[Declude.JunkMail] RBL warning

2006-01-04 Thread Gary Steiner
Based on the following header lines... X-RBL-Warning: CBL: "Blocked - see http://cbl.abuseat.org/lookup.cgi?ip=222.173.57.68"; X-RBL-Warning: DSBL: "http://dsbl.org/listing?222.173.57.68"; X-RBL-Warning: MXRATE-BLOCK: "http://www.mxrate.com/lookup/refused.asp?ipaddress=222.173.57.68"; X-RBL-Warn

RE: [Declude.JunkMail] F-prot

2006-01-04 Thread Gary Steiner
gt; > Andrew 8) > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Gary Steiner > > Sent: Tuesday, November 29, 2005 10:30 AM > > To: Declude.JunkMail@declude.com > > Subject: RE: [Declude.JunkMai

RE: [Declude.JunkMail] RBL warning

2006-01-05 Thread Gary Steiner
tion. More > > information can be found in the manual. One warning though, you need > > to make sure to not have any spaces before the first colon so that > > the header is properly formated, otherwise it might cause unexpected > > issues. > > > > Matt >

Re: [Declude.JunkMail] RBL warning

2006-01-05 Thread Gary Steiner
't work > properly. If this was an IP4R test, the proper variable would either be > %IP4R% or %REMOTEIP%. If this was a RHSBL test, the variable would be > %MAILFROM%. > > Matt > > > > Gary Steiner wrote: > > >So would this work? > > > >

RE: [Declude.JunkMail] decludeproc causing dns queries to fail

2006-01-17 Thread Gary Steiner
hat I basically just gave up on it. Gary Steiner Original Message > From: "Will" <[EMAIL PROTECTED]> > Sent: Tuesday, January 17, 2006 10:08 AM > To: Declude.JunkMail@declude.com > Subject: RE: [Declude.JunkMail] decludeproc causing dns queri

[Declude.JunkMail] SmarterMail BETA test

2006-01-17 Thread Gary Steiner
There is a posting on the SmarterTools Forums that discusses the current SmarterMail 3.0 BETA test. http://forums.smartertools.com/forums/11870/ShowPost.aspx --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list.

re: [Declude.JunkMail] SmarterMail BETA test

2006-02-03 Thread Gary Steiner
More info on the new release has been posted here: http://forums.smartertools.com/forums/12089/ShowPost.aspx Original Message > From: Gary Steiner <[EMAIL PROTECTED]> > Sent: Tuesday, January 17, 2006 2:27 PM > To: Declude.JunkMail@declude.com > Subject:

re: [Declude.JunkMail] New 4.0 version of Declude?

2006-02-09 Thread Gary Steiner
Possibly this has something to do with the release today of SmarterMail 3.0. Original Message > From: "Bill Landry" <[EMAIL PROTECTED]> > Sent: Thursday, February 09, 2006 12:36 PM > To: Declude.JunkMail@declude.com > Subject: [Declude.JunkMail] New 4.0 version of Declude? >

re: [Declude.JunkMail] SmarterMail 3.0 is out - has anyone tried it yet?

2006-02-09 Thread Gary Steiner
There seems to be early talk on the SmartTools Forums of bugginess in SM 3.0.  I for one am not in any hurry to install it, especially since most of my customers need the Spanish language translation, and that hasn't been released yet. For those interested, this little blip is from the SmarterTools

Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters

2006-02-22 Thread Gary Steiner
I've never run ClamAV before. Looking at www.clamav.net, I see there are several Windows ports for it. Is anyone using one of the various Windows ports for ClamAV under W2K3? If so, which one is best? Thanks, Gary Steiner Original Message > From: "Bill La

RE: [Declude.JunkMail] Damaged Image Files

2006-02-28 Thread Gary Steiner
I received a couple with the broken gif as late as yesterday. The Declude headers end up at the bottom of the message, but they are there. I'm running Declude 3.0.5.26 and SmarterMail 2.6. Gary Original Message > From: "Erik" <[EMAIL PROTECTED]> > Sent: Tuesday, February 2

Re: [Declude.JunkMail] Damaged Image Files

2006-02-28 Thread Gary Steiner
; Gary, you should upgrade to 3.0.6, which has been out for about a week now, > as 3.0.5.26 had serious problems with handling certain kinds of mime > encapsulate messages. We actually had to roll back to 3.0.5.23 after > reporting the issues with 3.0.5.26 to Declude. Version 3.0.6 fixed th

Re: [Declude.JunkMail] Damaged Image Files

2006-03-02 Thread Gary Steiner
The problem is not limited to IMail. Declude handles things the same way in SmarterMail. Original Message > From: Matt <[EMAIL PROTECTED]> > Sent: Thursday, March 02, 2006 4:55 PM > To: Declude.JunkMail@declude.com > Subject: Re: [Declude.JunkMail] Damaged Image Files > > It

[Declude.JunkMail] ip4r failure

2006-03-14 Thread Gary Steiner
I've been having this problem with Declude going back to August and my installation of 2.0.6. I'm currently running 3.0.6.4 with SmarterMail 2.6. It seems that irregularly Declude's ip4r tests time out, but SmarterMail redundantly running the same tests has no trouble picking up the spam. I h

RE: [Declude.JunkMail] ip4r failure

2006-03-15 Thread Gary Steiner
EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of Gary Steiner > > Sent: Tuesday, March 14, 2006 7:27 PM > > To: Declude.JunkMail@declude.com > > Subject: [Declude.JunkMail] ip4r failure > > > > I've been having this problem wit

RE: [Declude.JunkMail] ip4r failure

2006-03-15 Thread Gary Steiner
; > > Sent: Wednesday, March 15, 2006 2:40 AM > > > To: Declude.JunkMail@declude.com > > > Subject: RE: [Declude.JunkMail] ip4r failure > > > > > > What is the OS of the DNS server being used? > > > > > > John T > > > eServices

re: [Declude.JunkMail] How to let these through?

2006-03-16 Thread Gary Steiner
Create some sort of counter weight. Use an ipfile with 209.191.87.115 or even 209.191.87.0/24, or whitelist mail.mud.yahoo.com depending on how open you want to be. Though counter weights are always better than whitelisting. Gary Original Message > From: "mail-lists" <[EM

Re: [Declude.JunkMail] OT: port forwarding

2006-03-22 Thread Gary Steiner
It is interesting how SmarterMail's web mail interprets Dave's message. It sees the META statement in his message as embedded code, and runs it when I read the message. Original Message > From: "Dave Doherty" <[EMAIL PROTECTED]> > Sent: Wednesday, March 22, 2006 3:50 PM > T

Re: [Declude.JunkMail] OT: port forwarding

2006-03-23 Thread Gary Steiner
egments to be executable, yet it can be in > SmarterMail webmail if it is working the way that you reported. > > Matt > > > > Gary Steiner wrote: > > >It is interesting how SmarterMail's web mail interprets Dave's message. It > >sees the META s

RE: [Declude.JunkMail] OT: port forwarding

2006-03-23 Thread Gary Steiner
TML portion is blank then they are doing what many > clients would do. Default to the HTML view. They also may be using poor > judgment and assuming that no one would ever discuss HTML tags in a plain > text email and not parsing them. > > > > Kevin Bilbee > > &g

Re: [Declude.JunkMail] OT: port forwarding

2006-03-23 Thread Gary Steiner
> result from displaying plain text as HTML, and suggest that if they are > displaying a plain/text only message, to do some bracket replacement in > order to keep plain/text elements from becoming functional in the HTML view. > > Showing a message that is plain/text as HTML i

Re: [Declude.JunkMail] OT: port forwarding

2006-03-23 Thread Gary Steiner
The implication from reading what little was said about their beta testing on their forums (they were very tight lipped about it), is that it was done by SmarterTools' hosting provider crystaltech.com. I presume that the two companies have some type of close relationship, both from a business s

Re: [Declude.JunkMail] OT: port forwarding

2006-03-24 Thread Gary Steiner
> It will be very interesting to see what kind of response I get. > > -Dave Doherty > Skywaves, Inc. > > > > - Original Message - > From: "Gary Steiner" <[EMAIL PROTECTED]> > To: > Sent: Thursday, March 23, 2006 6:42 PM > Subject:

[Declude.JunkMail] SPF tests in Declude

2006-03-30 Thread Gary Steiner
I've seen all the talk for and against SPF on this list, and I've been trying to decide how much weight I want to give SPF. (I'm currently using Declude 3.0.6.4 and SmarterMail 2.6). I started playing around with SmarterMail's SPF tags by setting them to a low or zero weight just so I could se

Re: [Declude.JunkMail] SPF tests in Declude

2006-03-30 Thread Gary Steiner
SPFUNKNOWN spf unknown x 0 0 > SPFFAIL spf fail x 50 0 > > > - Original Message - > From: "Gary Steiner" <[EMAIL PROTECTED]> > To: > Sent: Thursday, March 30, 2006 6:36 PM > Subject: [Declude.JunkMail] SPF tests in Declude > > > I'

Re: [Declude.JunkMail] SPF tests in Declude

2006-03-30 Thread Gary Steiner
the other tests that I haven't paid much attention but assumed the default was correct. Thanks Scott, and all the others who patiently gave the answer in the past. Gary Original Message ---- > From: Gary Steiner <[EMAIL PROTECTED]> > Sent: Thursday,

Re: [Declude.JunkMail] Bcc failure - Mystery solved

2006-04-02 Thread Gary Steiner
I've seen something similar to this, though in that paticular case it was a redundant quote or apostrophe in the name part of the email address. Original Message > From: Orin Wells <[EMAIL PROTECTED]> > Sent: Saturday, April 01, 2006 8:09 PM > To: Declude.JunkMail@declude.com

[Declude.JunkMail] ARIN Unlisted

2006-04-04 Thread Gary Steiner
I received a spam from 209.200.224.192 which Declude reported as X-Country-Chain: [ARIN Unlisted]->destination I went to www.arin.net and did a whois, and 209.200.224.192 came up as a typical US company. What is ARIN unlisted? Gary --- This E-mail came from the Declude.JunkMail mailing lis

[Declude.JunkMail] Declude whitelisting with SmarterMail Trusted Senders

2006-04-13 Thread Gary Steiner
Now that I have installed Declude 3.1 with SmarterMail 2.6, I see that Declude is whitelisting certain addresses based on SmarterMail's "Trusted Senders" section of "My Spam Filtering". Is there any way to turn this feature off in Declude so that it continues to function as part of SmarterMail

Re: [Declude.JunkMail] How can I block all the stock spams?

2006-05-12 Thread Gary Steiner
I found after doing an install of Declude 4.2.3, that it contained an all_list.dat file with a date of 3/29/2006 and a file size of 310kb (318,376 bytes). Gary Original Message > From: "Scott Fisher" <[EMAIL PROTECTED]> > Sent: Wednesday, May 03, 2006 1:44 PM > To: Declude.J

RE: AW: AW: AW: [Declude.JunkMail] No action taken

2006-06-05 Thread Gary Steiner
Before I started seeing these spams, my Declude logs were set to MID, and each of these new spams would show the same three lines: 06/04/2006 07:25:39.868 50467903 Error in envelope file: c:\SmarterMail\Spool\proc\work\50467903.hdr 06/04/2006 07:25:46.165 50467903 AHBL:6 CBL:14 DSBL:6 MXRATE-BLO

RE: [Declude.JunkMail] Test

2006-06-13 Thread Gary Steiner
No. Most likely it is because declude.junkmail typically experiences a lot of traffic, but recently it's been extremely quiet. I guess some folks just got paranoid. Instead of posting "test" messages, it would be better if folks asked a question or made an appropriate comment to start a threa

re: [Declude.JunkMail] FW: [SPAM]I must apologize ...

2006-06-22 Thread Gary Steiner
Try the SUBJECTCHARS test.  It will catch spam that has a certain number of characters in the subject.  For 60 characters and a weight of 4 the test would be SUBJECTCHARS subjectchars 60 x 4 0   From: "

re: [Declude.JunkMail] Where do I enter my serial number

2006-07-02 Thread Gary Steiner
I believe Declude Support has to do it manually on their end. However, they are closed on the weekend, so you are not going to get any response from them til Monday (unless they are taking off Monday in conjunction with the 4th of July, in which case you may have to wait until Wednesday). Rega

[Declude.JunkMail] ZEROHOUR

2006-07-07 Thread Gary Steiner
What is the ZEROHOUR test? I see it in the X-Declude headers, but I don't have it defined in any of my config files. I don't see it mentioned in any of the manuals either. Gary --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROT

re: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

2006-07-10 Thread Gary Steiner
Now that I've installed 4.2.20, I'm getting a lot of messages in the error folder (I'm running SmarterMail 3.3.2369). Most of them seem to be spam, but there are some good messages in there. Am I now going to have to scan this folder for false positives just like the held spam folder? Here is

[Declude.JunkMail] Declude Security Suite in Add or Remove Programs

2006-07-10 Thread Gary Steiner
I just went into Add or Remove Programs under the Control Panel of my W2K3 server to remove something unrelated to Declude, and noticed that Declude Security Suite is listed there three times. When I click on "Click here for support information" for each entry, they give versions as follows: 4

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

2006-07-11 Thread Gary Steiner
sages in the > \spool. > > David B > www.declude.com > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary > Steiner > Sent: Monday, July 10, 2006 2:52 PM > To: declude.junkmail@declude.com > Subject: re: [Declude.Ju

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

2006-07-11 Thread Gary Steiner
hese are like T files in > Imail where it is not a complete message, but for some reason SmarterMail is > allowing Declude to have them even though they are not complete. > > John T > eServices For You > > "Seek, and ye shall find!" > > > -Origin

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

2006-07-12 Thread Gary Steiner
es back to who should provide the fix, in this case we did as it > > was causing messages not being scanned by Declude for spam. > > > > I am trying to get a better understanding to the problem from SM and > > as soon as I have some answers from them I will post to the list

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

2006-07-12 Thread Gary Steiner
inyada but in this instance we > have provided a solution for what is happening in SM. And as I have said we > are working with them to resolve this between us. > > David B > www.declude.com > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECT

RE: [Declude.JunkMail] 4.2 build 20 Released 6 July 2006

2006-07-12 Thread Gary Steiner
t; > Gary, > > If we gave you the option to delete these messages (as SmarterMail should be > doing) rather than move them to the \error directory would that solve your > problem ? > > David B > www.declude.com > > -Original Message- > From: [EMAIL PROTEC

RE: [Declude.JunkMail] Number of times per test

2006-07-14 Thread Gary Steiner
I don't have STOPATFIRSTHIT in my body filter, and it always stops the first time it finds something. Original Message > From: "Michael Thomas - Mathbox" <[EMAIL PROTECTED]> > Sent: Friday, July 14, 2006 2:31 PM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMai

RE: [Declude.JunkMail] F-Prot Licensing

2006-07-14 Thread Gary Steiner
Wow! It's like one of those MasterCard commercials. Here's an example server based on list prices: SmarterMail Enterprise Edition (Unlimited Domains and Users) - $899 Declude Security Suite for Smartermail Enterprise (Unlimited Domains) - $1750 Annual Subscription F-Prot Antivirus for

[Declude.JunkMail] Declude 4.3

2006-07-18 Thread Gary Steiner
I guess someone is going to make an official announcement today about Declude 4.3? I see that its downloadable in my account, but it would be nice to know what I'm getting before I install it, especially the new Commtouch stuff. The "Restrictions" listed next to the Add Commtouch section are es

RE: [Declude.JunkMail] Declude 4.3

2006-07-18 Thread Gary Steiner
l to customers unless a separate revenue share agreement has > been established with Declude. > > http://www.declude.com/Articles.asp?ID=121 > > Is Declude trying to put us out of business? We pay for the software and now > have to pay them some of your meager profits? > &

RE: [Declude.JunkMail] Declude 4.3

2006-07-18 Thread Gary Steiner
t; 3. We are in the process of defining the revenue share program and will > provide the details to this when it is ready. > > David B > www.declude.com > > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary > St

Re: [Declude.JunkMail] 4.3 Upgrade

2006-07-25 Thread Gary Steiner
I'm having this same problem with AVG. I'm running Declude 4.3 with the latest version of SmarterMail. Gary Original Message > From: "Darrell \([EMAIL PROTECTED])" <[EMAIL PROTECTED]> > Sent: Monday, July 24, 2006 12:59 PM > To: declude.junkmail@declude.com > Subject: Re: [De

[Declude.JunkMail] virus or spam?

2006-08-06 Thread Gary Steiner
Today I discovered a new spam on my server that at first I thought might be a virus. It had the subject line "Bill Summary - Invoice #36644" and "August Payment Summary, Invoice #48729" with the number being random. It delivers its message inside an attached word document called "invoice.doc".

[Declude.JunkMail] [EMAIL PROTECTED] versus new case management module

2006-09-07 Thread Gary Steiner
Interesting. If I log in to my account on the Declude web site, there is no option listed for the new CRM module. It is not that it is grayed out as described below. It just isn't there. And I do have a current service agreement. So, since according to this message we can no longer use [EMA

RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module

2006-09-07 Thread Gary Steiner
agement > module > > Then I would contact customer service to have them flip the switch so you > can place support tickets. > > > Kevin > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > > Behalf Of Gary Steine

RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management module

2006-09-07 Thread Gary Steiner
mber 08, 2006 12:57 AM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMail] [EMAIL PROTECTED] versus new case management > module > > I think it means you have to pick up the phone and call them. > > > -Original Message- > From: [EMAIL PROTECTED

RE: [Declude.JunkMail] 4.3.x and 3.1.x planned release

2006-09-15 Thread Gary Steiner
David, Is the NONSTANDARDHDR test on by default, or do you need to add it to your virus.cfg file? I've been running every version since 4.2.20, and I have never seen a message with a broken header moved to my \virus folder. Gary Original Message > From: "David Barker" <[EM

[Declude.JunkMail] HOLD overrides COPYTO as last action?

2006-10-12 Thread Gary Steiner
Say I have the following in my $default$.junkmail file: FILTER-PHISH COPYTO [EMAIL PROTECTED] WEIGHT20 HOLD %DATE% If both tests are triggered on the same email, the COPYTO never occurs. It only does the HOLD. I tried switching the order of the tests in the $default$junkmail file and the g

re: [Declude.JunkMail] HOLD overrides COPYTO as last action?

2006-10-12 Thread Gary Steiner
ced this? And is there any other work around that will let me do what I want to do using filters or some other aspect of Declude? ---- Original Message > From: "Gary Steiner" <[EMAIL PROTECTED]> > Sent: Thursday, October 12, 2006 1:48 PM > To: declude.junkmai

re: [Declude.JunkMail] catchall/nobody aliases and filter files

2006-10-14 Thread Gary Steiner
You can find links to several pages with filter samples at http://it.farmprogress.com/declude/declude.htm Original Message > From: "Craig Edmonds" <[EMAIL PROTECTED]> > Sent: Saturday, October 14, 2006 12:53 PM > To: declude.junkmail@declude.com > Subject: [Declude.JunkMail] ca

RE: [Declude.JunkMail] blackholes.us

2006-10-16 Thread Gary Steiner
I found this RBL monitor through Google, though have not used it myself: http://www.cmsconnect.com/BLM/BLMonitor.htm Anyone have any experience with this or some other similar product? Gary Original Message > From: "Markus Gufler" <[EMAIL PROTECTED]> > Sent: Monday, October 1

[Declude.JunkMail] SmarterMail 4.x beta

2006-10-21 Thread Gary Steiner
SmarterTools just announced some information about the next release of SmarterMail. They are releasing SmarterMail 4.x beta around Novemember 6th. Check out the official statements here: http://forums.smartertools.com/forums/thread/21267.aspx --- This E-mail came from the Declude.JunkMail

RE: [Declude.JunkMail] FP reporting for ZEROHOUR

2006-11-01 Thread Gary Steiner
So you are implying that those of us who are not running Commtouch, if we remove the ZEROHOUR statement from the global.cfg the X-Declude-RefID line in the headers will go away? (How to get rid of that line is a question that has been asked here before.) Original Message > F

re: [Declude.JunkMail] Upgrading Declude Configs - Which Tests are valid?

2006-11-01 Thread Gary Steiner
I'm using most of the ones you mention, and the ones I'm using all work. He's what I have in my global.config that matches your list: AHBLip4rdnsbl.ahbl.org * 7 0 DSBLip4rlist.dsbl.org * 8 0 MAILPOLICE-BULK rhsbl

re: [Declude.JunkMail] Help with Configuration

2006-11-07 Thread Gary Steiner
Is it because when it reaches WEIGHT19 and does the ROUTETO [EMAIL PROTECTED], the message is delivered? Then when it tries to perform the action of WEIGHT32 the message is already gone? Does Declude allow for multiple instances of the same action where subsequent actions are performed, or doe

[Declude.JunkMail] SmarterMail 4.x beta

2006-11-07 Thread Gary Steiner
SmarterTools just announced a features list for the next release of SmarterMail. They are releasing SmarterMail 4.x beta on Monday, November 13th. (They estimate a final release of 4.x around January.) The new features include greylisting and integration with SpamAssassin. Check out the offic

RE: [Declude.JunkMail] declude not modifying subject line

2006-11-08 Thread Gary Steiner
Same in SmarterMail. It is interesting when you receive one of these messages to find the Declude header lines at the end of the message, and the one or two header lines that SmarterMail appends (after Declude hands the message back to SmarterMail) right where they should be at the end of the h

re: [Declude.JunkMail] CMDSPACE/SmarterMail

2006-11-10 Thread Gary Steiner
I'm also using SmarterMail Enterprise Edition 3.3.2439 and Declude 4.3.14, and have had CMDSPACE configured for quite a while, but hadn't thought anything about it. When I saw your message I ran DLanalyzer on my logs for the past two weeks and saw that there were no hits for CMDSPACE at all. S

RE: [Declude.JunkMail] CMDSPACE/SmarterMail

2006-11-10 Thread Gary Steiner
, November 10, 2006 3:10 PM > To: declude.junkmail@declude.com > Subject: RE: [Declude.JunkMail] CMDSPACE/SmarterMail > > I see that too, I will look into this. > > David B > www.declude.com > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

re: [Declude.JunkMail] Per Domain Blacklists

2006-11-12 Thread Gary Steiner
Well, you can have a separate $default$.junkmail file for each domain, so whatever unique tests you wanted for a domain you would just define it in your global.cfg and then list it in the $default$.junkmail for that domain. Gary Original Message > From: "Dean Lawrence" <[EMA

re: [Declude.JunkMail] Blacklists Recommendations.

2006-11-27 Thread Gary Steiner
BLITZEDALL went offline in May (see http://opm.blitzed.org). Other than that, all the ones you are using I am also using. Other IP4R tests that I am using successfully that you are not: ADNSBL dnsbl.antispam.or.id BASURA bl.emailbasura.org CSMA-SBLbl.csma.biz IMP-SPAMspamrbl.i

re: [Declude.JunkMail] How Accurate is Sniffer?

2006-11-30 Thread Gary Steiner
You might want to run it for a little while to see what results you get. I've gotten a lot of false positives with Sniffer. Gary Original Message > From: David Dodell <[EMAIL PROTECTED]> > Sent: Thursday, November 30, 2006 10:41 PM > To: Declude.JunkMail@declude.com > Subjec

[Declude.JunkMail] SmarterTools offline

2006-12-04 Thread Gary Steiner
For those SmarterMail owners who may have noticed that SmarterTools has been offline for over 24 hours, you can read about it here: http://www.crystaltech.com/forum/topic.asp?TOPIC_ID=16305 Gary --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-ma

re: [Declude.JunkMail] Country Code

2006-12-05 Thread Gary Steiner
Declude has an entry in their Knowledge Base that lists the regions: http://support.declude.com/Customer/KBArticle.aspx?articleid=35&KBSearchID=6746 As for country codes, the most official source is probably the IANA: http://www.iana.org/root-whois/index.html Thought they probably get their inf

re: [Declude.JunkMail] AVG

2006-12-15 Thread Gary Steiner
Regardless of which anti-virus program you are using, you can easily add ClamAV to give you an extra layer of protection (and it's free). Besides, I've often seen ClamAV pick up new viruses long before F-prot adds them. Gary Original Message > From: "Serge" <[EMAIL PROTECTE

re: [Declude.JunkMail] DNS Based Test - Bad Link on Web

2006-12-19 Thread Gary Steiner
It should read http://shopping.declude.com/Articles.asp?ID=97 When Declude updated its web site a couple months ago, they missed a lot of the old links. All you need to do with the old link is to change "www" to "shopping". Original Message > From: "Mike Wiegers" <[EMAIL PRO

re: [Declude.JunkMail] Whitelist IP for one domain

2006-12-20 Thread Gary Steiner
It's better to weight your whitelist rather than have an IP be fully whitelisted. You would have an entry like this WHITELIST-IPipfile C:\{MAILSERVER}\Declude\Filters\WHITELIST-IP.txt x -20 0 In the file WHITELIST-IP.txt you would have something like this 123.456.78.90

re: [Declude.JunkMail] Virus sneaking past Declude/AVG/F-PROT?

2006-12-22 Thread Gary Steiner
Submit a sample through http://www.virustotal.com and it will show you which anti-virus programs are currently identifying it. Gary Original Message > From: "S.J.Stanaitis" <[EMAIL PROTECTED]> > Sent: Friday, December 22, 2006 4:09 PM > To: declude.junkmail@declude.com > Subjec

[Declude.JunkMail] OT: Taiwan earthquake

2006-12-27 Thread Gary Steiner
Anybody notice a significant drop in spam? >From the CNN web site: "Quake knocks Asia back to pre-Internet days" http://www.cnn.com/2006/WORLD/asiapcf/12/27/taiwan.quake.ap/index.html --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL P

RE: [Declude.JunkMail] CMDSPACE/SmarterMail

2007-01-04 Thread Gary Steiner
David, Has any progress been made on this issue? Using SmarterMail Enterprise 3.3.2439 and Declude 4.3.23, I still am not seeing CMDSPACE getting any hits. Gary Steiner Original Message > From: "David Barker" <[EMAIL PROTECTED]> > Sent: Monday, Nove

[Declude.JunkMail] all_list.dat ?

2007-01-09 Thread Gary Steiner
David (or any Declude people that may be reading), Any chance of seeing a new all_list.dat any time soon, considering the current one has a date of 6 Jul 06, and considering the additional input from this recent thread? I'm starting to see false positives caused by weights I previously gave to

[Declude.JunkMail] SmarterMail 4.0 is released

2007-01-11 Thread Gary Steiner
SmarterTools just released the next major version of SmarterMail. It has been rewritten in ASP.NET 2.0 from which they claim across the board performance improvements. Major new features include greylisting and built-in ClamAV, as well as better features for use as a gateway. For a list of ne

[Declude.JunkMail] fuzzyOCR

2007-01-16 Thread Gary Steiner
Is there some equivalent of fuzzyOCR that can be used with Declude? http://fuzzyocr.own-hero.net/wiki/WhatisFuzzyOcr --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives

re: [Declude.JunkMail] Specific filter for individual users

2007-01-23 Thread Gary Steiner
What you will have to do is set up a $default$.junkmail file for each user that wants a unique configuration. Check out http://manuals.declude.com/ProcOnlineHelp/JunkMail_4.0.8_Per-User_Configuration.htm Original Message > From: "Kelly Scotto" <[EMAIL PROTECTED]> > Sent: Tue

Re: [Declude.JunkMail] OT: SPF record question

2007-02-16 Thread Gary Steiner
I have a question to follow this subject. If users have Outlook and they are sending email fromm home or whereever using authentication, then the IP that shows up in the header will be their home connection. That being the case, unless your users are strictly using webmail, your SPF record sho

RE: SPAM-WARN:Re: [Declude.JunkMail] OT: SPF record question

2007-02-16 Thread Gary Steiner
mail > server. So, the remote mail server (possibly my mail server) would check the > SPF to determine if your mail server was listed as a source for the domain > of the sending email address. > > Michael Thomas > Mathbox > 978-683-6718 > 1-877-MATHBOX (Toll Free) >

Re: [Declude.JunkMail] OT: SPF record question

2007-02-17 Thread Gary Steiner
SMTP AUTH > bypasses Declude filtering. > > Darin. > > > - Original Message - > From: "Gary Steiner" <[EMAIL PROTECTED]> > To: > Sent: Friday, February 16, 2007 4:10 PM > Subject: RE: SPAM-WARN:Re: [Declude.JunkMail] OT: SPF record qu

Re: [Declude.JunkMail] OT: SPF record question

2007-02-17 Thread Gary Steiner
; > or any other way you avoid filtering your connecting users. > > Its all about > > your server sending to the destination server. > > > > This has been working for us for the past year and a half or so. > > > > Darin. > > > > > > - Orig

Re: [Declude.JunkMail] OT: SPF record question

2007-02-18 Thread Gary Steiner
everything runs > > smoothly and the next we'll get 100 messages back from Yahoo. We've given > > up trying to figure it out, but SPF is not the culprit. > > > > Shayne Embry > > > > > > > > Original Message > > > From: "

re: [Declude.JunkMail] Built in AV

2007-02-26 Thread Gary Steiner
You should see one of these in your virus.cfg file: BUILTINSCANNEROFF BUILTINSCANNERON Though I believe the default is ON. I don't think it uses "scanner 0" anymore. If AVG finds something, you should see a line in the log file that contains "AVG Reports VIRUS:" Original Me

re: [Declude.JunkMail] Next Declude Release

2007-02-28 Thread Gary Steiner
In looking for a PCRE/regex for dummies, found these links: http://en.wikipedia.org/wiki/PCRE http://www.pcre.org/ http://gnuwin32.sourceforge.net/packages/pcre.htm http://www.english.uga.edu/humcomp/perl/regex2a.html http://www.regular-expressions.info/ http://www.regex.info/ Orig

Re: [Declude.JunkMail] PCRE FILTERING

2007-03-16 Thread Gary Steiner
Here are some web pages you might check out: http://www.cecilw.com/eudora/regexp.htm http://www.adamlyon.com/spam/spam_filter_regex.html http://www.adamlyon.com/spam/afo.txt http://trac.edgewall.org/wiki/BadContent http://www.regexlib.com/ Hopefully at some point Declude will post a list of g

RE: [Declude.JunkMail] Filtering question

2007-03-21 Thread Gary Steiner
Have you tried DLanalyzer? http://www.invariantsystems.com/dlanalyzer/ There is a free version that you can use for evaluation. Original Message > From: "IS - Systems Eng. \(Karl Drugge\)" <[EMAIL PROTECTED]> > Sent: Wednesday, March 21, 2007 9:35 AM > To: declude.junkmail@de

re: [Declude.JunkMail] OT: Yahoo Email Problems

2007-03-29 Thread Gary Steiner
Here's an interesting recent post from the SmarterMail forums that covers this topic: http://forums.smartertools.com/forums/thread/30555.aspx Original Message > From: "Dave Beckstrom" <[EMAIL PROTECTED]> > Sent: Thursday, March 29, 2007 12:44 PM > To: declude.junkmail@declude

[Declude.JunkMail] dnsbl.antispam.or.id

2007-04-06 Thread Gary Steiner
Is dnsbl.antispam.or.id working? I haven't gotten any hits off it for over two months, but I haven't seen anything posted about it being discontinued or shut down. Anyone else having good/bad luck with it? Gary --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,

RE: [Declude.JunkMail] CMDSPACE/SmarterMail

2007-04-09 Thread Gary Steiner
David, Has any progress been made on this issue? Using SmarterMail Enterprise 3.3.2621 and Declude 4.3.40, I still am not seeing CMDSPACE getting any hits. Gary Steiner Original Message > From: "Gary Steiner" <[EMAIL PROTECTED]> > Sent: Thursday, Ja

re: [Declude.JunkMail] Adding weight by country

2007-05-01 Thread Gary Steiner
You can find it in the knowledgebase at http://support.declude.com/Customer/KBArticle.aspx?articleid=6&KBSearchID=8956 To get a perspective on how it is being used by different folks represented on the mailing list, go to http://www.mail-archive.com/declude.junkmail@declude.com/ and do a search

Re: [Declude.JunkMail] Spam reduction ?

2007-05-04 Thread Gary Steiner
May 1st is a big holiday in Europe, so maybe that had some affect. Original Message > From: Heimir Eidskrem <[EMAIL PROTECTED]> > Sent: Friday, May 04, 2007 12:45 PM > To: declude.junkmail@declude.com > Subject: Re: [Declude.JunkMail] Spam reduction ? > > IS - Systems Eng. (Kar

re: [Declude.JunkMail] tqmcube.com

2007-05-14 Thread Gary Steiner
I've been using them for a while. dhcp.tqmcube.com has given good results, though I've gotten one or two false positives from spam.tqmcube.com (I still use spam.tqmcube.com, just with a lighter weight). ko.tqmcube.com flags ip's from South Korea, and prc.tqmcube.com flags ip's from China, so t

re: [Declude.JunkMail] all_list.dat

2007-06-29 Thread Gary Steiner
The "corrupt RIPE data" should be referring to 145.53.30.139. Though if you go to www.ripe.net and do a search, 145.53.0.0/16 is listed as belonging to Planet Technologies with an email address of [EMAIL PROTECTED] and being in The Netherlands. Which is essentially the same as the listing for

re: [Declude.JunkMail] Bulk Outbound Mailer

2007-07-02 Thread Gary Steiner
One of my customers is using GroupMail to send out a monthly newsletter along with occasional announcements to a school mailing list. His list currently has between 400-500 members. He is using the free version of GroupMail. http://www.group-mail.com/asp/common/groupmail.asp?ct=232

RE: [Declude.JunkMail] Country code

2007-07-05 Thread Gary Steiner
According to the whois at www.arin.net, 41.0.0.0/8 belings to AFRINIC, and if you go to www.afrinic.net and use the whois there, the numbers break down like this: 41.223.109.25 KE (Kenya) 41.207.19.204 CI(Cote d'Ivoire) 41.207.9.101 CI (Cote d'Ivoire) 41.207

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-13 Thread Gary Steiner
My situation is similar to yours. I started with F-Prot, then later added ClamAV. After Declude added AVG and F-Prot changed their pricing, I dropped F-Prot. I've been using the SOSDG port of ClamAV together with runclamd and runclamscan to take advantage of Clamd, and I've never had a proble

RE: [Declude.JunkMail] AntiVirus Recommendations

2007-07-14 Thread Gary Steiner
> --tempdir=D:\IMail\spool\proc\work --no-summary -l report.txt > #VIRUSCODE 1 > > > thanks > John > > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Gary > Steiner > Sent: Friday, July 13, 2007 10:38 AM &

  1   2   >