RE: [Declude.JunkMail] frustration

2007-07-18 Thread Michael Jaworski
Our Declude setup has been a lifesaver. Without Declude we would be frustrated or out of business. You did not state your setup, iMail versus SmarterMail. Declude version?? Tests used? Mike --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to

Re: [Declude.JunkMail] frustration

2007-07-18 Thread Darrell ([EMAIL PROTECTED])
Uwe, It's always a battle. However, there are a lot of good resources on this list that are willing to share and help. I am sure we can get you to the point where you can breath a bit again... Darrell -- Check out http://www.invariantsystems.com for

RE: [Declude.JunkMail] frustration

2007-07-18 Thread John Doyle
Uwe If you are running declude alone (without ZEROHOUR) you will find yourself pretty busy tweaking. I've added decludes zerohour, as well as invURIBL, and Sniffer. With basically the stock global config, and those 3 additional tests, we see very little get through. If you are strapped for cash

RE: [Declude.JunkMail] frustration

2007-07-18 Thread Craig Edmonds \(123marbella.com\)
Edmonds 123 Marbella Internet W: www.123marbella.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: 18 July 2007 23:57 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] frustration We're running pretty well... catching

Re: [Declude.JunkMail] Fidelity Independent Adviser

2007-07-18 Thread Darin Cox
We had one that was definitely an FP last week. Submitted and received a response that the rule had already been removed. Darin. - Original Message - From: John T (lists) [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, July 18, 2007 9:03 PM Subject:

Re: [Declude.JunkMail] frustration

2007-07-18 Thread Uwe Degenhardt
. Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.net -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: 18 July 2007 23:57 To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] frustration We're

RE: [Declude.JunkMail] Interim 4.3.57 available

2007-07-17 Thread Scott Fisher
So how do we get it? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, July 17, 2007 11:09 AM To: declude.junkmail@declude.com; [EMAIL PROTECTED] Subject: [Declude.JunkMail] Interim 4.3.57 available 4.3.57 JM Fixed crash bug.

re: [Declude.JunkMail] Interim 4.3.57 available

2007-07-17 Thread Gary Steiner
I noticed the file declude.exe version 4.3.57 is significantly smaller than the previous version (495KB vs. 1881KB). Tightened up the code? Original Message From: David Barker [EMAIL PROTECTED] Sent: Tuesday, July 17, 2007 9:23 AM To: declude.junkmail@declude.com, [EMAIL

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-16 Thread John Doyle
. John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Gary Steiner Sent: Saturday, July 14, 2007 3:19 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] AntiVirus Recommendations Following are my virus.cfg lines using runclamscan runclamd

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-16 Thread Gary Steiner
Doyle [EMAIL PROTECTED] Sent: Monday, July 16, 2007 7:39 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] AntiVirus Recommendations Gary A couple more questions does runclamscan.exe call clamd? does clamd run as a service, and if so how do you start it? I tried

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-16 Thread John Doyle
Of Gary Steiner Sent: Monday, July 16, 2007 9:55 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] AntiVirus Recommendations You need to use both runclamscan runclamd. runclamscan.exe calls clamdscan.exe. There should be a file with it called runclamscan_readme.txt that explains

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-14 Thread John Doyle
: RE: [Declude.JunkMail] AntiVirus Recommendations My situation is similar to yours. I started with F-Prot, then later added ClamAV. After Declude added AVG and F-Prot changed their pricing, I dropped F-Prot. I've been using the SOSDG port of ClamAV together with runclamd and runclamscan

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-14 Thread Gary Steiner
: John Doyle [EMAIL PROTECTED] Sent: Saturday, July 14, 2007 9:31 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] AntiVirus Recommendations Gary Could you post the lines in your virus.cfg file relating to this version of clam. I'm not sure what the entry should look like

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-13 Thread Don Schreiner
and PRESCAN in my virus.cfg went a long way. Thanks for reply. -Don -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Sent: Thursday, July 12, 2007 11:00 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] AntiVirus Recommendations How

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-13 Thread John Doyle
Don I ran F-Prot and Clam for years. Then when Declude added built in AV we turned that on and I dropped F-Prot when the licensing changed,So I ran Declude and Clam for about a year. I noticed at some point ClamAV was slamming the cpu and timing out. I had to turn it off. I'm not sure at what

RE: [Declude.JunkMail] cloudmark

2007-07-13 Thread David Barker
Cloudmark is similar to ZEROHOUR the main difference is Cloudmark is user driven which means that the identity of spam messages comes from their user base, where as Commtouch uses network traffic analysis and Recurrent Pattern Detection (RPDT) David From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-13 Thread Gary Steiner
To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] AntiVirus Recommendations Don I ran F-Prot and Clam for years. Then when Declude added built in AV we turned that on and I dropped F-Prot when the licensing changed,So I ran Declude and Clam for about a year. I noticed at some

RE: [Declude.JunkMail] RE: Various Greeting Card messages

2007-07-12 Thread David Barker
I have seen these if this is what you referring to the second line is looking for an IP. You could try this in a filter: BODYEND NOTCONTAINS SEEING YOUR CARD BODY20 PCRE (http://((?:25[0-5]|2[0-4][0-9]|[01]?[0-9][0-9]?)\.){3}(?:25[0-5]|2[0-4][0-9 ]|[01]?[0-9][0-9]?)/) David

Re: [Declude.JunkMail] RE: Various Greeting Card messages

2007-07-12 Thread Brian Milburn
This one is a little faster: (http://\b(?:[0-9]{1,3}\.){3}[0-9]{1,3}\b) David Barker wrote: I have seen these if this is what you referring to the second line is looking for an IP. You could try this in a filter: BODYEND NOTCONTAINS SEEING YOUR CARD BODY20 PCRE

Re: [Declude.JunkMail] RE: Various Greeting Card messages

2007-07-12 Thread Brian Milburn
:// as well it should be fine. David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Brian Milburn Sent: Thursday, July 12, 2007 4:42 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] RE: Various Greeting Card messages This one is a little

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-12 Thread Todd
How long ago did you try the Clan AV? I know they released a newer version a while back that was supposed to run more efficiently under windows and reduce resource utilization. I am old school about AV, I think multiple virus scanners are a must. But then I have run multiple scanners for

RE: [Declude.JunkMail] PCRE tests

2007-07-09 Thread David Barker
:\bERMX\b) David -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Friday, July 06, 2007 12:15 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] PCRE tests UGGH, it always takes sending something to a LOT of people for you

RE: [Declude.JunkMail] PCRE tests

2007-07-09 Thread Todd Richards
To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] PCRE tests Hi Todd, A couple of suggestions (?i:receive.*(postcard|greeting|ecard|e-card)) could also be written as: (?i:receive.{0,50}(postcard|greeting|e.?card)) As you are checking anywhere you want to limit the amount

RE: [Declude.JunkMail] Possible Declude Memory Leak???

2007-07-07 Thread John T \(lists\)
While I am not getting the errors you have seen, I have noticed that the number of handles is extremely high, right now it showed over 67K. John T From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Anton Sent: Friday, July 06, 2007 3:58 PM To:

RE: [Declude.JunkMail] PCRE tests

2007-07-06 Thread David Barker
Todd, Ensure you have version 4.3.46 of Declude. The format of an expression is: LOCATIONWEIGHT PCRE(EXPRESSION) Eg. BODY5 PCRE(?i:Hello World) Post some examples that you are using but not getting hits. David -Original Message-

RE: [Declude.JunkMail] PCRE tests

2007-07-06 Thread Todd Richards
Yeah, just checked - it's there. :) Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Friday, July 06, 2007 10:53 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] PCRE tests Also make sure there is the pcre3

RE: [Declude.JunkMail] PCRE tests

2007-07-06 Thread Todd Richards
. Let me change that and report back! Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Friday, July 06, 2007 10:59 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] PCRE tests Hi David - Yes, I just confirmed

RE: [Declude.JunkMail] PCRE tests

2007-07-06 Thread Scott Fisher
Also make sure there is the pcre3.dll in your imail folder. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, July 06, 2007 10:18 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] PCRE tests Todd, Ensure you

RE: [Declude.JunkMail] PCRE tests

2007-07-06 Thread Todd Richards
To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] PCRE tests Todd, Ensure you have version 4.3.46 of Declude. The format of an expression is: LOCATIONWEIGHT PCRE(EXPRESSION) Eg. BODY5 PCRE(?i:Hello World) Post some examples that you

RE: [Declude.JunkMail] PCRE tests

2007-07-06 Thread Todd Richards
OK, it's working. Sorry for the false alarm! Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Todd Richards Sent: Friday, July 06, 2007 11:15 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] PCRE tests UGGH, it always takes

RE: [Declude.JunkMail] Country code

2007-07-05 Thread David Barker
Can you provide an IP that had this code ? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, July 04, 2007 12:57 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Country code I'm detecting a new country code *F. Can you enlighten

RE: [Declude.JunkMail] Country code

2007-07-05 Thread Gary Steiner
To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Country code Date Time Test FromDomain IP CountryCode 6/18/2007 6:38:50 AM COUNTRY-UNUSED goodvibesvideo.com 41.223.109.25*F 6/18/2007 4:00:28 AM COUNTRY

Re: [Declude.JunkMail] Country code

2007-07-05 Thread Matt
d'Ivoire) 41.221.17.90 DZ (Algeria) etc. So maybe this is just an error in the all_list.dat file. Original Message From: Scott Fisher [EMAIL PROTECTED] Sent: Thursday, July 05, 2007 11:11 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Country

RE: [Declude.JunkMail] Country code

2007-07-04 Thread Colbeck, Andrew
Effing spammers? From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, July 03, 2007 9:57 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] Country code I'm

RE: [Declude.JunkMail] Country code

2007-07-04 Thread David Barker
lol, I will have to find out Thursday as the office is closed today. I will post then. From: Colbeck, Andrew [EMAIL PROTECTED] Sent: Wednesday, July 04, 2007 3:37 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] Country code Effing

RE: [Declude.JunkMail] phone regex/pcre help

2007-07-03 Thread Colbeck, Andrew
Scot, my eyes water when I look at a long regexp. So without trying to work out that specific PCRE syntax, I'll suggest two things: 1) Make a generic detection that finds zero or more junk characters between the text you're looking for. The longer the parent string is, the less likely you are

Re: [Declude.JunkMail] phone regex/pcre help

2007-07-03 Thread Matt
Scott, The following should do the same. Note that I do not know if Declude requires the whole match to be placed in parenthesis. 2[0Oo]6[\s\r\n\-\.]*888[\s\r\n\-\.]*2[0Oo]83 Matt Scott Fisher wrote: I'm looking to replace these lines with a pcre but it doesn't seem to be working.

Re: [Declude.JunkMail] phone regex/pcre help

2007-07-03 Thread David Barker
From: Matt [EMAIL PROTECTED] Sent: Tuesday, July 03, 2007 4:08 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] phone regex/pcre help Scott, The following should do the same. Note that I do not know if Declude requires the whole match

Re: [Declude.JunkMail] phone regex/pcre help

2007-07-03 Thread Matt
*From*: Matt [EMAIL PROTECTED] *Sent*: Tuesday, July 03, 2007 4:08 PM *To*: declude.junkmail@declude.com *Subject*: Re: [Declude.JunkMail] phone regex/pcre help Scott, The following should do the same. Note that I do not know if Declude requires the whole match to be placed in parenthesis

RE: [Declude.JunkMail] New PDF worm?

2007-07-02 Thread Katie LaSalle-Lowery
We've been suffering .pdf spam getting through the filter. What settings are you using that's identifying these as spam? We're seeing an overall increase in spam getting through the filter the last few weeks... Thanks, Katie _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [Declude.JunkMail] New PDF worm?

2007-07-02 Thread David Barker
)+(?:\r\n){1,}-+[0-9]+\r\n(?:[a-zA-Z\-]+: [^\r]+\r\n)*Content-Type: application/pdf;) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Katie LaSalle-Lowery Sent: Monday, July 02, 2007 1:28 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] New PDF worm? We've been

RE: [Declude.JunkMail] New PDF worm?

2007-07-02 Thread Katie LaSalle-Lowery
of car related spam over the weekend. Having Sniffer updated might fix that anyway, but... Thanks, Katie _ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, July 02, 2007 11:35 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail

RE: [Declude.JunkMail] New PDF worm?

2007-07-02 Thread Jim Comerford
1:35 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] New PDF worm? Create a filter eg FILTER-PDF.txt and use the following lines. Adjust your weights accordingly. Also ensure you are running Declude 4.3.46 BODY 3 PCRE

RE: [Declude.JunkMail] New PDF worm?

2007-07-02 Thread David Barker
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Comerford Sent: Monday, July 02, 2007 2:05 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] New PDF worm? Could someone explain further how this filter works and what it is doing... it is adding weight to all PDF's

Re: [Declude.JunkMail] Filtering outbound as a default

2007-07-02 Thread Darrell ([EMAIL PROTECTED])
Ben, In newer versions of Declude there is a directive for the global.cfg that needs to be turned on OUTBOUNDSCANNINGSPAM ON. I believe in newer versions ON is the default? Than you would need to add your tests and actions like in the $default$.junkmail file into the global.cfg file.

Re: [Declude.JunkMail] Bulk Outbound Mailer

2007-07-02 Thread Dave Doherty
OK, I'll toss my suggestion into the ring They should use an outbound gateway server. Imail can handle a pretty big volume of outbound mail, but the DNS lookups tend to slow things down on mass emails. Sending all the outbound mail to a gateway is duck soup for IMail. What to use for the

Re: [Declude.JunkMail] Filtering outbound as a default

2007-07-02 Thread Imail Admin
What about older versions? Thanks, Ben - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, July 02, 2007 2:14 PM Subject: Re: [Declude.JunkMail] Filtering outbound as a default Ben, In newer versions of Declude

re: [Declude.JunkMail] Bulk Outbound Mailer

2007-07-02 Thread Gary Steiner
One of my customers is using GroupMail to send out a monthly newsletter along with occasional announcements to a school mailing list. His list currently has between 400-500 members. He is using the free version of GroupMail. http://www.group-mail.com/asp/common/groupmail.asp?ct=232

Re: [Declude.JunkMail] Filtering outbound as a default

2007-07-02 Thread Darrell ([EMAIL PROTECTED])
integration, MRTG Integration, and Log Parsers. Imail Admin wrote: What about older versions? Thanks, Ben - Original Message - From: Darrell ([EMAIL PROTECTED]) [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Monday, July 02, 2007 2:14 PM Subject: Re: [Declude.JunkMail] Filtering

RE: [Declude.JunkMail] Bulk Outbound Mailer

2007-07-02 Thread Robert Grosshandler
We're really happy with gammadyne mailer. www.gammadyne.com We send about 200K pieces a week, the db is sql server. Rob -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, July 02, 2007 4:29 PM To: declude.junkmail@declude.com

RE: [Declude.JunkMail] Re: PDF spam detection

2007-06-29 Thread David Barker
) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Thursday, June 28, 2007 12:49 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Re: PDF spam detection I was thinking Regex wasn't available since I'm still using 2.0.6, but forgot I could use

re: [Declude.JunkMail] all_list.dat

2007-06-29 Thread Gary Steiner
The corrupt RIPE data should be referring to 145.53.30.139. Though if you go to www.ripe.net and do a search, 145.53.0.0/16 is listed as belonging to Planet Technologies with an email address of [EMAIL PROTECTED] and being in The Netherlands. Which is essentially the same as the listing for

Re: [Declude.JunkMail] all_list.dat

2007-06-29 Thread Bonno Bloksma
: Gary Steiner To: declude.junkmail@declude.com Sent: Friday, June 29, 2007 7:37 PM Subject: re: [Declude.JunkMail] all_list.dat The corrupt RIPE data should be referring to 145.53.30.139. Though if you go to www.ripe.net and do a search, 145.53.0.0/16 is listed as belonging to Planet

RE: [Declude.JunkMail] all_list.dat

2007-06-29 Thread Colbeck, Andrew
. Andrew. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bonno Bloksma Sent: Friday, June 29, 2007 11:25 AM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] all_list.dat Hi

Re: [Declude.JunkMail] Re: PDF spam detection

2007-06-28 Thread Matt
Here's a piece of RegEx code that should work for blank bodies with a PDF and this particular spammer so long as he is forging Thunderbird: -+[0-9]+\r\n(?:[a-zA-Z\-]+: [^\r]+\r\n)+(?:\r\n){1,}-+[0-9]+\r\n(?:[a-zA-Z\-]+: [^\r]+\r\n)*Content-Type: application/pdf; Note that I have not tested

RE: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-27 Thread Sharyn Schmidt
This looks like what I'm looking for. We are not interested in using the DFS option, everything will be going on one server I can buy something 3rd party, as well, if anyone has any suggestions for something that might work better than this. In the past I have found that the free MS tools are

RE: [Declude.JunkMail] OT - Can you reach my site?

2007-06-27 Thread David Barker
Hi Sam I am able to get to the site. I am in Massachusetts US David From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of SJ.Stanaitis Sent: Wednesday, June 27, 2007 8:41 AM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT - Can you reach my site? Had a spiffy

Re: [Declude.JunkMail] New PDF worm?

2007-06-27 Thread Darin Cox
Yep. Darin. - Original Message - From: SJ.Stanaitis To: declude.junkmail@declude.com Sent: Wednesday, June 27, 2007 11:17 AM Subject: [Declude.JunkMail] New PDF worm? I'm getting gobs of PDF's snagged in my antispam filter, they're not triggering any AV yet, anyone else seeing

RE: [Declude.JunkMail] New PDF worm?

2007-06-27 Thread David Barker
Yes I am seeing the same thing although when I run the pdf through a virus check it comes up clean. I opened one of the files and it was just stock spam. If anyone is running the CB-ATTACH.txt filter I would suggest commenting out this line for now. #BODY -10 PCRE

RE: [Declude.JunkMail] New PDF worm?

2007-06-27 Thread Colbeck, Andrew
SJ, they're not viruses, they're spam sent from zombies. Probably pump and dump stock spam, and if they're like what I've been seeing, they have the same anti-OCR techniques that were previously sent as jpg. http://www.mail-archive.com/[EMAIL PROTECTED]/msg03447.html and:

Re: [Declude.JunkMail] New PDF worm?

2007-06-27 Thread Darrell ([EMAIL PROTECTED])
SJ, Andrew posted a blurb from SANS a couple of days ago. Pump and dump scams now in PDF Published: 2007-06-20, Last Updated: 2007-06-20 21:33:39 UTC by Maarten Van Horenbeeck (Version: 1) Apparently the groups behind what we know as pump and dump spam have found a new way to bypass spam

Re: [Declude.JunkMail] New PDF worm?

2007-06-27 Thread Darin Cox
Hi David, What's the CB-ATTACH.txt filter? Darin. - Original Message - From: David Barker To: declude.junkmail@declude.com Sent: Wednesday, June 27, 2007 11:24 AM Subject: RE: [Declude.JunkMail] New PDF worm? Yes I am seeing the same thing although when I run the pdf through

RE: [Declude.JunkMail] New PDF worm?

2007-06-27 Thread David Barker
To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] New PDF worm? Hi David, What's the CB-ATTACH.txt filter? Darin. - Original Message - From: David Barker mailto:[EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Wednesday, June 27, 2007 11:24 AM Subject: RE

RE: [Declude.JunkMail] New PDF worm?

2007-06-27 Thread Colbeck, Andrew
: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Wednesday, June 27, 2007 8:24 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] New PDF worm? Yes I am seeing the same thing although when I run the pdf through a virus

RE: [Declude.JunkMail] New PDF worm?

2007-06-27 Thread David Barker
Great idea. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Wednesday, June 27, 2007 12:40 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] New PDF worm? I'll suggest an alternative to this. If you're using the CB-ATTACH filter

Re: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-26 Thread Linda Pagillo
OT: Software for copying files with permissionsSharyn, check out this article http://support.microsoft.com/kb/174273 If you have any further questions, please do not hesitate to contact me either by email or call Toll free 1-866-332-5833 Ext.7008 Linda Pagillo Technical Support Engineer |

RE: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-26 Thread Sharyn Schmidt
If you want to move an entire image to a new machine then I would use Acronis software to image the old server Thanks, I don't want to move the entire image. I just want to take every share that I have on this particular server and move it to a new server with all the permissions

RE: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-26 Thread Dan Shadix
Robocopy is free from Microsoft and will do all that you ask and more. Just be careful when you use the /mir switch (or others that automatically delete files). Dan From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Tuesday, June 26, 2007 6:49 AM To:

Re: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-26 Thread Darrell ([EMAIL PROTECTED])
Sharyn, I would check out robocopy in the resource kit. I use it all the time to do stuff like this. Darrell - Check out http://www.invariantsystems.com for utilities for Declude, Imail, mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring,

RE: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-26 Thread Heinrich Richter
Try robocopy from the MS Resource Kit. Heinrich -Original Message- From: Sharyn Schmidt [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 26, 2007 2:49 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] OT: Software for copying files with permissions Morning, Does

RE: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-26 Thread Harry vanderzand
If you want to move an entire image to a new machine then I would use Acronis software to image the old server You do need to make sure that the drivers for your boot drive are the same for both machines. If you find that the new machine needs a different driver then you could take a SCSI

RE: SPAM-LOW: RE: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-26 Thread Rick Klinge
Thanks, I don't want to move the entire image. I just want to take every share that I have on this particular server and move it to a new server with all the permissions intact. Sharyn Have you tried this:

RE: SPAM-MED: RE: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-26 Thread Rick Klinge
http://support.microsoft.com/kb/174273 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Heinrich Richter Sent: Tuesday, June 26, 2007 8:26 AM - MGMT To: declude.junkmail@declude.com Subject: SPAM-MED: RE: [Declude.JunkMail] OT: Software

RE: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-26 Thread William Stillwell
relatively painless. Best Regards, Andy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Klinge Sent: Tuesday, June 26, 2007 9:42 AM To: declude.junkmail@declude.com Subject: RE: SPAM-LOW: RE: [Declude.JunkMail] OT: Software for copying files

RE: [Declude.JunkMail] OT: Software for copying files with permissions

2007-06-26 Thread Colbeck, Andrew
and accurate. I've no idea what it cost. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sharyn Schmidt Sent: Tuesday, June 26, 2007 6:19 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] OT

Re: [Declude.JunkMail] Using Footer32 in per domain configuration

2007-06-26 Thread System Administrator
Darin-I had to #DOMAINWHITELISTS OFF# turned off prewhitelist for footer32 5/12/7#PREWHITELIST ONMaybe a couple of other Global settings as well I can't quite remember.Jay-Original Message-From: "Darin Cox" [EMAIL PROTECTED]Sent 6/26/2007 1:19:17 PMTo:

Re: [Declude.JunkMail] Using Footer32 in per domain configuration

2007-06-26 Thread Darin Cox
Hi Jay, We're not using either DOMAINWHITELISTS or PREWHITELIST, so those aren't affecting it. Anyone have any other ideas? Darin. - Original Message - From: System Administrator To: declude.junkmail@declude.com Sent: Tuesday, June 26, 2007 4:45 PM Subject: Re: [Declude.JunkMail

Re: [Declude.JunkMail] Using Footer32 in per domain configuration

2007-06-26 Thread Darin Cox
To: declude.junkmail@declude.com Sent: Tuesday, June 26, 2007 5:15 PM Subject: Re: [Declude.JunkMail] Using Footer32 in per domain configuration Hi Jay, We're not using either DOMAINWHITELISTS or PREWHITELIST, so those aren't affecting it. Anyone have any other ideas? Darin. - Original

RE: [Declude.JunkMail] pcre code

2007-06-21 Thread David Barker
You would have to test this but try: BODY 0 PCRE (\BODY\(\r|\s){0,}/BODY) David Barker Director of Product Management Your Email security is our business 978.499.2933 office 978.988.1311 fax [EMAIL PROTECTED] From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

Re: [Declude.JunkMail] OT - Outlook Junk Mail Folder

2007-06-21 Thread Dean Lawrence
Thanks Andrew, I really appreciate the link. We do put notifications on all the emails stating to address to add to their safe sender lists, but the client doesn't want to budge. Dean On 6/20/07, Colbeck, Andrew [EMAIL PROTECTED] wrote: Dean, I did some Googling for you and found some likely

RE: [Declude.JunkMail] CMDSPACE/SmarterMail

2007-06-21 Thread David Barker
] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Friday, June 15, 2007 11:16 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail Smartermail had made a change to the .hdr file in the way that CMDSPACE was being reported, I am currently testing the fix

RE: [Declude.JunkMail] PCRE and REVDNS

2007-06-20 Thread David Barker
Fisher Sent: Tuesday, June 19, 2007 10:03 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] PCRE and REVDNS OK, now you have me thinking could I use PCRE to replace tons of body searches for my 419/Lottery filter... What is the maximum line length for a line in a filter

RE: [Declude.JunkMail] OT - Outlook Junk Mail Folder

2007-06-20 Thread Kevin Bilbee
We have our users turn off the outlook junkmail filtering. It is more of a headache than it is worth. Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Tuesday, June 19, 2007 6:11 AM To: declude.junkmail@declude.com

Re: [Declude.JunkMail] OT - Outlook Junk Mail Folder

2007-06-20 Thread Dean Lawrence
Thank Kevin. If only I could do that. They are a very large corporation with over 1,000 users. 8-p On 6/20/07, Kevin Bilbee [EMAIL PROTECTED] wrote: We have our users turn off the outlook junkmail filtering. It is more of a headache than it is worth. Kevin Bilbee -Original Message-

RE: [Declude.JunkMail] OT - Outlook Junk Mail Folder

2007-06-20 Thread Kevin Bilbee
but it is worth a try! Kevin Bilbee -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dean Lawrence Sent: Wednesday, June 20, 2007 5:16 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] OT - Outlook Junk Mail Folder Thank Kevin

RE: [Declude.JunkMail] OT - Outlook Junk Mail Folder

2007-06-20 Thread Colbeck, Andrew
Dean, I did some Googling for you and found some likely hits, including this from Microsoft: http://office.microsoft.com/en-us/help/HA010450051033.aspx You may find a nugget of advice there for how your campaigns can avoid the filter. Typically, the advice by senders such as yourself is to plea

RE: [Declude.JunkMail] PCRE and REVDNS

2007-06-19 Thread Scott Fisher
OK, now you have me thinking could I use PCRE to replace tons of body searches for my 419/Lottery filter... What is the maximum line length for a line in a filter? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Monday, June 18, 2007

RE: [Declude.JunkMail] PCRE and REVDNS

2007-06-19 Thread David Barker
: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Tuesday, June 19, 2007 10:03 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] PCRE and REVDNS OK, now you have me thinking could I use PCRE to replace

RE: [Declude.JunkMail] PCRE and REVDNS

2007-06-19 Thread Mark Reimer
David, I would like a copy. Mark Reimer IT System Admin American CareSource 972-308-6887 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of David Barker Sent: Tuesday, June 19, 2007 9:15 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail

RE: [Declude.JunkMail] PCRE and REVDNS

2007-06-19 Thread David Barker
Email me directly [EMAIL PROTECTED] as to keep the lists relevant -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Reimer Sent: Tuesday, June 19, 2007 10:35 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] PCRE and REVDNS David, I

Re: [Declude.JunkMail] PCRE and REVDNS

2007-06-19 Thread Darin Cox
How about adding it to the downloads section? That seems easier than dealing with a lot of individual requests. Darin. - Original Message - From: David Barker [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Tuesday, June 19, 2007 10:42 AM Subject: RE: [Declude.JunkMail] PCRE

RE: [Declude.JunkMail] PCRE and REVDNS

2007-06-19 Thread David Barker
: Re: [Declude.JunkMail] PCRE and REVDNS How about adding it to the downloads section? That seems easier than dealing with a lot of individual requests. Darin. - Original Message - From: David Barker [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Tuesday, June 19, 2007 10:42

RE: [Declude.JunkMail] CMDSPACE/SmarterMail

2007-06-15 Thread David Barker
E: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner Sent: Monday, April 09, 2007 1:17 PM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail David, Has any progress been made

RE: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x

2007-06-14 Thread Chuck Cahill
, Inc -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Rogers Sent: Wednesday, June 13, 2007 3:45 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2

RE: [Declude.JunkMail] APEWS

2007-06-13 Thread Scott Fisher
They seem to have pretty good hit rates at http://www.sdsc.edu/~jeff/spam/cbc.html especially the rhsbl Looks like I need to look at the pbl.spamhaus.org again. Those numbers are up pretty good too. That's the beauty of Declude in my opinion, I can add these lists at a low weight and see how

RE: [Declude.JunkMail] APEWS

2007-06-13 Thread Kevin Bilbee
Be careful there level 2 list blocks /9 ranges. Like 12.0.0.0/9 this is ATT Kevin From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Wednesday, June 13, 2007 8:00 AM To: declude.junkmail@declude.com Subject: RE: [Declude.JunkMail] APEWS They seem

Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x

2007-06-13 Thread Kevin Rogers
. Don - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, June 07, 2007 7:42 PM Subject: Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x Interesting. I wonder how

RE: [Declude.JunkMail] APEWS

2007-06-12 Thread Colbeck, Andrew
It looks and reads exactly the same as some previous list that I've forgotten about. I haven't tried it... Andrew. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Tuesday, June 12, 2007 4:51 PM

Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x

2007-06-08 Thread declude
interest. Don - Original Message - From: Dave Doherty [EMAIL PROTECTED] To: declude.junkmail@declude.com Sent: Thursday, June 07, 2007 7:42 PM Subject: Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x Interesting. I wonder

Re: [Declude.JunkMail] Looking for an Secure Email Solution that works with Imail Premium 2006.2 and declude 4.x

2007-06-07 Thread Darrell ([EMAIL PROTECTED])
Are you looking for a solution like the PGP plug in's for Outlook or something else? Darrell --- Check out http://www.invariantsystems.com for utilities for Declude and Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG

<    9   10   11   12   13   14   15   16   17   18   >