| Forum: CleanMail Server Talk |
|---|
| Topic: TLS - enable |
|---|
| TLS - enable [message #2272] |
Mon, 16 August 2010 09:27 |
luka.obersnu
Messages: 9
Registered: June 2007 |
Junior Member |
|
|
Hi, we're having problems with receiving emails over TLS. We're using CleanMail v4.5.1.6 in combination with Exchange 2003. We added this line into CleanMail.cf:
[ServerSessionManager\Ports\SMTPPort]
...
TLS="true"
...
If I test TLS directly on Exchange I receive:
ehlo
250-mail.medicoph.com Hello [10.10.10.40]
250-TURN
250-SIZE
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-BINARYMIME
250-CHUNKING
250-VRFY
250-TLS
250-STARTTLS
250-X-EXPS GSSAPI NTLM
250-AUTH GSSAPI NTLM
250-X-LINK2STATE
250-XEXCH50
250 OK
If I test it thru CleanMail I get:
250-mail.medicoph.com Hello [10.10.10.40]
250-TURN
250-SIZE
250-ETRN
250-PIPELINING
250-DSN
250-ENHANCEDSTATUSCODES
250-8bitmime
250-VRFY
250-STARTTLS
250-AUTH GSSAPI NTLM
250 OK
What are doing wrong?
Thx. Luka
|
|
|
| Topic: missing MSVCP71.DLL - solved |
|---|
| missing MSVCP71.DLL - solved [message #2242] |
Thu, 22 July 2010 01:32 |
Griffyn
Messages: 19
Registered: June 2006 |
Junior Member |
|
|
Just installed the latest Cleanmail 4.6.1.1 build, and the Admin program froze after about 5 seconds, and then a cascade of error boxes complaining that MSVCP71.DLL couldn't be found by spamassassin.exe. A file search confirmed this.
I downloaded MSVCP71.DLL from http://www.dll-files.com/dllindex/dll-files.shtml?msvcp71, and placed it in my system32 folder, and this seems to have fixed the issue.
Running Win2000 Advanced Server SP4.
|
|
|
| Topic: Spam filter message initialization failure |
|---|
| Spam filter message initialization failure [message #2153] |
Mon, 21 September 2009 21:40 |
glasairnz
Messages: 3
Registered: July 2005 |
Junior Member |
|
|
I have had two instances where email is returned from MS Exchange with the following:
You do not have permission to send to this recipient. For assistance, contact your system administrator.
<servername.local #4.7.1 smtp;452 4.7.1 Spam filter message initialization failure - client - network: customer@customersemaildomain.com>
If you restart CleanMail Server the problem seems to go away. Has anyone else seen this?
Thanks
Mike
|
|
|
| Topic: Duplicate Messages?!? |
|---|
| Duplicate Messages?!? [message #2148] |
Thu, 27 August 2009 06:08 |
 shawnfry@safetysend.com
Messages: 1
Registered: August 2009
Location: Houston, Texas |
Junior Member |
|
|
I keep getting duplicate messages from specific ISPs like windstream.net and wellpoint.com. In the logs and even under packet analysis I can see the message hand off but the sending domain does not recognize the transfer is complete or acknowledgment and sends the same email over and over. I am receiving the emails just fine but it is aggrevating my clients signficantly.
Can anyone offer some suggestions? I would be most appreciative.
|
|
|
| Topic: How to tell when CleanMail is idle? |
|---|
| How to tell when CleanMail is idle? [message #2146] |
Wed, 26 August 2009 02:10 |
Griffyn
Messages: 19
Registered: June 2006 |
Junior Member |
|
|
I want to use some custom software to add entries to CleanMail's whitelist filter (the interface we use to release e-mails that have been 'accept/redirect'ed will also allow them to be whitelisted). That isn't a problem, nor is remotely restarting the CleanMail service so that new entries are recognised.
But what I would like to do is automatically delay any restart until a moment when there are no active incoming connections to CleanMail. The CleanMail admin program shows the number of active connections - how can I get this information to my own software (that I'm writing)?
|
|
|
| Topic: slow pop download |
|---|
| slow pop download [message #1997] |
Tue, 12 May 2009 11:49 |
MikeD
Messages: 5
Registered: February 2009 |
Junior Member |
|
|
through no fault of nospamtoday a clients server crashed over the weekend and was down for nearly 40 hours
When it was recovered it started to download the waiting emails (nospamtoday 3.2.1.2 is configured as a pop proxy for the email server)
One account had accumulated 6766 emails which took 11.5 hours to download in one smartpop session, which averages 1 every 6 seconds, other sessions average a similar rate
The server is a dual quad xeon with 3.5Gb of available ram during the download the processor was generally 99% idle and the memory usage has not been above 1.9Gb since the last restart
The configuration runs the following modules
Whitelist filter A-K
Whitelist Filter L-Z
Attachment Filter
DNSBL Filter
SpamAssassin
MailStorage
The timings in the log indicate that the SpamAssassin filter takes between 4 and 6 seconds per email and Mail Storage usually 1 second
What can I look at in the spamassassin configuration to improve performance please
Post Edited (05-27-09 17:43)
|
|
|
| Topic: Auto Whitelist not working? |
|---|
| Auto Whitelist not working? [message #1961] |
Wed, 12 November 2008 14:06 |
tokyosp
Messages: 1
Registered: November 2008 |
Junior Member |
|
|
Hello,
I'm having a problem with a newsletter from a legitimate sender. The email is a Japanese Newsletter from Dell. I've put it on the Whitelist, but it doesn't seem to affect it.
No matter what I do, I can't seem to receive this newsletter.
Does anyone have any ideas?
Thanks,
TokyoSP
Content analysis details: (9.0 points, 5.8 required)
pts rule name description
---- ---------------------- --------------------------------------------------
1.7 SUBJECT_ENCODED_TWICE Subject: MIME encoded twice
2.0 GAPPY_SUBJECT Subject: contains G.a.p.p.y-T.e.x.t
0.5 PLING_QUERY Subject has exclamation mark and question mark
2.1 OBSCURED_EMAIL BODY: Message seems to contain rot13ed address
0.0 HTML_MESSAGE BODY: HTML included in message
0.2 HTML_FONT_FACE_BAD BODY: HTML font face is not a word
0.2 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.4330]
2.1 HTML_NONELEMENT_70_80 BODY: 70% to 80% of HTML elements are
non-standard
0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts
1.5 DNS_FROM_SECURITYSAGE RBL: Envelope sender in
blackholes.securitysage.com
1.7 OBFUSCATING_COMMENT HTML comments which obfuscate text
-3.0 AWL AWL: From: address is in the auto white-list
The original message was not completely plain text, and may be unsafe to open with some email clients; in particular, it may contain a virus, or confirm that your address can receive spam. If you wish to view it, it may be safer to save it to a file and open it with an editor.
|
|
|
| Topic: Block Country by using DNSBL |
|---|
| Block Country by using DNSBL [message #1924] |
Sun, 23 March 2008 22:34 |
mshanley
Messages: 1
Registered: March 2008 |
Junior Member |
|
|
I would like to block e-mails by country using DNSBL.. like Amsterdam which is the Netwrlands.. by using DNSBL nl.countries.blackholes.us or nl.countries.nerd.dk
I added them to the DNSBL after some of the others and they don't seem to be working..
I have a whole bunch of IP's that are getting through.. and when i do a lookup, they say they are from Amsterdam.. I have the beta version running now...
It's seems to be a better performer with the new changes.. NoSpamToday V3.1.2.1
I would like to verify Rev DNS before accepoting mail and also block by country.. we are getting slammed..
Thanks.. GREAT PRODUCT.. I have been using since the beginning....
|
|
|
| Topic: shortcut failing |
|---|
| shortcut failing [message #1851] |
Thu, 27 September 2007 18:26 |
Sanjaya
Messages: 1
Registered: September 2007 |
Junior Member |
|
|
We have just installed V3 on Windows 2003 server as a trial.
Since we saw that the new versions dont come with prepopulated Dbs we tried a shortcut by pasting the DB folder and the .cf file from an old version of 2 we had tested earlier.
It works perfectly for a while and then gives an error Event ID 101, Source ESENT, error the database engine stopped
Is there any way we can use the old database with the new version.
Regards
Sanjay A
|
|
|
| Topic: (receive) connection closed error at installation |
|---|
| (receive) connection closed error at installation [message #1850] |
Wed, 26 September 2007 04:02 |
oli
Messages: 2
Registered: September 2007 |
Junior Member |
|
|
I am trying to install the demo and am encountering a vexing issue (Disclosure: I am not a professional techie).
Following the instructions in the FAQs and the forums, I still hit an error message from the NoSpamToday!Admin:
- (receive) connection closed by server - when I test the SMTP port settings:
My setting are as follows:
Incoming IP
Incoming port # 26
The router has been set to switch incoming SMTP traffic from 25 to 26
Outgoing server 192.168.xxx.xxx my mail server address
Outgoing Port Number 25
The NoSpamToday! log shows that is has disconnected with little in terms or error msg or ID#?
I am not able to telnet 192.168.xxx.xx 26 since nothing can go thru NoSpamToday!
This is a plain SBS2003 SP1, ISA is not installed, but Remote Access is. Is this getting in the way?
What did I miss? Thanks for lighting the path! Oli
|
|
|
| Topic: F-PROT Antivirus False Alert |
|---|
| F-PROT Antivirus False Alert [message #1845] |
Tue, 18 September 2007 15:28 |
support
Messages: 847
Registered: April 2004 |
Senior Member |
|
|
F-PROT Antivirus erroneously flags some parts of the NoSpamToday! installation as carrying the W32/VirTool.BOQ virus.
* THIS IS A FALSE ALERT *, as the NoSpamToday! files do not carry a virus.
For the time being, the best solution is to exclude the NST installation directory from scanning. To get back any NoSpamToday! related files quarantined or deleted by F-PROT, please reinstall the latest NoSpamToday! release.
Customer Support
Byteplant GmbH
|
|
|
| Topic: sa-update / pdfinfo |
|---|
| sa-update / pdfinfo [message #1771] |
Fri, 20 July 2007 11:31 |
rarens
Messages: 6
Registered: May 2007 |
Junior Member |
|
|
Hallo,
kann ich das plugin irgendwie einspielen?
Es ist einfach momentan extrem nervig, dass diese ganzen Mails mit pdf-Anhang durchkommen.
Oder hat jemand eine andere gute Idee?
Zudem, wie kann ich das sa-update benutzen?
Gruß
Reinhard
Post Edited (07-20-07 12:54)
|
|
|
| Topic: Bayes Tokens |
|---|
| Bayes Tokens [message #1650] |
Thu, 15 February 2007 16:29 |
joshuastarr
Messages: 4
Registered: August 2005 |
Junior Member |
|
|
Hi, I tried to 'Expire Now!' on the Bayes tokens. It says the oldest token is from Oct 18th, 2005 and the newest token is from Oct 31st, 2006. The Last expiry time is listed as Oct 30th, 2006.
Any ideas?
Thanks!
Joshua
|
|
|
| Topic: Thoughts on blocking "hot stock" messages |
|---|
| Thoughts on blocking "hot stock" messages [message #1630] |
Tue, 16 January 2007 11:25 |
Jon
Messages: 15
Registered: February 2005 |
Junior Member |
|
|
Hi,
NST is doing an amazing job of cleansing our incoming mail, but there's one type of message that is consistently getting through and the volume of these messages is growing recently.. basically, it's a "check out this hot new stock" message with an inline image within the message -- the image has a grainly background pattern always with the details of the stock, and the body (possibly just the plaintext part) of the message has random paragraphs of text.
Any thoughts on ways to spot these? The new Image Plugin sounds interesting, but I think that may just be a way to identify messages with numbers or sizes of images.
Thanks,
Jon
|
|
|
| Topic: Log analysis |
|---|
| Log analysis [message #1516] |
Tue, 24 October 2006 16:50 |
thisbejoe7
Messages: 15
Registered: January 2006 |
Junior Member |
|
|
***Ignore***
Nevermind, I found that spamlogs needs detailed logging enabled to work, and I had recently turned it off. I'll try it again tomorrow and I'm sure it will work.
Thanks
___
I am running NST on a Windows server 2003 box. I need to find a better way to scan through the log file for NST until I have it configured to a comfortible level. I saw spamlogs in the contribution area and think that would be fantastic. But can't get it to work on my XP Pro workstation. Looks like it was designed to run under linux/unix. Does anyone have any suggestions for a log analyzer for NST that could help read through this file? I can't dump it to excel because its too large, exceeds excel's max lines. Since the log recycles session numbers it makes it hard to sort. Any ideas?
Thanks
Post Edited (10-25-06 17:38)
Thanks...
|
|
|
| Topic: clamav: clamscan or clamdscan? |
|---|
| clamav: clamscan or clamdscan? [message #1484] |
Mon, 17 July 2006 10:09 |
Dave Camenisch
Messages: 30
Registered: December 2004 |
Member |
|
|
When using clamav in NST, the default scanner is "clanscan.exe". Is it also possible to use "clamdscan.exe" instead? My tests stated that clamdscan is faster in execution, but I don't know if there is another drawback when using it.
Other question: which FREE anti virus application is the best to use with NST?
-- Dave
|
|
|
| Topic: Blocking non RFC characters in sender email |
|---|
| Blocking non RFC characters in sender email [message #1483] |
Fri, 07 July 2006 18:08 |
olafur
Messages: 1
Registered: July 2006 |
Junior Member |
|
|
Hi there
Is there a way to block email that have senders like this:
Jul 06, 2006, 06:01:03 Session 6: MAIL FROM:
Thanx
Ólafur
|
|
|
| Topic: minor visual bug |
|---|
| minor visual bug [message #1475] |
Tue, 27 June 2006 04:04 |
Griffyn
Messages: 19
Registered: June 2006 |
Junior Member |
|
|
In the Admin program, on the Maintenance tab, the lower section has a "Size [kb]" field indicating the size of the file containing the bayes tokens. The field contains the number of bytes in the file, whereas the field description indicates this is the number of kilobytes.
For example,
My field says 11812864 - which if were kilobytes, would mean the file is 11 gigabytes in size. However the actual file is only 11 megabytes in size.
|
|
|
| Topic: No Spam Today vs Barracuda? |
|---|
| No Spam Today vs Barracuda? [message #1462] |
Mon, 19 June 2006 19:15 |
benjaminhigginbotham
Messages: 1
Registered: June 2006 |
Junior Member |
|
|
I currently have a cluster of 2 Barracuda 600's acting as my spam proxy. I use LDAP and clustering support to ensure that users are in sync and each Barracuda is in sync with each other. I have about 12,000 users that I'm scanning mail for.
Barracuda's customer service really ticked me off the other day, and now I'm looking for a better solution. Thought of moving to a pure SpamAssassin solution, but we're a Windows shop primarily and adding a Linux box is a bit out of our area of expertise.
Then I found No Spam Today! for Servers and thought that I may have a solution. Playing around with the demo, and it looks like I'll need to find a different solution for LDAP support and clustering, but it may actually do what I need it to.
My question is, has anyone here moved from a Barracuda Networks device to No Spam Today! or SpamAssassin in general? If so, how was the move? Can No Spam Today! take care of the traffic that we will see with 12,000 users (750,000 messages a day or so). Is there a different solution I should be looking at?
Thanks,
Benjamin
|
|
|
| Topic: Question: SPF |
|---|
| Question: SPF [message #1419] |
Mon, 27 March 2006 23:55 |
thisbejoe7
Messages: 15
Registered: January 2006 |
Junior Member |
|
|
I have a mail relay/redirect service that collects all my incoming email over SMTP from the internet, spools it and sends it to my home mail server on a custom SMTP port. When nospamtoday receives the mail it sees the mail coming from my redirect service, rather than the internet host of the sender's mail server. This violates the SPF record check and the SPF check fails and adds to the spam score.
I've read that mail services like the one I use will be working on implimenting a feature to fix this issue (can't remember what its called), but I was just wondering if any other users ran into this and what they did to work around it. Sending mail for my domains is no problem, I have SPF setup for all my hosts correctly, this issue only happens when receiving mail from senders who use SPF.
Thanks...
|
|
|
| Topic: Installation on Mac OS 10.4 |
|---|
| Installation on Mac OS 10.4 [message #1383] |
Tue, 07 February 2006 05:22 |
congyuan
Messages: 1
Registered: February 2006 |
Junior Member |
|
|
I'm trying to install it on a Mac OS 10.4 Xserve.
It has 2 NICs, one is 202.73.x.x. Another one is 192.168.x.x for internal use.
It uses Postfix as MTA, and I want to change Postfix listening on 192.168.x.x and 127.0.0.1, and set NST listening on external IP 202.73.x.x.
Is this correct?
I have problem change the parameter "inet_interfaces = all" to "inet_interface=192.168.x.x, 127.0.0.1" in /etc/postfix/main.cf. But it is always changed back to "all", after I issue "sudo serveradmin stop mail", followed by "sudo serveradmin start mail".
any idea?
|
|
|
| Topic: Traffic Limiting in daily report |
|---|
| Traffic Limiting in daily report [message #1350] |
Thu, 29 December 2005 18:30 |
InforMed Direct
Messages: 59
Registered: May 2004 |
Member |
|
|
What does the following lines mean?
Traffic Limiting:
Recipient reject count exceeded 2
Thanks, Rob.
|
|
|
| Topic: Scanner - oops |
|---|
| Scanner - oops [message #1349] |
Thu, 29 December 2005 18:28 |
InforMed Direct
Messages: 59
Registered: May 2004 |
Member |
|
|
Wondered why when I tried to do some scanning today that the email's weren't arriving from our Olivetti MF22 multipurpose printer.
Then noticed they were getting flagged as spam And in some cases, the delay filter was blocking them as well.
A simple re-config of the printer to send direct to Exchange on port 26 worked a treat but for some reason it took us a while to suspect a spam filter preventing a network scanner from working
Cheers, Rob.
|
|
|
| Topic: Version 2.0.6.2 is amazing! |
|---|
| Version 2.0.6.2 is amazing! [message #1152] |
Wed, 15 June 2005 14:30 |
daltonrooney
Messages: 4
Registered: April 2005 |
Junior Member |
|
|
I just wanted to thank you for the latest build of NST SMTP proxy. When we originally upgraded to version 2, we were a little disappointed because it seemed like more spam was getting through, not less. The latest build has absolutely SHUT DOWN spam on our server - everything is being marked down correctly and nothing gets through.
Thanks again. A very happy customer.
Dalton
Post Edited (06-15-05 14:31)
|
|
|
| Topic: HAM Words |
|---|
| HAM Words [message #1082] |
Fri, 18 March 2005 16:32 |
Triek
Messages: 2
Registered: February 2005 |
Junior Member |
|
|
Is there a way to auto-learn the HAM words?? I have noticed the spam words number increasing everyday but the HAM words have not moved since installation. Any ideas??
Thanks
Tony Riek
Information Technology Manager
Girl Scouts - Great Blue Heron Inc.
|
|
|
| Topic: unavailable mailbox (smtp 550) |
|---|
| unavailable mailbox (smtp 550) [message #1065] |
Thu, 03 March 2005 14:47 |
Mario Konst
Messages: 12
Registered: November 2004 |
Junior Member |
|
|
Very recently (shortly after installing latest version of NST) we have this problem:
Situation:
incoming box is running McAfee Webshield SMTP (listening on port 25). After cleaning virusses, mail goes to NST on the same box (port 2225). After cleaning spam , mail is sent to Exchange 2000 server (on port 25).
This situation was working very well, but now some mail that is sent to us is returned with SMTP error 550 (mailbox unavailable) From Webshield SMTP. Apparantly NST is sometimes not available for receiving mail? Obviously this isn't wanted behaviour.
Maybe it has something to do with concurrent connections from webshield to nst?
Hopefully someone can help me with this problem.
Regards,
mario Konst
|
|
|
| Topic: 500 MB local.cf ?? |
|---|
| 500 MB local.cf ?? [message #1064] |
Tue, 01 March 2005 21:07 |
edalliance
Messages: 1
Registered: March 2005 |
Junior Member |
|
|
We were running version 1.x with no problem. Downloaded V2.0.4.4 off your website today, installed it over the old version. We started having memory problems similar to what was posted at http://www.byteplant.com/forum/read.php?f=1&i=430&t=430
Anytime the NoSpamToday Admin service was started memory usage crept up (over the course of 5-10 mins) until the machine was thrashing.
Uninstalled, moved the old folder from Program Files, and did a fresh install. Same problem. Turns out that sa\rulesets\local.cf is over 500MB in size!! Is that normal? (By contrast, the local.cf from version 1.x is only a few KB).
Windows 2000 Server service pack 4 running on an HP Proliant DL140 rackmount, 1 Gig Ram, 2.4 Ghz Xeon. Novell client, Norton Antivirus realtime filescan.
The first time we enabled the Bayes pre-learning. Second time we did not. Our NoSpamToday forwards to an SMTP server running on a separate box (Lotus Domino, if it matters). Otherwise pretty much default settings, but no message attachment rejection, and no antivirus programs hooked to NST.
EDIT: We went to V2.032, and don't see the huge 500MB local.cf I also noticed that V2.044 had a 500MB file called t_local.cf in the root NST folder (C:\Program Files\NoSpamToday\t_local.cf)
Thanks.
Post Edited (03-01-05 21:50)
|
|
|
| Topic: Incompatible with Crystal Reports Info-APS server? |
|---|
| Incompatible with Crystal Reports Info-APS server? [message #1015] |
Mon, 17 January 2005 20:00 |
pixelmonkey
Messages: 1
Registered: January 2005 |
Junior Member |
|
|
This is a weird problem I've been wrestling with, and only just found the solution.
I recently installed Microsoft CRM on my server, which also installs Crystal Reports by necessity. I know that this installation caused NST to stop working. After I set this stuff up, NST would never be able to bind port 25, though other programs like Argosoft Mail Server and emailrelay could.
I went one-by-one disabling the new services and found one that allowed NST to work: Crystal Reports Web Services.
I did some googling and found this article:
http://techsupt.winbatch.com/TS/T000002012F22.html
I was desparate, so even though the solution sounded far-fetched, I gave it a shot. I commented out the info-aps (port 6400) line in the Windows services file.
Tried running NST Admin, and... what, what? It worked!?
It could finally bind port 25 again. I thought this was insanity. So I uncommented that line in the services file, and restarted NST. Service failed to restart. Ran the admin, cannot bind port 25. Closed everything up and commented out the info-aps line. NST started fine.
This is truly the issue, but my question is: what the hell is the issue here? Why in God's name is Crystal Reports binding port 25, or why does NST think port 25 is in use when Crystal Reports is running on port 6400?
Any solutions to this mystery would be appreciated.
|
|
|
| Topic: Spam trap suggestion? |
|---|
| Spam trap suggestion? [message #973] |
Thu, 23 December 2004 10:24 |
Dave Camenisch
Messages: 30
Registered: December 2004 |
Member |
|
|
I like to add a honeypot-address on my websites. Where is the 'best' place to put this address?
- as simple text on an index-page (white text on white background)?
- should it be a real link (mailto:honeypot@domain.com)?
- in a meta-tag?
- in a comment-tag ()?
- other recommendations?
Regards,
Dave
Post Edited (12-23-04 10:25)
|
|
|
| Topic: Outlook 2000 & Outlook XP not receiving attachments |
|---|
| Outlook 2000 & Outlook XP not receiving attachments [message #765] |
Wed, 09 June 2004 23:29 |
Screamin Chicken
Messages: 2
Registered: May 2004 |
Junior Member |
|
|
|
After evaluating your product for 3 weeks I am noticing that Microsoft Outlook (2000 & 2002/XP) is having trouble seeing the attachment(real e-mail) that is attached to your spam warning/explanation message. Probably 5% of the identified spam is missing the attachment when opened in Outlook. When these same e-mails are opened in Outlook Express the attachment is there. Is this a known bug? The computers used are running Windows XP.
|
|
|
Members
Search
Help
Register
Login
Home
