I don't get this. Does this harvest virus IPs from our system and report them back to Declude? No. A beta version of Declude Virus released about 6 months ago added a new feature to automatically detect forging viruses. It does this by sending a DNS

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

[Responding to two posts] So - if some dial-up/dynamic PC gets infected, that IP address will likely be assigned to someone else who happens to connect tomorrow? Is your test eliminating any "dial-up/dynamic" IPs, since by definition the infected/spam workstation will change IPs? But, by definitio

RE: [Declude.JunkMail] Test Action Failure

Can you clarify the END for me? It ends the processing of the filter. Would this fail the test if the e-mail came with a revdns of us.info? revdns 10 contains info revdns end contains info mailfrom 10 contains info In this case, the E-mail would fail the test (the first line fails the test; the s

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

> BTW: I don't fully understand the idea behind this test. I agree...can someone explain the rationale behind this test? How effective will this be at identifying spam? The idea is that people are reporting 60% to 85% of spam coming from "zombies" -- IP addresses that have trojan horses installe

Re[2]: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

Why does this thing need ICMP? I don't know of other "LiveReg"-type stuff requiring access on a port other than the port on which the registration server _actually_ runs on. Apparently, it pings the server to make sure that it is reachable, and if the ping doesn't come back, it is assumed

RE: [Declude.JunkMail] Test Action Failure

OK why then the 07/09/2004 00:15:58 Q462a09e900349a60 Triggered CONTAINS filter SAVFILTER on X-Bulk: 99 [weight->0; X-Bulk: 99 Because a line in the filter matched. But: here are the contents of the sav-smtp.txt that did not work, why? HEADERS END CONTAINS X-Bulk: 99 HEADERS END CONTAINS X-Bul

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database testfor Declude JunkMail

If mailserver changes IP numbers, will I have to re-install to use the test? Not currently, but that could change. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

I tried that, and it claimed my email address did not exist on their system. I've only had one email address the entire time we've done business with Declude. You need to log on as a new account. The website does not know about customers from before the new website was put online.

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

Why a 5 MB download for an IP4R test? I was a bit surprised, too, when I saw that it was a 5.6MB file. :) Also, I think it would be a very good idea to have a process of opting-out customers from the data collection (or rather opt-in as that is the standard that we use for judging spam and this

RE: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

It seems to me that this was an attempt by the new owners to harvest information about Declude users via the signup mechanism. I believe the reason for requiring the signup information is to help ensure that customers with up-to-date Service Agreements get to use the test at no cost, while thos

Re: [Declude.JunkMail] Fw: New Multiple Threat Lookup Database test for Declude JunkMail

I don't think I have ever had an username and password with Declude. Where do we find this information? All we ever had to provide as verification was our Hostname. If you purchased Declude before mid-April 2004, you won't have a username/password. In this case, you can go to http://www.declu

RE: [Declude.JunkMail] Error in log and email

Thanks Matt. Here is my info for support tomorrow: I have Symantec Antivirus Corp 8.1. I have excludes in place for /imail, /email dirs, and /temp Declude 1.79i7 Imail 8.05 F-Prot 3.14a Do you have backup software running on the server? Do you also have Declude Hijack (in which case there is a

Re: [Declude.JunkMail] Test Action Failure

Why did this not ROUTETO ... The test trigered the Contains for the SAVFILTER but SAVFILTER does not show up in the Tests Failed Section Well, there is a very clear answer to your question -- Declude JunkMail did not use the ROUTETO action for the SAVFILTER test because the E-mail did not fail t

Re: [Declude.JunkMail] IPBYPASS and WHITELIST IP

If you have a WHITELIST IP line for an IP address, does it make sense or is it redundant to have a IPBYPASS line for that IP? That depends. If you have an IPBYPASS for that IP, the WHITELIST entry won't do anything (since it will look at the next IP).

Re: [Declude.JunkMail] OT: How to delete a mass of files on a Windows drive

I'm kind of befuddled with this one, but there is a directory on a certain machine that I estimate has about 50,000 or more files on an IDE hard drive and Windows 2003 will hang in Explorer when you try to delete or open the directory from that interface, and I also tried the command window an

Re: [Declude.JunkMail] Whitelist.txt within domain folders

Was just wondering if we can put IP addresses within the whitelist.txt file that is in the domain folders. No -- only E-mail addresses or domains are allowed there. If not, is it a future feature possibility? It is something that we are considering.

Re: [Declude.JunkMail] digital signed messages

I've a question about digital signed email messages. Attached is a message from one of our customers. He's not able to send digital signed messages. The delivered message says that the content of the message maybe changed. That will happen because of alterations made to the E-mail -- I assume that

<    1   2   3   4   5   6   7   8   9   10   >