Re: [Declude.JunkMail] Decludeproc abend

I was trying to make a joke but it is hard to do vie email at times.  :)   Especially to Windows diehards  :))) I learned the abend  term from Novell  > which is where  I presumed it  was coined.  I know nothing about mainframe admin so it may have been born there. -Nick Sanford Whiteman wrote

Re: [Declude.JunkMail] Hardware Issue

Hi David, Would you kindly elaborate on the ramifications of such a failure? I am interested in when its fixed but more importantly its ramifications.  Are you saying that a hardware/network/software issue on your end can in anyway disarm/defuse/alter/change the way Declude functions on its in

Re: [Declude.JunkMail] Declude Hardware Issue

David, David Franco-Rocha wrote:   B) Your software is NEVER downgraded for any reason, either automatically or otherwise hmm - would you kindly shut down your key server for awhile and monitor the list in the meantime? -Nick   We have had a few reports from customers who

Re: [Declude.JunkMail] How to get negative rounded SA result usiing SPAMC32

Sanford Whiteman wrote: I don't think it's me, I think it's Declude. Seems Declude is not even interpreting these as zero scores, but simply not matching them to any test definition at all? That's a substantial bug, if so. Can anyone else, I cannot get neg values returned I'm running 2.1

Re: [Declude.JunkMail] OT: MaxDSNSize

Matt - So Are you using ORF to tarpit or MS SMTP and if the latter besides the 2 reg tweaks below do you make any other changes?  The threads thing is ok? Thanks -Nick Matt wrote: I just confirmed that this works properly.  If the size limit is exceeded for the DSN, it strips all a

Re: [Declude.JunkMail] ANN: SPAMC32 (SpamAssassin SPAMC for Declude) 0.5.58 released

Thanks Sandy! -Nick Sanford Whiteman wrote: -- SPAMC32 Release 0.5.58 1/10/2006 * Release notes for this version: [ + Added feature] [ * Improved/changed feature ] [ - Bug fix ] [ ^ Cosmetic/naming change ]

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

Matt wrote: I'm sure that Nick will volunteer to have his server monitored by me so that I can test this out on another box. I believe that he is also on 2.0.6.16 as well. sure and I am. Off list we need to discuss - -Nick Matt David Barker wrote: FYI Hyperthreading http://news.zdne

Re: [Declude.JunkMail] Declude v3 CPU usage and processing speed

Markus Gufler wrote: My conclusion for this day:   Normaly I should stay in bed today as I'm more ill then healthy. Agreed!  We need you Markus so get well! -Nick   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt Sent: Friday, Januar

[Declude.JunkMail] malware or virii?

What do you think? I asked Matt and he said for me to try the link :) -Nick Received: from mx2.madriveraccess.com [12.152.254.14] by mx1.vtbass.com with ESMTP (SMTPD32-8.15) id A234DC20330; Fri, 20 Jan 2006 20:45:24 -0500 Received: from hugin5.snet.uvm.dk ([195.231.243.86]) by mx2.madrivera

Re: [Declude.JunkMail] malware or virii?

iffer, and maybe note the submission to the Sniffer list, though I'm sure that Pete is seeing this also. Matt Nick Hayer wrote: What do you think? I asked Matt and he said for me to try the link :) -Nick Received: from mx2.madriveraccess.com [12.152.254.14] by mx1.vtbass.com with ESMTP

[Declude.JunkMail] I seem to get alot of spam from the 'legit' lists.

Does anyone block them ? bcentral.com, bcentralhost.com, linkexchange.com, listbot.com, and listbuilder.com Thanks for your input - -Nick --- [This E-mail was scanned for viruses by Declude EVA www.declude.com] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just

Re: [Declude.JunkMail] OT - Server Watching.

Hi Jerod, I use jffnms http://www.jffnms.org/ Its open source [free] runs on all platforms and is very good. -Nick Jerod M. Bennett wrote: Hey, I know this is off topic, but I respect the knowledge and opinions of the people on this list. What software / services do you guys use to watc

Re: [Declude.JunkMail] OT - Server Watching.

John T (Lists) wrote:   BTW, what server did DAD stand for? (It never made it off the design board, of if it did it never became a beta, only an alpha.) well with family court so prevalent I would guess MOM got all of DAD's stuff? -Nick  :)   John T eServices Fo

Re: [Declude.JunkMail] Logged spam getting to mailbox

Title: Logged spam getting to mailbox Odd - just because its always the same email. What number do you delete on? Although the logs will balloon in size running the Declude in DEBUG may shed some light. I presume this is Declude 3x ver? -Nick Agid, Corby wrote: Hello, I'm ha

Re: [Declude.JunkMail] Logged spam getting to mailbox

t a particular email from a particular spammer would not be tagged on a daily basis. Maybe Declude support can offer some insight. Other than debug like I mentioned I have no idea -   I'd be ask'n Matt or Andy if it happened to me! -Nick From: [EMAIL PROTECTED] [mailto:[EMAIL

Re: [Declude.JunkMail] ANN: SMTP Gateway

Sanford Whiteman wrote: Has no one realized that this product is a commercial competitor to IMail or SmarterMail, with no relevance to Declude? I missed the post. .I actually had to look in my deleted emails to find the email to which you were referring.. Obviously you are right - I gues

[Declude.JunkMail] 'Nigerian Sales'

Morning.. Below is a sample email - which I classify as Nigerian sales. I am having a tough time flagging them as the come from generally generally legit accounts, have no links, etc.  I have a filter that kinda works but no question a lot slips thru. Can anyone suggest a way I can get these?

Re: [Declude.JunkMail] elabs3.com

X-Note: X-Note: This email was scanned for spam. [Details at http://spamstats.madriveraccess.com] X-Note: This email has been virus scanned by F-Prot,McAfee AV, and ClamAV. X-Note: Please send abuse reports to [EMAIL PROTECTED] X-Country-Chain: X-Hello: X-Note: SMTP Send

Re: [Declude.JunkMail] Declude 4 changes ... worried...

X-Note: X-Note: This email was scanned for spam. [Details at http://spamstats.madriveraccess.com] X-Note: This email has been virus scanned by F-Prot,McAfee AV, and ClamAV. X-Note: Please send abuse reports to [EMAIL PROTECTED] X-Country-Chain: X-Hello: X-Note: SMTP Send

Re: [Declude.JunkMail] Opinion

X-Note: X-Note: This email was scanned for spam. [Details at http://spamstats.madriveraccess.com] X-Note: This email has been virus scanned by F-Prot,McAfee AV, and ClamAV. X-Note: Please send abuse reports to [EMAIL PROTECTED] X-Country-Chain: X-Hello: X-Note: SMTP Send

Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters

X-Note: X-Note: This email was scanned for spam. [Details at http://spamstats.madriveraccess.com] X-Note: This email has been virus scanned by F-Prot,McAfee AV, and ClamAV. X-Note: Please send abuse reports to [EMAIL PROTECTED] X-Country-Chain: X-Hello: X-Note: SMTP Send

Re: [Declude.JunkMail] SKIPIFWEIGHT - RUNIFWEIGHT?

I do not think this would work - WEIGHT and WEIGTRANGE tests run last. [I think!]  As Scott suggested the only way I believe is to use the  SKIPIFWEIGHT directive. For me it would sure be nice if we could use variables in the filter files eg IF %WEIGHT% > xx  ELSE END sort of thingy.. -Nick

Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters

Thanks Bill, Bill Landry wrote: BTW, if you are running ClamAV, and want to take full advantage of it's phish catching capabilities, you might was to take a look at adding the phish signature file that Steve Basford put together I just installed the sigs and within 10 min I had 3 'hits': Htm

Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters

Hi Gary, Gary Steiner wrote: I've never run ClamAV before. Looking at www.clamav.net, I see there are several Windows ports for it. Is anyone using one of the various Windows ports for ClamAV under W2K3? If so, which one is best? no idea!  But the one I use is http://www.sosdg.org/cla

Re: [Declude.JunkMail] Banks (and Ebay) Phising Filters

Excellent. Thanks Scott! -Nick Scott Fisher wrote: Thanks Bill, that's pretty nice. I've tripped over that page before, but I never noticed the download link. They are catching phish already here. For the purposes of the list, here's the command file I put together to download updates. I sc

Re: [Declude.JunkMail] Weightrange order

Kami Razvan wrote: Hi;   It seems like WEIGTRANGE tests are done at the very end.. no other filter tests run.   Is that right? this is correct.  - no real exact order but the usual is WEIGHTRANGE runs last... -Nick   Regards, - Kami

Re: [Declude.JunkMail] Spam out of 86.* & 87.*

Hi John, What is my best bet - jack up the score a number of points for any mail coming from 86 & 87? Many of the messages hardly trip any of the regular tests. Wouldn't hurt - use blackholes.us and maybe score 40% of your hold weight? I would say though blocking a /8 is not a good idea.

Re: [Declude.JunkMail] Hijack help

Hi Todd, Todd Richards wrote: I have adjusted the thresholds in the Hijack.cfg file (this is a common practice by our members-only clients) You can do anALLOWIPxxx.xxx.xxx.xxx and that ip will be whitelisted. but how do I release his IP address? well it used to be start/s

[Declude.JunkMail] spf breaks email forwarding -

Email customers that forward through me are getting their email bounced because of the original sending domain's spf policy. I understand this delima is addressed with "Sender Rewriting Scheme" http://www.openspf.org/srs.html Does anyone have a solution to this w/Declude & Imail? Thanks -N

Re: [Declude.JunkMail] spf breaks email forwarding -

]] On Behalf Of Nick Hayer Sent: Saturday, March 04, 2006 11:40 AM To: Declude.JunkMail@declude.com Subject: [Declude.JunkMail] spf breaks email forwarding - Email customers that forward through me are getting their email bounced because of the original sending domain's spf policy. I under

Re: [Declude.JunkMail] spf breaks email forwarding -

Matt wrote: Real-world issues include working around bad implementation, such as surfglobal.net not configuring their server to reject messages that fail SPF. SRS is a work around - and I'm simply asking if anyone has implemented it on an Imail/Declude platform. Kindly stay on topic  I

Re: [Declude.JunkMail] spf breaks email forwarding -

a fully qualified D*.SMD file (which can be any filename) you can just call:   smtp32.exe Qxxx.SMD and IMail will queue it up immediately.     Ta-dah!  Easy as world peace.   Andrew 8)   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nic

Re: [Declude.JunkMail] spf breaks email forwarding -

Hi Sandy Sanford Whiteman wrote: Andrew, I like your workaround with the Program Alias. However, I think that instead, if people are willing to wait a few weeks to a month, I can find time to put out a full-fledged external test for Declude that does much the same thing, wit

Re: [Declude.JunkMail] OT: Inexpensive rate limiting switch?

Hi Dave, I have one of these that will do what you want I believe. - I've moved on to a Packeteer and a large Catalyst. If you are interested let me know. http://www.netsys-direct.com/proddetail.php?prod=NS-2024S&cat=12 -Nick Dave Doherty wrote: Hi, all- I'll be providing VOIP and Internet

Re: [Declude.JunkMail] Feature request MINWEIGHTTOFAIL

Hi Scott - I do not quite understand - you could score  each line [hit] with the filter protected with a minweight to fail [to protect against false positives ] and if necessary to contain the filter from  overpowering the scoring a maxweight to cap. The filter only runs once and will accumul

Re: [Declude.JunkMail] Hijack Notification

Hi Craig, Although you may already do this figured I mention it anyway - this technique works well to monitor spool traffic eg when a threshold is reached I get an email - so for example in your code below IF FFunc.Count > 100 [altered path for the spool dir] > send me an email... -Nick Cr

Re: [Declude.JunkMail] Hijack Notification

; fcount & "' "     mCmd = aMail & mFrom & mTo & mSubj & "-f placeholder.txt"     Return = WshShell.Run(mCmd , 1, TRUE) End Function -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Nick Hayer Sent: Sunday, April 02,

Re: [Declude.JunkMail] Hijack Notification

PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Monday, April 03, 2006 11:03 AM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] Hijack Notification   Hi John, >John Doyle wrote: >this guy suggested this. >I'm not sure exactly how. l

Re: [Declude.JunkMail] Sorry, have to share

Actually the grammar reminds me of Matt :) -Nick John Carter wrote: I know some of you have seen such before, but the text below is the most extreme (useless) attempt to get around filters I've seen. It looks like something my son would text message. LOL John Your c a redi z t doesn't

Re: [Declude.JunkMail] Hijack Question

Hi Dean - Dean Lawrence wrote: First, what thresholds are most of you using, that causes minimal screaming phone calls from client? 8-) RELAYTHRESHOLD11020 RELAYTHRESHOLD23040 Secondly, how are you handling non-fixed IP users that may send large (over the thresholds), bu

Re: [Declude.JunkMail] Hijack Notification

like this.  Do I need to set this up as a task, or how will it run?    Thanks for any tips.   Todd From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Monday, April 03, 2006 3:59 PM Take that code, adjust the paths/email addresses as need be, save it

Re: [Declude.JunkMail] invURIBL

I would ask the questions on their list - this is the Declude junkmail list - probably over there folks know it better and would get better info. -Nick Todd Richards wrote: Per suggestions from others, I am looking to implement invURIBL on our mail server (Imail 8.2x with Declude 4.0.9). I wa

[Declude.JunkMail] credit or punish these lists?

I have trouble deciding if these are generally good or bad lists - do any of you block them with certainty? Thanks -Nick biglist.com internetcrusade.com rmxx.com edxx.com [both of the above replace the xx with 01,02,03,etc..] roving/constantcontact --- This E-mail came from the Declude.JunkMa

Re: [Declude.JunkMail] Declude as a Gateway

I am -Nick [EMAIL PROTECTED] wrote: If anyone is using Declude with SmarterMail or IMail as a Gateway could you get in touch with me off the list [EMAIL PROTECTED]   Thanks   Barry

Re: [Declude.JunkMail] OT: Help with WinZip command line

John T (Lists) wrote: I am trying to create a batch file that will zip up a weeks worth of logs and then move that zip file. kake. w/pkzip command line... The problem I am having is that I want to zip the previous 7 days, but sometimes the last log is time stamped say 04/16/06 11:59 PM and

Re: [Declude.JunkMail] OT: Help with WinZip command line

Hi John, AH, use variables to set the date and then process by date. simplicity is elegance :) Now question, how does that work if say you run the script on 04/01/06? Will it recognize the day before as 03/31/06 or will it try to say it is 04/00/06? Well it depends. What files will be su

Re: [Declude.JunkMail] Cannot Access DNSSTUFF

you can email info[AT]dnsstuff.com - -Nick Mark Reimer wrote: I cannot access dnsstuff.com from my network. I think my IP may be banned but I'm not sure how that would happen. How to I get in contact with someone to see if I've been banned? Mark Reimer --- [This E-mail has been scanned fo

Re: [Declude.JunkMail] Sniffer alternative -slight change of thread...

Hi Sandy, Sanford Whiteman wrote: Well, we've lately been running Razor *and* Sniffer and have found no reason to give up either one. How do you have Razor configed? eg is it on a win32 box? If so would you share how you did it? -Nick --- This E-mail came from the Declude.JunkMail mailing

Re: [Declude.JunkMail] Way OT: Find a virus in my network

Snort will tell you in a heartbeat -Nick Marc Catuogno wrote: I had my ISP (dsl.net) call and tell me that there was virus activity on our circuit, namely port scans on 445 (maybe Sasser?). I have asked all my agents to run the removal tool and do windows update. I have run Ethereal but it di

[Declude.JunkMail] image spam

fyi - I just found these 2 plugins for spamassassin http://wiki.apache.org/spamassassin/OcrPlugin http://antispam.imp.ch/patches/patch-ocrtext That will ocr the gifs, etc. These should help SA be even more effective within Declude.. -Nick --- This E-mail came from the Declude.JunkMail mailing

Re: [Declude.JunkMail] Version control and announcements.

I sure feel this way - not only the releases that are not mentioned but also the bugs that are described that go unanswered. I would guess these are some of the reasons this list is so dead now. oh yea - I started w/ver 1.28 :) -Nick John Shacklett wrote: Hi. Following along with the them

Re: [Declude.JunkMail] image spam

les found in the 80_additional.cf rule set that are very good at tagging these kinds of image spams. And finally, Sniffer seems to successfully tag almost 100% of these image spams, and Razor tags a majority of them, as well. Bill - Original Message - From: "Nick Hayer" <

Re: [Declude.JunkMail] image spam

Sanford Whiteman wrote: In keeping with the increased CPU demands of such tests, the new version of SPAMC32 will contain the ability to send the request to two (maybe more than two in future) "tiered" SPAMD daemons. The second daemon -- listening on a different port, or on a different

[Declude.JunkMail] ClamAV Sanesecurity phish files

fyi - Sanesecurity phish downloads have changed as of 5/10. The download file is gzip'ed and called phish.ndb.gz -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives c

Re: [Declude.JunkMail] What happened to the logging since 2.x????, it's HUGE

Hi Matt, Matt wrote: I'm trying an upgrade from the 2.x release for the first time, Why on earth would you want to do that? Was 2x too bug free and you need some excitement? -Nick

Re: [Declude.JunkMail] Experience with 4.x

Very nice! It looks like Matt has taught you well on how to comment a file   :) -Nick Colbeck, Andrew wrote: I'd second that... on both the observed behaviour and the request for documentation.   I'm attaching my highly commented declude.cfg as a reasonable sample.   Andrew

Re: [Declude.JunkMail] Experience with 4.x

Hi Matt, So you see any substantive performance improvement over 2x? -Nick Matt wrote: Jay, It's not about moving along, it's about limiting the CPU to only 100%, or at least not piling it on when it gets there. I could be wrong in assuming that 1 thread = 1 message (hopefully I will be c

Re: [Declude.JunkMail] compatibility question

Hi David [Barker], Is there a list, or would you kindly post one of the known issues with Declude?  I'm still on 2x because of all the problems reported and what I perceive as them not being resolved. Thanks! -Nick John Doyle wrote: Robert   I"m running 8.22 hf2 and Declud

Re: [Declude.JunkMail] compatibility question

user only not domain (fixed) David B www.declude.com From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, June 19, 2006 1:04 PM To: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] compatibility question Hi David [Ba

[Declude.JunkMail] upgrade to 4x

I have been running 2.0.16 however it has a bug that external tests will double-dip; eg fail the same external test multiple times... I reported it to tech support with no resolution - so my only recourse is to run the latest ver. I am licensed for declude virus, hijack and JMPro - so I d

Re: [Declude.JunkMail] upgrade to 4x

Hi Sandy, Sanford Whiteman wrote: I have been running 2.0.16 however it has a bug that external tests will double-dip; eg fail the same external test multiple times... I reported it to tech support with no resolution - so my only recourse is to run the latest ver. Is i

Re: [Declude.JunkMail] Latest All_LIst.dat file

There is a much more recent avail you can download from 'my account' on the declude site. If you cannot find it let me know and I will send it to you. -Nick Darrell ([EMAIL PROTECTED]) wrote: What is the latest all_list.dat file. Mine is dated 9/28/2005. I am seeing an issue with 67.111.13

Re: [Declude.JunkMail] Country tests

Hi Mike, Here is my understanding of the 2 tests: If an email originates from a country it will fail the COUNTRY test If an email passes through a country it will fail the COUNTRIES test -Nick Mike N wrote: I looked in the 4.x Junkmail manual, and couldn't find an authoritative definition o

Re: [Declude.JunkMail] Trying to install Declude 3.1.20 anew

Andy Schmidt wrote: Hi Dave, Sorry everyone -- my mistake. no biggie. That is what David, our pinada, is for. :) -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The

[Declude.JunkMail] [Fwd: [0A6-0C4E22B9-4D5B] ZEROHOUR]

please do not hesitate to contact me either by email or call Toll free 1-866-332-5833 Ext.7008 Linda Pagillo Technical Support Engineer Declude - Your Email security is our businessT 978.499.2933 office 978.477.8930 efax [EMAIL PROTECTED] www.declude.com From: Nick Hayer <[EMAIL PROTECTED]&g

Re: [Declude.JunkMail] F-Prot Licensing

David Barker wrote: Declude has this process and functionality built in to the Declude product which enables customers to use a command line scanners like ClamWin Brian Burns port called ClamAV supports clamd which is wicked fast [and free]. This is a different product from ClamWin. I had

Re: [Declude.JunkMail] F-Prot Licensing

Don Brown wrote: What is the URL to Brian Burns' port? http://www.sosdg.org/clamav-win32/ -Nick Monday, July 17, 2006, 2:05:34 PM, Nick Hayer <[EMAIL PROTECTED]> wrote: NH> David Barker wrote: Declude has this process and functionality built in

Re: [Declude.JunkMail] F-Prot Licensing

Sorry but I have not been keeping up w/this thread - we no longer can use the desktop fpcmd.exe as we have been w/Declude without paying alot more $$?  Can we use the version we have and still get defs? -Nick Matt wrote: F-Prot doesn't care.  They don't do volume as a plug-in to mail ser

Re: [Declude.JunkMail] Speaking of Decludes AVG scanner

Chris Asaro wrote: Try opening the diags.txt file in your \mailserver\declude directory. Check to see if you are receiving an invalid key code error. When I went to 4.20 I had no such error code however the evidently there was a one hence Declude ceased to function without warning. -Nick

Re: [Declude.JunkMail] Declude 4.3

David - at Declude - Would you kindly comment on this? Also on what is Declude 4.3? -Nick John T (Lists) wrote: I guess we all missed the following paragraph in the license agreement: 3.2.6 sub-license, rent, sell, lease, distribute, or otherwise transfer the Licensed Program save as p

Re: [Declude.JunkMail] Declude 4.3

Current Service Providers (ie. Before 1 June 06) are under no restrictions for using Declude; only the CommTouch add-in component. Excellent! Thanks for the reply - -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROT

Re: [Declude.JunkMail] Declude 4.3 - Commtouch trial ?

ahh like Razor? -Nick David Barker wrote: Darrell, It is not a DNS test. Commtouch analyzes large volumes of Internet traffic in real time. New spam and Malware outbreaks are identified as soon as they emerge, and recorded in the Commtouch Detection Center. The Commtouch Engine in Declude

[Declude.JunkMail] Commtouch, etc

David, You have asked for some constructive feedback here regarding this new offering - I will not ask for a show of hands here :) but I bet a lot of folks are rolling their eyes simply because of the core Declude product and its outstanding bugs., inability to release a stable product, serv

Re: [Declude.JunkMail] Commtouch, etc

Hi David, David Barker wrote: Nick, With regards to outstanding bugs I have a list which we are working on, and as you know I have committed to get these fixed as well That you have, and your participation on this list is greatly appreciated. I was only trying to suggest that the past couple

Re: [Declude.JunkMail] OT SNMP Monitor Program

we use http://www.jffnms.org/ -Nick dfn Systems wrote: Quiet times are good for off topic subjects Right? I need a Monitoring program that will show me bandwidth utilization of my dsl customers to help track down compromised/infected machines. Regular sniffer programs won't work because the

Re: [Declude.JunkMail] Fw: New ClamAV "scam" database

Thanks much Bill, -Nick Bill Landry wrote: For anyone that is possibly running ClamAV for virus scanning, and is already taking advantage of the added "phish" detection provided by Steve Basford's phish.ndb, he has put together another database geared to tagging "scam" e-mails, including th

[Declude.JunkMail] manual install of 4x

Is there a way to do this without the wizard? Thanks for any info -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.

[Declude.JunkMail] IPBYPASS Broke?

To David at Declude - or anyone else... I have these lines in my global config Declude 4.3.7: IPBYPASS12.152.254.14 XINHEADER X-Note: Sent from: [Revdns: %REVDNS%] [RemoteHostDomain: %REMOTEHOST%] [RemoteIP: %REMOTEIP%] [SenderHost: %SENDERHOST%] I received this email below where

Re: [Declude.JunkMail] IPBYPASS Broke?

Matt wrote: Nick, Do you buy any chance have have this IP also covered by a whitelist entry of any type in your Global.cfg? Nope. No where is it listed except on the IPBYPASS line - -Nick Matt Nick Hayer wrote: To David at Declude - or anyone else... I have these lines in my

Re: [Declude.JunkMail] IPBYPASS Broke?

: declude.junkmail@declude.com Subject: Re: [Declude.JunkMail] IPBYPASS Broke? Nick, Do you buy any chance have have this IP also covered by a whitelist entry of any type in your Global.cfg? Matt Nick Hayer wrote: To David at Declude - or anyone else... I have these lines in my global

Re: [Declude.JunkMail] Newest version

This regex works \b(PHA)+([a-zA-Z]+(RMA))\b as well as this one for the other morph \b(PHA)+([a-zA-Z]+(RMACY))\b -Nick Ferrell Ard wrote: We are seeing a lot of email with the Subject line Subject: X-IMail-SPAM PHAujyRMA The KEY to the subject line is (1) 1st 3 letters are "always" PHA (2

Re: [Declude.JunkMail] Crisis after upgrade to 4.3.14 from 4.3.7

Harry, Please post to the list the details - Thanks -Nick chris wrote: Harry     Contact me off the list if you can, I would like to help     Chris Asaro Technical Support Engineer Declude Your Email security is our business 866.332.5833  toll free

Re: [Declude.JunkMail] picture spam

Matt wrote: Let me jump in here for a moment. You guys should have made a deal with Pete instead of CommTouch.  Sniffer blows it out of the water and he has no licensing restrictions.  IMO of course. mine too!  Sniffer does a very good job.. -Nick ---This E-mail came from the Decl

Re: [Declude.JunkMail] How long is each test taking?

Chris Anton wrote: Hello... We are using declude 2.somethign... we are pegged at 100% processor usage and are wondering what is the best way to determine how long each test takes. Do you have filter 'optimizers'  in your filters eg - SKIPIFWEIGHT and STOPATFIRSTHIT in your filter files? -

Re: [Declude.JunkMail] Help with Configuration

Todd Richards wrote: Thanks Kevin. This is what I was wondering about, so I will look into how to implement. something like this: WEIGHTRANGE.SPAM.LOW        weightrange    x    x    10    12     && triggered  on a weight of 10 to 12 inclusive WEIGHTRANGE.SPAM.MID        weightrange   

Re: [Declude.JunkMail] whitelisting based on rev dns

Craig Edmonds wrote: How can I whitelist based on Reverse DNS? REMOTEIP    WHITELIST    CIDR        64.4.240.0/20 REVDNS        WHITELIST    ENDSWITH    .paypal.com etc... -Nick   Kindest Regards Craig Edmonds 123 Marbella Internet W: www.123marbella.com     --- This E

Re: [Declude.JunkMail] declude not modifying subject line

Hi David F, David Franco-Rocha [ Declude ] wrote: The broken line terminators are not necessarily of the same type in a given message. In addition, they are not necessarily adjacent to each other (with leading whitespace or unprintable characters on a line).What may appear obvious to the eye

Re: [Declude.JunkMail] Spam not being caught

Hi Karl, Post a sample with full headers so we can see what the scofflaw is sending you -Nick Karl Hentschel wrote: Thanks for the tip, but unfortunately I am not using the Pro version of Declude so I cannot create my own filters. Are others being slammed with stock spam recently? Declud

Re: [Declude.JunkMail] Spam not being caught

tus: U X-IMail-Rule: H~x-imail-spam:xxx@ourdomain.com Data- X-IMAIL-SPAM-PHRASE  IT'S BUD X-UIDL: 463095290     From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Thursday, November 09, 2006 11:31 AM To: declude.junkmail@declude.com Subject:

Re: [Declude.JunkMail] Spam not being caught

is zombies effectively with any IP4r list. - Original Message - From: Nick Hayer To: declude.junkmail@declude.com Sent: Thursday, November 09, 2006 4:51 PM Subject: Re: [Declude.JunkMail] Spam not being caught So far -  and I have been hammered

Re: [Declude.JunkMail] Spam not being caught

Scott Fisher wrote: I get over a 1000 spam a day from this spammer. If you don't have a pattern would you mind sending me off list a few of the ones you do receive from different days? I do not recognize this gut so I would like to see more of his product. -Nick ---Thi

Re: [Declude.JunkMail] Clam AV Updates

Hi Mark, I just sent you off list my \share\clamav dir zipped up... -Nick Mark Reimer wrote: My daily.inc folder is missing from the clam directory. Could anyone please help me?   Mark Reimer IT System Admin American CareSource 972-308-6887   F

Re: [Declude.JunkMail] New pattern

can you post the headers from samples that were delivered on different days? Then we can help I betcha -Nick Dave Doherty wrote: Yes, it is similar. For some reason, sniffer doesn't seem to getting all of them. I wonder if something like FROM 10 CONTAINS %SUBJECT% might work -Dave Dohert

Re: [Declude.JunkMail] Spamhaus

nothing - Matt with his trickery is adding more weight to a last hop that fails the test... -Nick Darin Cox wrote: Then what was wrong with my example? Darin. - Original Message - *From:* Matt *To:* declude.junkmail@declude.com

Re: [Declude.JunkMail] New pattern

ED STATES->NICARAGUA->UNITED STATES->destination X-Declude-Skywaves-REVDNS: This message was sent from gadreel-24.cablenet.com.ni ([165.98.168.24]) X-Declude-Skywaves-Code: e X-Declude-Skywaves-Recipcount: 1 -Dave Doherty Skywaves, Inc. 97 Webster Street Worcester, MA 01603 508-425-717

Re: [Declude.JunkMail] Undocumented Directive 4.x

Any other undocumented's that you can share? :) -Nick David Barker wrote: Just an FYI you may find it useful, in the global.cfg: BLKLST ON Writes a text file to the \spool\blklst.txt containing the IP and weight of emails eg. 1.1.1.1 23 2.2.2.2 7 David Barker Director of P

Re: [Declude.JunkMail] New Reporting Tool

Thanks for sharing Karl, nice work! -Nick IS - Systems Eng. (Karl Drugge) wrote: The newest PERL script. Slices, dices, etc ... Throw it in a directory, edit a few environment variables at the top of the script, dump in a few Declude logs, run it, enjoy. Requires PERL, of course. Ad

Re: [Declude.JunkMail] Interesting ORF stats

Hi John, John T (Lists) wrote: I have 3 gateway servers running IIS with ORF. These are my MX records for all my domains. ORF has identified and blocked 71% of incoming email on my primary gateway. ORF has identified and blocked 81% of incoming email on my secondary gateway. I see the secondari

[Declude.JunkMail] dns attacks today

fyi - http://www.darkreading.com/document.asp?doc_id=116685&WT.svl=news2_1 -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive

Re: [Declude.JunkMail] Image spam

Hi Scott, Scott Fisher wrote: Are there any end users who are using the VAMSOFT IMAGE SPAM AGENT tht would like to comment on it's effectiveness / processor utilization? it seems to not use much cpu; its effectiveness is ok. In case you are unaware it does not ocr the email, it just works on pr

  1   2   3   4   >