Darin,
What do you do with the old log files? Do you put them on another
machine for processing/analysis/archiving?
If you are archiving how long do you keep the data?
Thanx
Goran Jovanovic
The LAN Shoppe
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:Declude.Virus-
> [EMAIL PROTECTED] On Behalf Of Darin Cox
> Sent: Friday, January 28, 2005 5:15 PM
> To: Declude.Virus@declude.com
> Subject: Re: [Declude.Virus] RAR Support - why not?
>
> Notices only go out for banned files. We include a statement that the
> email
> will be available to be requeued for x number of days...so automatic
> processes clean it up if it's unclaimed.
>
> Regarding the space problem, are you moving logs off to another
partition
> on
> a nightly basis? Between that, automatic cleanup, and zipping old
logs
> ours
> stays pretty clean.
>
> Darin.
>
>
> ----- Original Message -----
> From: "Andy Schmidt" <[EMAIL PROTECTED]>
> To: <Declude.Virus@declude.com>
> Sent: Friday, January 28, 2005 5:05 PM
> Subject: RE: [Declude.Virus] RAR Support - why not?
>
>
> Hi Goran:
>
> Oh, I've been thinking about just that. However does that mean you
hold
> all
> virus files?
>
> I don't think I could afford the additional disk space (the spool file
is
> already too big as it is.)
>
> Best Regards
> Andy
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic
> Sent: Friday, January 28, 2005 12:48 PM
> To: Declude.Virus@declude.com
> Subject: RE: [Declude.Virus] RAR Support - why not?
>
>
> Andy,
>
> Someone posted on this list a while ago a small ASP page that I am
using
> to
> requeue a banned file. I send out a bannotify.eml what has the link
back
> to
> the server with the appropriate file name. The user says I really
really
> want this file and clicks on the link. It gets requeued automatically
into
> the spool directory and it is not scanned/banned again and the user
gets
> it
> within 30 minutes.
>
> I remember that there was some discussion on the list a while ago
about
> having the users authenticate and fill in a form etc. I decided not to
> bother with that.
>
> I can send you my bannotify.eml and the asp file if you wish. Let me
know
>
>
>
>
> Goran Jovanovic
> The LAN Shoppe
>
>
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:Declude.Virus-
> > [EMAIL PROTECTED] On Behalf Of Andy Schmidt
> > Sent: Thursday, January 27, 2005 6:27 PM
> > To: Declude.Virus@declude.com
> > Subject: RE: [Declude.Virus] RAR Support - why not?
> >
> > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP
> files,
> > and will block banned file extensions in .RAR files the same way as
it
> > blocks banned file extensions in .ZIP files. <<
> >
> > Beautiful!
> >
> > Now we just need McAfee to scan inside RAR files <G>
> >
> > (Globally banning zipped .EXE files is not an option for me - I
gotta
> give
> > those customers SOME practical way to send/receive "restricted" file
> > types.)
> >
> > Best Regards
> > Andy
> >
> >
> > ---
> > [This E-mail was scanned for viruses by Declude Virus
> > (http://www.declude.com)]
> >
> > ---
> > This E-mail came from the Declude.Virus mailing list. To
unsubscribe,
> > just send an E-mail to [EMAIL PROTECTED], and
> > type "unsubscribe Declude.Virus". The archives can be found
> > at http://www.mail-archive.com.
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To unsubscribe,
> just
> send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
> (http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
