Can anyone recommend a good log analysis program to work with Declude? I am
most interested in tests failed and possibly IP addresses of failed mail.
Chuck Schick
Warp 8, Inc.
(303)-421-5140
www.warp8.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
(Business)
Fax:+1 201 934-9206
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick
Sent: Tuesday, January 18, 2005 10:50 AM
To: Declude. JunkMail
Subject: [Declude.JunkMail] Declude log analysis...
Can anyone recommend a good log analysis
@declude.com
Subject: RE: [Declude.JunkMail] Declude log analysis...
Hi,
I personally use DLAnalyzer for both Virus and Spam reporting. It's
been
enhanced several times in the past year. I also use it to
automatically
email daily spam/virus reports (summaries and lists of blocked
messages
I have a program that reads and archives iMail log files to a SQL
server. I'd like to add the capability to archive Declude log files in
a meaningful manner. I'm studying the log files (LOGLEVEL set to MID),
and I've noticed something I don't understand. For example (lines
edited for
This entry appears to be processing file Q7e4a069f00606ad1. However, it
looks like the file was process twice, and that it passed on the first
run. I'm especially curious about why the first time out, WEIGHT20's
action is IGNORE, but on the second it's action is (correctly) set to
DELETE.
R. Scott Perry wrote:
This entry appears to be processing file Q7e4a069f00606ad1. However,
it looks like the file was process twice, and that it passed on the
first run. I'm especially curious about why the first time out,
WEIGHT20's action is IGNORE, but on the second it's action is
Now I know I must have something set up wrong. We're using Declude
JunkMail lite, and to my knowledge there is only one set of configuration
files (global.cfg and $default$.junkmail). The message is question (as
far as I can tell) was addressed to only one recipient, though I was doing
some
Is this what my Declude log file should look like I have probably almost
20-30 instances of the declude.exe process running and the only thing I can
think of that I have changed is the loggin level from MED to LOW
See snip from log file below:
11/21/2002 19:32:17 Q889d000300da3fbe
Is this what my Declude log file should look like I have probably almost
20-30 instances of the declude.exe process running and the only thing I can
think of that I have changed is the loggin level from MED to LOW
The problem is that you entered an incorrect value (MED) -- it should be
yep... your good
Thanks again,
Adam
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry
Sent: Thursday, November 21, 2002 7:45 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude log file - HELP!!!
Is this what my
]: [Declude.JunkMail] Declude log test analyzer
Hi Dan,
DC I can also recommend Sawmillyou can configure fairy
DC sophisticated filters to slice and dice the logs (and logs of many
DC different formats). The support folks there were willing to help
DC me get a filter set up and it looks like a worthy
: Re[2]: [Declude.JunkMail] Declude log test analyzer
Hi Dan,
DC I can also recommend Sawmillyou can configure fairy
DC sophisticated filters to slice and dice the logs (and logs of many
DC different formats). The support folks there were willing to help
DC me get a filter set up and it looks
I'd stay with their current, and you'll either have to build your own filter
for Declude logs or ask them to build it for you, they will for registered
users without a charge, and if it is a common log format add it to their
permanent list. The different levels of info used in the various
: [Declude.JunkMail] Declude log test analyzer
I'd stay with their current, and you'll either have to build your own filter
for Declude logs or ask them to build it for you, they will for registered
users without a charge, and if it is a common log format add it to their
permanent list
PROTECTED]
Subject: Re: [Declude.JunkMail] Declude log test analyzer
I was playing with their latest Beta this morning and it didn't seem to
recognize the Declude logs...but maybe it just did not recognize
LOGLEVEL MID. I'll play around with it some more.
Bill
-Original Message-
From: R
Higday
Sent: Friday, October 25, 2002 4:38 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude log test analyzer
I am interested in this program if it will work on Win2000 iMail 7.13
and Declude 1.61 Beta
John
- Original Message -
From: Tom [EMAIL PROTECTED]
To: [EMAIL
Director of Media Production
Pixelpushers, Inc.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner;declude.com] On Behalf Of John Higday
Sent: Friday, October 25, 2002 4:38 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.JunkMail] Declude log test analyzer
I am
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude log test analyzer
I can also recommend Sawmillyou can configure fairy sophisticated
filters to slice and dice the logs (and logs of many different formats).
The support folks there were willing to help me get a filter set up
Hi Dan,
DC I can also recommend Sawmillyou can configure fairy
DC sophisticated filters to slice and dice the logs (and logs of many
DC different formats). The support folks there were willing to help
DC me get a filter set up and it looks like a worthy product to
DC support.
;declude.com] On Behalf Of
Jerod M. Bennett
Sent: Monday, October 28, 2002 8:07 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude log test analyzer
Here is the latest version of that tool.
It includes fixes for the first of the month, including
leap-year issues.
Jerod M
I recently downloaded the declude log test analyzer and was wondering how
you take it out of demo mode. I checked the online documentation and it says
that you can't register it until it is out of beta version. Has anybody been
able to use of its functions, such as sending reports while it is
I need a little help:
Does JM scan your own domain outgoing mail? I would like to stop the
jdbgmgr.exe hoax emails. i thought this would work but it doesn't.
I set this up:
Global.cfg:
VirusHoax filter c:\Imail\Declude\virhoax.txtx 0 0
$default$.junkmail:
Does JM scan your own domain outgoing mail?
Declude JunkMail Pro will scan outgoing mail (using the outgoing actions
from the global.cfg file).
I would like to stop the jdbgmgr.exe hoax emails. i thought this would
work but it doesn't.
I set this up:
Global.cfg:
VirusHoax filter
]
[mailto:Declude.JunkMail-owner;declude.com]On Behalf Of R. Scott Perry
Sent: Friday, October 25, 2002 12:52 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude log test analyzer
Does JM scan your own domain outgoing mail?
Declude JunkMail Pro will scan outgoing mail (using the outgoing actions
from
It looks like the original question I posted got changed when it was relied
to with a totally different question. Does anybody know how to take the
Declude log test analyzer out of demo mode without registering it? Thanks
There are a number of third party tools at http://www.declude.com/tools
]
[mailto:Declude.JunkMail-owner;declude.com]On Behalf Of R. Scott Perry
Sent: Friday, October 25, 2002 1:46 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude log test analyzer
It looks like the original question I posted got changed when it was relied
to with a totally different question. Does anybody
I recently downloaded the declude log test analyzer and was wondering how
you take it out of demo mode. I checked the online documentation
and it says that you can't register it until it is out of beta version.
Has anybody been able to use of its functions, such as sending reports
while
Federal Credit Union
http://www.pcfcu.org
(800) 426-1601 Ext. 3070
-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner;declude.com]On Behalf Of Tom
Sent: Friday, October 25, 2002 2:42 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude log test analyzer
Actually I haven't been able to get the t_rep: LOG option to work either.
This option would write a report to the file delmmdd.log in the same
location as the declude log files. I guess similar to creating a
batch file, except it would use the date of the log file as its name.
Was this
Union
http://www.pcfcu.org
(800) 426-1601 Ext. 3070
-Original Message-
From: [EMAIL PROTECTED]
[mailto:Declude.JunkMail-owner;declude.com]On Behalf Of Tom
Sent: Friday, October 25, 2002 3:14 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude log test analyzer
Actually I
Thanks for all your help and I guess I'll wait until they are
reinvented but in the meantime I'll still use Delog as it is
a useful utility.
Sorry for the inconvenience, however, like we said before Delog
was written in a language that is no longer supported and has
too many problems for
I just remembered! There is another Declude log analyzer someone
wrote for NT. I have the zip files if anyone needs them or
you can look at the mail archives for a download link.
Usage version 1.2
By Jeff Pitoniak
[ Description:
I am interested in this program if it will work on Win2000 iMail 7.13 and
Declude 1.61 Beta
John
- Original Message -
From: Tom [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, October 25, 2002 4:19 PM
Subject: RE: [Declude.JunkMail] Declude log test analyzer
I just remembered
I am interested in this program if it will work on Win2000 iMail 7.13 and
Declude 1.61 Beta
I don't know, it's not mine and I have never tested it.
However, I will e-mail it to you.
Regards,
Tom
Image`fx
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
PROTECTED]
[mailto:Declude.JunkMail-owner;declude.com]On Behalf Of Tom
Sent: Friday, October 25, 2002 4:20 PM
To: [EMAIL PROTECTED]
Subject: RE: [Declude.JunkMail] Declude log test analyzer
I just remembered! There is another Declude log analyzer someone
wrote for NT. I have the zip files if anyone
Another would be to have it forward to an account abuse,
postmaster, or
noc, which could have per-user settings, even with the Standard
version.
If I read you right, the only thing that is being done twice is logging,
correct?
How about if the copyall was set to [EMAIL PROTECTED], and that is
If I read you right, the only thing that is being done twice is logging,
correct?
That is correct. When you have the copyall account, the tests are only
run once, but they get logged twice (as if the E-mail was sent to two
separate users).
How about if the copyall was set to [EMAIL
10/02/2002 08:52:02 Q1621052b00fee024 OSSRC:2 JUNK:15 . Total weight =
17
10/02/2002 08:52:02 Q1621052b00fee024 Msg failed OSSRC
(http://groups.google.com/groups?q=etrackshl=enlr=ie=UTF-8scoring=d)
.
10/02/2002 08:52:02 Q1621052b00fee024 Msg failed WEIGHTRANGE15-19 (Total
weight between 15 and
10/02/2002 08:52:02 Q1621052b00fee024 From:
[EMAIL PROTECTED] To: [EMAIL PROTECTED]
[EMAIL PROTECTED]
Well, having noc as an alias for ruleprocess did not work.
The logs actually show that it did work -- Declude will see the
[EMAIL PROTECTED] address, and if you have a WHITELIST TO [EMAIL
Hold on, I forgot the per-user settings.
John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list.
OK, per use settings for user [EMAIL PROTECTED]:
[EMAIL PROTECTED] is an alias for [EMAIL PROTECTED]
Set up a directory called reliance.net under Imail\Declude
That directory has one file, noc.junkmail
File is blank.
Log still shows two sets of loggings per message:
10/02/2002 13:05:44
OK, per use settings for user [EMAIL PROTECTED]:
Sorry, I made a mistake -- it's the only the WHITELIST TO that allows the
postmaster/abuse/noc addresses to be used in the Standard version.
This will end up whitelisting the E-mail, so it would end up passing all
the spam tests, so it doesn't
OK, no problem. Thanks for the thought.
It was worth a shot.
All it is doing is adding extra line to the log.
John Tolmachoff
IT Manager, Network Engineer
RelianceSoft, Inc.
Fullerton, CA 92835
www.reliancesoft.com
---
[This E-mail was scanned for viruses by Declude Virus
When Imail receives a message, it is set to copy all to a ruleprocess
account. This account is only used for running a rules.ima, like for
archiving some users and such.
However, Declude is seeing this as a second to address and running all
scans twice.
Is there a way to tell Declude not to
When Imail receives a message, it is set to copy all to a ruleprocess
account. This account is only used for running a rules.ima, like for
archiving some users and such.
However, Declude is seeing this as a second to address ...
That's because IMail has changed the E-mail so that there are now
PROTECTED]
Subject: Re: [Declude.JunkMail] Declude log ?
When Imail receives a message, it is set to copy all to a ruleprocess
account. This account is only used for running a rules.ima, like for
archiving some users and such.
However, Declude is seeing this as a second to address ...
That's
Standard version here.
Unfortunately, the Standard version treats all E-mail addresses the same,
including copied ones.
One idea would be to have the copied mail sent to an address on a separate
domain, and set up a per-domain configuration for that domain.
Another would be to have it
47 matches
Mail list logo