RE: [Declude.JunkMail] Is Tqmcube.com dead???

2008-02-21 Thread Shayne Embry
ago. Went to www.tqmcube.com and checked; came up clean. Shayne Original Message From: Colbeck, Andrew [EMAIL PROTECTED] Sent: Thursday, February 21, 2008 4:50 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Is Tqmcube.com dead??? Interesting news

Re: [Declude.JunkMail] Filter for Bounce messages

2008-02-18 Thread Darrell ([EMAIL PROTECTED])
Don, Depending on your situation you could simply filter the null sender in a from file filter. I would not suggest this as a permanent solution as NDR's are helpful in most cases. About two weeks ago I had a user get hammered with probably 500-1000 NDR's per second from a spam campaign.

Re: [Declude.JunkMail] Barracuda Quarantine bypass

2008-02-18 Thread Scott Fosseen
] Sent: Monday, February 18, 2008 4:00 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Barracuda Quarantine bypass | Scott, | | Does the Barracuda system add any headers that we could trigger a filter | to hit will reduce the weight so we can prevent it from being captured

Re: [Declude.JunkMail] Barracuda Quarantine bypass

2008-02-18 Thread Darrell ([EMAIL PROTECTED])
Scott, Does the Barracuda system add any headers that we could trigger a filter to hit will reduce the weight so we can prevent it from being captured? Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF.

RE: [Declude.JunkMail] Filter for Bounce messages

2008-02-18 Thread Scott Fisher
I use a filter like the below. I'm a business so I have a bit moreflexibility. Basically if the bounce has a reference to one of my servers in the body, I won't run the filter. # Combo Test to punish those that come from a Postmaster and not bounces from us? SKIPIFWEIGHT365 # valid bounces

RE: [Declude.JunkMail] Header Munged in Body

2008-02-15 Thread Kevin Bilbee
Easiest thing to do is turn off the declude service. Run the script. Then get the source from the declude folder. This file will be exactly what is received from smarter mail. Then turn declude back on to process the mail waiting. You can then post the source here. I would zip the source and

RE: [Declude.JunkMail] DecludePro Eating Up CPU

2008-02-10 Thread Craig Edmonds
:o) 1 Meg of Ram is not much Mate. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com  -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Dodell Sent: 10 February 2008 19:10 To: Declude.JunkMail@declude.com Subject:

Re: [Declude.JunkMail] DecludePro Eating Up CPU

2008-02-10 Thread Darrell ([EMAIL PROTECTED])
David, It really depends on several factors: how you have Declude configured (tests, filters, etc), how many threads your running, volume. It's not uncommon to see for me to see decludeproc on a dual proc xeon 2.4ghz using 75% of ram, but I am running ~50 threads at a volume of 200K+

Re: [Declude.JunkMail] DecludePro Eating Up CPU

2008-02-10 Thread Darrell ([EMAIL PROTECTED])
Opps, I noticed I said using 75% of ram I meant to say 75% of cpu. On the ram side I do have to restart decludeproc on a weekly basis otherwise its virtual memory usage creeps the process to the 2GB mark collapsing itself. For my systems running invURIBL and Sniffer with the volume we deal

Re: [Declude.JunkMail] DecludePro Eating Up CPU

2008-02-10 Thread David Dodell
On Feb 10, 2008, at 1:42 PM, Darrell ([EMAIL PROTECTED]) wrote: David, It really depends on several factors: how you have Declude configured (tests, filters, etc), how many threads your running, volume. It's not uncommon to see for me to see decludeproc on a dual proc xeon 2.4ghz

Re: [Declude.JunkMail] counting mail

2008-02-08 Thread Darrell ([EMAIL PROTECTED])
Bonno, With emails that have multiple recipients its not uncommon to see last actions multiple times for the same message. This will skew your results. Your better off using a tool like DLAnalyzer to analyze your logs as it takes all of this into account. Plus it can be scheduled to run

RE: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread David Barker
How so, can you show the X-Declude-Sender line that it did not work on ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Friday, February 08, 2008 3:50 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] How can I filter

RE: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread David Barker
Of John Shacklett Sent: Friday, February 08, 2008 4:36 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] How can I filter this...? Isn't the mailfrom in this case [EMAIL PROTECTED] and not the vigara part? Chuck is looking for a way to filter based on the name attached

Re: [Declude.JunkMail] counting mail

2008-02-08 Thread Bonno Bloksma
PROTECTED]) To: declude.junkmail@declude.com Sent: Friday, February 08, 2008 4:17 PM Subject: Re: [Declude.JunkMail] counting mail Bonno, With emails that have multiple recipients its not uncommon to see last actions multiple times for the same message. This will skew your results

RE: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread Chuck Schick
8, Inc. (303)-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, February 08, 2008 1:56 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] How can I filter this...? How so, can you show the X

RE: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread Colbeck, Andrew
Of David Barker Sent: Friday, February 08, 2008 1:40 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] How can I filter this...? This is what Chuck requested. Now the declude sender is [EMAIL PROTECTED] but I want to filter the sender name of vigara. If you show me

RE: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread Chuck Schick
David: The first one does not work. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, February 06, 2008 12:25 PM To: declude.junkmail@declude.com Subject: RE

Re: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread Matt
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, February 08, 2008 1:56 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] How can I filter this...? How so, can you show the X-Declude-Sender line that it did not work on ? -Original Message

RE: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread John Shacklett
: [Declude.JunkMail] How can I filter this...? How so, can you show the X-Declude-Sender line that it did not work on ? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Friday, February 08, 2008 3:50 PM To: declude.junkmail@declude.com Subject: RE

RE: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread Chuck Schick
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, February 08, 2008 4:15 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] How can I filter this...? There are 1,300,925,111,156,286,160,896 ways to spell Viagra (see the update

RE: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread David Barker
addresses do have invalid words and names that may match the expression. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Friday, February 08, 2008 5:06 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] How can I

RE: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread David Barker
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chuck Schick Sent: Friday, February 08, 2008 7:11 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] How can I filter this...? That may be but since I have a client that is seeing about 20 of these a day all spelled

RE: [Declude.JunkMail] How can I filter this...?

2008-02-08 Thread Chuck Schick
David: Thanks. I will try that. Chuck Schick Warp 8, Inc. (303)-421-5140 www.warp8.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, February 08, 2008 5:18 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail

RE: [Declude.JunkMail] AFTERJM

2008-02-06 Thread David Barker
The directive is AVAFTERJM We can look at setting an option for DELETE only. David B From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno Bloksma Sent: Wednesday, February 06, 2008 9:28 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] AFTERJM Hi,

Re: [Declude.JunkMail] AFTERJM

2008-02-06 Thread Bonno Bloksma
-12 / 5611 el eindhoven t 040 296 28 28 / f 040 237 35 20 [EMAIL PROTECTED] / www.tio.nl - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Wednesday, February 06, 2008 3:39 PM Subject: RE: [Declude.JunkMail] AFTERJM The directive is AVAFTERJM

Re: [Declude.JunkMail] Any Known issues Inv-URIBL today?

2008-02-06 Thread Darrell ([EMAIL PROTECTED])
Randy, None that I am aware of. It's processing fine on all of my servers. Also, version 1.x is very old (several years). We are now on version 3.1.1. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF.

Re: [Declude.JunkMail] Any Known issues Inv-URIBL today?

2008-02-06 Thread Herb Guenther
Hi Randy; We have seen that often, in fact what we do is swap that test in on nights and weekends and out during weekdays (by just renaming the declude conf files with a schedule). It is a nice tool but will bog things down. Herb Randy Armbrecht wrote: We're seeing a backup today on

Re: [Declude.JunkMail] Any Known issues Inv-URIBL today?

2008-02-06 Thread Randy Armbrecht
Director Global Web Solutions, Inc. 804-442-5300 http://globalweb.net - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, February 06, 2008 2:04 PM Subject: Re: [Declude.JunkMail] Any Known issues Inv-URIBL today

Re: [Declude.JunkMail] Any Known issues Inv-URIBL today?

2008-02-06 Thread Randy Armbrecht
PM Subject: RE: [Declude.JunkMail] Any Known issues Inv-URIBL today? Check the DNS server InvURIBL is using to see if it is responding in a timely manner to all the queries your config is using. There may be a DNS time out issue. Kevin Bilbee From: [EMAIL PROTECTED

Re: [Declude.JunkMail] Any Known issues Inv-URIBL today?

2008-02-06 Thread Ncl Admin
] To: declude.junkmail@declude.com Sent: Wednesday, February 06, 2008 2:04 PM Subject: Re: [Declude.JunkMail] Any Known issues Inv-URIBL today? Randy, None that I am aware of. It's processing fine on all of my servers. Also, version 1.x is very old (several years). We are now on version 3.1.1. Darrell

Re: [Declude.JunkMail] Any Known issues Inv-URIBL today?

2008-02-06 Thread Darrell ([EMAIL PROTECTED])
In addition to what Pete suggests with Weightgate (which I also use on some servers with older hardware). You will want to set inside your invuribl.exe.config file values for max and min skipweights to skip any unnecessary processing of messages. Darrell --

Re: [Declude.JunkMail] Any Known issues Inv-URIBL today?

2008-02-06 Thread Randy Armbrecht
, Inc. 804-442-5300 http://globalweb.net - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, February 06, 2008 3:12 PM Subject: Re: [Declude.JunkMail] Any Known issues Inv-URIBL today? In addition to what Pete suggests

RE: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list

2008-02-05 Thread Rick Klinge
Will you morons please remove me from your spam list? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, February 04, 2008 10:33 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the

RE: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list

2008-02-05 Thread Harry vanderzand
Cute. Insulting people gets things done and makes you look very important. Right! Harry Vanderzand From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Klinge Sent: Tuesday, February 05, 2008 2:08 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] re

Re: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list

2008-02-05 Thread Nick Hayer
Hi Rick, Having a bad day? -Nick Rick Klinge wrote: Will you morons please remove me from your spam list? *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *Sent:* Monday, February 04, 2008 10:33 PM *To:* declude.junkmail@declude.com *Subject:* [Declude.JunkMail] re:

Re: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list

2008-02-05 Thread Matt
Rick, I don't know why Declude hasn't fixed this bug yet.but these are being sent to the entire listserv and not just you. I noted that you keep responding to them thinking they are directed at you, but they are just auto-replies from their support ticketing system which

Re: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list

2008-02-05 Thread Darrell ([EMAIL PROTECTED])
*From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of *Nick Hayer *Sent:* Tuesday, February 05, 2008 1:23 PM *To:* declude.junkmail@declude.com *Subject:* Re: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list

[Declude.JunkMail] RE: [Declude.JunkMail Digest]

2008-02-05 Thread Michael Ernst
: declude.junkmail@declude.com [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 05, 2008 3:10 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail Digest] From: David Barker [EMAIL PROTECTED] Date: Tue, 5 Feb 2008 14:59:39 -0500 Subject: RE: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do

RE: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list

2008-02-05 Thread Rick Klinge
Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, February 05, 2008 4:18 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] re: [384-0F3A4F35-96D8] You do not have permission to post to the declude.junkmail@declude.com list At the bottom of the message the morons posted the proper way

RE: [Declude.JunkMail] OT: Where'd Dell go?

2008-02-01 Thread Harry vanderzand
no Harry Vanderzand NEW ADDRESS Effective Jan 24, 2008 Intown Internet 117 Ruskview Road Kitchener, ON, N2M 4S1 519-741-1222 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of SJ.Stanaitis Sent: Friday, February 01, 2008 8:33 AM To: declude.junkmail@declude.com Subject:

RE: [Declude.JunkMail] OT: Where'd Dell go?

2008-02-01 Thread SJ.Stanaitis
Looks like they're partially back up now... nm SJ.Stanaitis - Network Administrator Decorative Product Source, Inc _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of SJ.Stanaitis Sent: Friday, February 01, 2008 8:33 AM To: declude.junkmail@declude.com Subject:

RE: [Declude.JunkMail] OT: Where'd Dell go?

2008-02-01 Thread Michael Hardrick
Maybe Microsoft is trying to buy them out! Assimilation !!! :P MH From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of SJ.Stanaitis Sent: Friday, February 01, 2008 7:33 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Where'd Dell go? I can't seem to get

Re: [Declude.JunkMail] OT: Where'd Dell go?

2008-02-01 Thread Herb Guenther
There is a 10 gig connection out between 2 data centers in Chicago, traffic is rerouted now, but that was probably the issue as a pretty big time peering hub is not well connected and had real problems early this morning. Herb Michael Hardrick wrote: Maybe Microsoft is trying to buy them

RE: [Declude.JunkMail] OT: Where'd Dell go?

2008-02-01 Thread Andy Schmidt
Or they are affected by cut cables to India? G From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Hardrick Sent: Friday, February 01, 2008 2:19 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT: Where'd Dell go? Maybe Microsoft is trying to buy them

Re: [Declude.JunkMail] OT: Virus pb

2008-01-28 Thread Serge
resolved Thanks to all - Original Message - From: SJ.Stanaitis [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, January 28, 2008 8:52 PM Subject: RE: [Declude.JunkMail] OT: Virus pb Sounds like a rootkit maybe, try rootkitreveal. Also try scanning the drives externally

RE: [Declude.JunkMail] unsubscribe Declude.JunkMail

2008-01-28 Thread David Barker
Ok ;) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of IS - Network Systems Eng (B Cole) Sent: Monday, January 28, 2008 4:37 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] unsubscribe Declude.JunkMail unsubscribe Declude.JunkMail Barton Cole Systems

RE: [Declude.JunkMail] Fprot 6

2008-01-27 Thread Michael Thomas - Mathbox
Serge, Frisk licensing for mail server use is not the same as consumer or general business use. Pricing for mail server use is prohibitive. Michael Thomas Mathbox 978-683-6718 1-877-MATHBOX (Toll Free) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf

Re: [Declude.JunkMail] Fprot 6

2008-01-27 Thread Serge
I know about pricing But was just wondering about technical aspect did anyone test it ? Regards - Original Message - From: Michael Thomas - Mathbox [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Sunday, January 27, 2008 9:00 PM Subject: RE: [Declude.JunkMail] Fprot 6

RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted

2008-01-24 Thread John T (lists)
2 years ago, I would have had a dozen replies by now and even possible a nice discussion going on. Where is everybody? John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John T (lists) Sent: Monday, January 21, 2008 1:05 PM To: declude.junkmail@declude.com Subject:

RE: [Declude.JunkMail] Message authenticator

2008-01-24 Thread John T (lists)
Out of the box, not that I am aware of. It is recorded in the Imail SMTP log. This however would be a good feature request for Declude. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Wednesday, January 23, 2008 5:05 PM To: declude.junkmail@declude.com

RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted

2008-01-24 Thread Craig Edmonds
To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted 2 years ago, I would have had a dozen replies by now and even possible a nice discussion going on. Where is everybody? John T From: [EMAIL PROTECTED] [mailto

Re: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted

2008-01-24 Thread Darin Cox
@declude.com Sent: Thursday, January 24, 2008 11:35 AM Subject: RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted 2 years ago, I would have had a dozen replies by now and even possible a nice discussion going on. Where is everybody? John T From

RE: [Declude.JunkMail] Message authenticator

2008-01-24 Thread David Barker
, 2008 11:37 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Message authenticator Out of the box, not that I am aware of. It is recorded in the Imail SMTP log. This however would be a good feature request for Declude. John T From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted

2008-01-24 Thread Darrell ([EMAIL PROTECTED])
John, It's hard to say depending on how the message was whitelisted dictates which tests are ran. I never seen an official list on what tests get run based on the level of whitelisting but I believe user authenticated skips all tests. Can anyone confirm that? Darrell

RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted

2008-01-24 Thread Kevin Bilbee
To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Indicate msg size in header on an authenticated whitelisted 2 years ago, I would have had a dozen replies by now and even possible a nice discussion going on. Where is everybody? John T From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [Declude.JunkMail] Message authenticator

2008-01-24 Thread Serge
David Can you please add this on the requested features list Regards - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Thursday, January 24, 2008 4:54 PM Subject: RE: [Declude.JunkMail] Message authenticator It is recorded in the Q file

RE: [Declude.JunkMail] re: [244-0F1D628C-258E] You do not have permission to post to the declude.junkmail@declude.com list

2008-01-14 Thread Rick Klinge
I have not initiated any support issues. Rick From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, January 14, 2008 12:00 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] re: [244-0F1D628C-258E] You do not have permission to post to the

RE: [Declude.JunkMail] Blackice Server Settings

2008-01-05 Thread Dave Beckstrom
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Howard Smith (N.O.R.A.D.) Sent: Friday, January 04, 2008 12:59 PM To: declude.junkmail@declude.com Cc: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Blackice Server Settings ISS no longer supports blackice and it is no longer in production

Re: [Declude.JunkMail] Declude ??? Long Delay Processing?

2008-01-05 Thread Darrell ([EMAIL PROTECTED])
The first thing to do is check and make sure you do not have a ton of files in your proc folder. This would indicate a queue backup. The next thing if your not having a ton of files in your proc is to kick the logs into debug mode and send a test message. Look through the debug log and find

Re: [Declude.JunkMail] Declude ??? Long Delay Processing?

2008-01-05 Thread Richard Lyon
If you run sniffer, then try updating its rule file. I saw this problem with a corrupted sniffer rule file. On Jan 5, 2008, at 11:42 AM, David Dodell wrote: I'm trying to track down a problem, which I think might be in Declude. Here is the scenerio ... I'm noticing mail is taking 10 to

Re: [Declude.JunkMail] Declude ??? Long Delay Processing?

2008-01-05 Thread David Dodell
On Jan 5, 2008, at 10:49 AM, Richard Lyon wrote: If you run sniffer, then try updating its rule file. I saw this problem with a corrupted sniffer rule file. I do automatically as soon as they come in which seems to be several times a day --- This E-mail came from the

RE: [Declude.JunkMail] Declude ??? Long Delay Processing?

2008-01-05 Thread Kevin Bilbee
] [mailto:[EMAIL PROTECTED] On Behalf Of David Dodell Sent: Saturday, January 05, 2008 10:08 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Declude ??? Long Delay Processing? On Jan 5, 2008, at 10:49 AM, Richard Lyon wrote: If you run sniffer, then try updating its rule

Re: [Declude.JunkMail] Declude ??? Long Delay Processing?

2008-01-05 Thread David Dodell
On Jan 5, 2008, at 12:45 PM, Kevin Bilbee wrote: We have had this in the past. Look at your DNS server being used by declude. It can take a long time to process the DSN based tests if your DNS server is timing out. Debug mode should tell you if this is what is happening. The problem is

RE: [Declude.JunkMail] Blackice Server Settings

2008-01-04 Thread Howard Smith (N.O.R.A.D.)
ISS no longer supports blackice and it is no longer in production , what are users replacing it with ? Howard Smith . -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dave Beckstrom Sent: Wednesday, September 27, 2006 5:58 PM To:

Re: [Declude.JunkMail] Blackice Server Settings

2008-01-04 Thread Matt
In relation to spam or in relation to security? My answers would be Alligate (on a separate server) and a firewall, respectively. Matt Howard Smith (N.O.R.A.D.) wrote: ISS no longer supports blackice and it is no longer in production , what are users replacing it with ? Howard Smith

RE: [Declude.JunkMail] Blackice Server EndOfLife - need replacement

2008-01-04 Thread Howard Smith (N.O.R.A.D.)
. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, January 04, 2008 2:25 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Blackice Server Settings In relation to spam or in relation to security? My answers would be Alligate

Re: [Declude.JunkMail] Blackice Server EndOfLife - need replacement

2008-01-04 Thread Matt
] by email and destroy all copies of the original message. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, January 04, 2008 2:25 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Blackice Server Settings In relation

RE: [Declude.JunkMail] Blackice Server EndOfLife - need replacement

2008-01-04 Thread Colbeck, Andrew
Subject: RE: [Declude.JunkMail] Blackice Server EndOfLife - need replacement To replace blackice functions as to load on a server and monitor and block what applications sends out on individual ports . I have an offending app or task that trying to send out on random ports , I am trying

RE: [Declude.JunkMail] Blackice Server EndOfLife - need replacement

2008-01-04 Thread Jon
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Friday, January 04, 2008 12:21 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Blackice Server EndOfLife - need replacement I'm sure that there are many opinions around here, but I don't think that servers should

RE: [Declude.JunkMail] Blackice Server EndOfLife - need replacement

2008-01-04 Thread Don Schreiner
] On Behalf Of Jon Sent: Friday, January 04, 2008 3:47 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Blackice Server EndOfLife - need replacement The best part of Black Ice is it's easy to read interface to see what hitting the server. I will continue to use it just

RE: [Declude.JunkMail] 4.3.46

2008-01-02 Thread David Barker
, December 28, 2007 2:29 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] 4.3.46 Right, immediately after you only get U.S. pennies to their EURO G Ooops... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent

Re: [Declude.JunkMail] Per-User Blacklist

2008-01-02 Thread Dean Lawrence
Thanks Darrell, That was what I was afraid of. How are others dealing with per user black lists? Are they using IMail rules to accomplish this? Right now I manage all domain configurations for my clients and typically do not allow per user options. However, I would like to build-out a web based

Re: [Declude.JunkMail] Per-User Blacklist

2008-01-02 Thread Darin Cox
Sent: Wednesday, January 02, 2008 9:55 AM Subject: Re: [Declude.JunkMail] Per-User Blacklist Thanks Darrell, That was what I was afraid of. How are others dealing with per user black lists? Are they using IMail rules to accomplish this? Right now I manage all domain configurations for my clients

Re: [Declude.JunkMail] Per-User Blacklist

2008-01-02 Thread Darrell (supp...@invariantsystems.com)
Personally, I do not do per user blacklists. However, as one off requests we have done this. In general if we are blacklisting something its typically a global blacklist. Which may not be ideal in all cases in an ISP type environment. Darrell Dean Lawrence wrote: Thanks Darrell, That

Re: [Declude.JunkMail] Per-User Blacklist

2008-01-02 Thread Dean Lawrence
Thanks Darrell and Darin, This is pretty much my belief as well, but I was just trying to see if it was a feasable option to offer it on a per user basis. I agree that it would be a nightmare to try and manage all those tests. Dean On Jan 2, 2008 11:50 AM, Darrell ([EMAIL PROTECTED]) [EMAIL

Re: [Declude.JunkMail] Per-User Blacklist

2008-01-01 Thread Darrell (supp...@invariantsystems.com)
Dean, What you read in the manual is correct. The only way to do this would be to setup junkmail via per user and have a test for each user as their own blacklist. For a *small* group of users this could be done, but on any level of scale it would be impractical not only from a management

RE: [Declude.JunkMail] 4.3.46

2007-12-28 Thread Andy Schmidt
, December 27, 2007 6:23 PM To: declude.junkmail@declude.com Cc: David Barker Subject: RE: [Declude.JunkMail] 4.3.46 Happy Holidays, David! How about a shiny new all_list.dat to ring in the New Year? Andrew. --- This E-mail came from the Declude.JunkMail mailing

RE: [Declude.JunkMail] 4.3.46

2007-12-27 Thread Colbeck, Andrew
Happy Holidays, David! How about a shiny new all_list.dat to ring in the New Year? Andrew. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at

Re: [Declude.JunkMail] Re: Outbound weight

2007-12-22 Thread Darrell ([EMAIL PROTECTED])
WEIGHT10 does delete outbound since it is defined, but I never defined WEIGHT40 so that was ignored.I needed to add a line that now says WEIGHT10 DELETE WEIGHT40 DELETE for the outbound in global.cfg Yes, that is absolutely correct. After enabling that if its still not working post a

Re: [Declude.JunkMail] Hardware Upgrade

2007-12-22 Thread Serge
Subject: Re: [Declude.JunkMail] Hardware Upgrade I mostly concur with Andrew here, but let me add some specifics. 1) Memory - for the 5000 series of chips using FB-DIMMs you need 4 total sticks to max out the memory bandwidth. 4 gets you twice the memory bandwidth of 2, though you can use just

RE: [Declude.JunkMail] Hardware Upgrade

2007-12-21 Thread Colbeck, Andrew
Hello, Serge. I'm happy to chime in here, but let me start off with saying that you will get divergent opinions here, and that nobody will be absolutely right, as our answers are coloured by own experiences, and each implementation is unique. I'll also start off with asking you for your current

Re: [Declude.JunkMail] Hardware Upgrade

2007-12-21 Thread Matt
I mostly concur with Andrew here, but let me add some specifics. 1) *Memory* - for the 5000 series of chips using FB-DIMMs you need 4 total sticks to max out the memory bandwidth. 4 gets you twice the memory bandwidth of 2, though you can use just 2. The real-world benchmarks show maybe a

Re: [Declude.JunkMail] Outbound weight

2007-12-21 Thread Darrell ([EMAIL PROTECTED])
Are you sure your scanning outbound mail? Their is a directive that needs to be turned on for it to work. By default its off. JM ADD Spam checking for inbound/outbound scanning can be turned on/off. Located as a directive in the global.cfg file, below are the default settings.

Re: [Declude.JunkMail] Re: Outbound weight

2007-12-21 Thread Darrell ([EMAIL PROTECTED])
Your weight ranges are set fine. There is nothing wrong with the syntax of those. To be certain you only have weight ranges defined once right? Can you throw your logs into debug and send a test outbound message through. We will be able to help you better seeing this output. Darrell

Re: [Declude.JunkMail] Loop

2007-12-17 Thread Darrell ([EMAIL PROTECTED])
From looking at this the st07.edmsa.net server is running MSSMTP and sending it back to you. Are they using MSSMTP as a gateway to relay it internally to themself's? If so in the settings do they have it set to use a smarthost instead of use DNS to deliver? Darrell

Re: [Declude.JunkMail] OT: Use MS IIS SMTP server as a gateway

2007-12-12 Thread Sanford Whiteman
A little off topic but i was wondering if anyone can help me find a tutorial on how to set up my IIS server running Imail 8.15 and Declude to use the MS IIS SMTP server as a gateway. [I am assuming that you will still be using your IMail box as MX and using IIS only for outbound.]

Re: [Declude.JunkMail] OT: Use MS IIS SMTP server as a gateway

2007-12-12 Thread Darrell ([EMAIL PROTECTED])
Craig, I currently use MS SMTP as a gateway for several customers. Shoot me a note off list and I can help you get going. Darrell -- Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue

Re: [Declude.JunkMail] upgrade/migrate from Imail 8.15 to Smartermail

2007-12-11 Thread [EMAIL PROTECTED]
Hi, Just got through doing the upgrade, a few things you should do/know. 1) cleanup imail email boxes before you run the migration utilityit takes a lot longer if you don't. 2) smartermail requires using the full email address ([EMAIL PROTECTED]) for logging in (pop3). By default, it's

RE: [Declude.JunkMail] upgrade/migrate from Imail 8.15 to Smartermail

2007-12-11 Thread Craig Edmonds
Subject: Re: [Declude.JunkMail] upgrade/migrate from Imail 8.15 to Smartermail Hi, Just got through doing the upgrade, a few things you should do/know. 1) cleanup imail email boxes before you run the migration utilityit takes a lot longer if you don't. 2) smartermail requires using

Re: [Declude.JunkMail] upgrade/migrate from Imail 8.15 to Smartermail

2007-12-11 Thread Matt
PROTECTED] *From:* [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] *On Behalf Of [EMAIL PROTECTED] *Sent:* 11 December 2007 13:46 *To:* Craig Edmonds *Subject:* Re: [Declude.JunkMail] upgrade/migrate from Imail 8.15 to Smartermail Hi, Just got through doing the upgrade, a few things you

Re: [Declude.JunkMail] akamai.net Redirect/obfuscation

2007-12-11 Thread Darrell ([EMAIL PROTECTED])
Don, That's interesting. That line is actually an Akamai cache key that is being used to reference the image directly from Akamai's cache. Based on the cache key I suspect this showed up in a phish. For folks that utilize Akamai's caching services would never reference content via that

Re: [Declude.JunkMail] COPYTO Oddity

2007-12-04 Thread Matt
This appears to be an IMail behavior and not caused by Declude. There are double IMail headers in there, and they have different spool names too. This may be due to domains being configured for different IP's in IMail. This might require some registry hacking to straighten out. You should

Re: [Declude.JunkMail] Outlook 'Blank Folding' Vulnerability

2007-12-03 Thread Dean Lawrence
Wouldn't you want to send the support request to the developers of incredimail? They are the ones who are generating the invalid header. Declude is only warning you about it. Dean On Dec 3, 2007 7:47 AM, Mon Mariola - Rubén [EMAIL PROTECTED] wrote: The program incredimail generates subjects, in

Re: [Declude.JunkMail] Outlook 'Blank Folding' Vulnerability

2007-12-03 Thread Mon Mariola - Rubén
Lawrence To: declude.junkmail@declude.com Sent: Monday, December 03, 2007 2:53 PM Subject: Re: [Declude.JunkMail] Outlook 'Blank Folding' Vulnerability Wouldn't you want to send the support request to the developers of incredimail? They are the ones who are generating the invalid header. Declude

Re: [Declude.JunkMail] Outlook 'Blank Folding' Vulnerability

2007-12-03 Thread Mike N.
no virus has used this technique yet is not a good reason to continue to leave the door open. - Original Message - From: Mon Mariola - Rubén [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, December 03, 2007 9:40 AM Subject: Re: [Declude.JunkMail] Outlook 'Blank Folding

Re: [Declude.JunkMail] Outlook 'Blank Folding' Vulnerability

2007-12-03 Thread Mon Mariola - Rubén
a section in RFC specifying that is not allowed. Thank you. Ruben Marti. Mon Mariola, S.L. - Original Message - From: Mike N. To: declude.junkmail@declude.com Sent: Monday, December 03, 2007 4:00 PM Subject: Re: [Declude.JunkMail] Outlook 'Blank Folding' Vulnerability The 'Blank

Re: [Declude.JunkMail] OT: Adding a non-authoritative DNS A record and associated PTR record

2007-12-03 Thread Matt
You seem to have failed to ask the actual question here. If you create the domain locally, you must create all records on the public domain for full DNS functionality to be maintained. Just creating one record will result in lookup failures for all other records on that domain. Matt

Re: [Declude.JunkMail] OT: DNS Failover advice

2007-12-03 Thread Matt
Rob, As far as DNS goes, the best way to do this is to use Simple DNS Plus with a server in a second location. Simple DNS does full server replication instead of individual secondaries, and if you have a lot of domains, it is nice to just manage one installation. If you have a smaller

Re: [Declude.JunkMail] OT: DNS Failover advice

2007-12-03 Thread Matt
Forgot to add the most important part regarding Simple DNS. They have an add-on monitoring piece that will switch DNS records automatically, and this can be used to automatically switch over to the backup. Matt Matt wrote: Rob, As far as DNS goes, the best way to do this is to use

RE: [Declude.JunkMail] ED Spam Expression

2007-11-30 Thread Kevin Stanford
Try this ... (?i:\b(?!dick?)(m(\W?|_){0,3}e(\W?|_){0,3}g(\W?|_){0,[EMAIL PROTECTED])?(\W?|_){0,3}d(\ W?|_){0,3}[|li1í!](\W?|_){0,3}[ck]{1,2}\b) Will match on obfuscated dick (ie. D!ck) but NOT dick, can include mega obfuscated. David -Original Message- From: [EMAIL PROTECTED]

<    6   7   8   9   10   11   12   13   14   15   >