My log files go to a separate directory (partition if available) and are zipped either weekly or monthly depending on size and when there are enough they get burned to CD then deleted.
John Tolmachoff Engineer/Consultant/Owner eServices For You > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Goran Jovanovic > Sent: Friday, January 28, 2005 2:24 PM > To: Declude.Virus@declude.com > Subject: RE: [Declude.Virus] RAR Support - why not? > > Darin, > > What do you do with the old log files? Do you put them on another > machine for processing/analysis/archiving? > > If you are archiving how long do you keep the data? > > Thanx > > > > > Goran Jovanovic > The LAN Shoppe > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > [EMAIL PROTECTED] On Behalf Of Darin Cox > > Sent: Friday, January 28, 2005 5:15 PM > > To: Declude.Virus@declude.com > > Subject: Re: [Declude.Virus] RAR Support - why not? > > > > Notices only go out for banned files. We include a statement that the > > email > > will be available to be requeued for x number of days...so automatic > > processes clean it up if it's unclaimed. > > > > Regarding the space problem, are you moving logs off to another > partition > > on > > a nightly basis? Between that, automatic cleanup, and zipping old > logs > > ours > > stays pretty clean. > > > > Darin. > > > > > > ----- Original Message ----- > > From: "Andy Schmidt" <[EMAIL PROTECTED]> > > To: <Declude.Virus@declude.com> > > Sent: Friday, January 28, 2005 5:05 PM > > Subject: RE: [Declude.Virus] RAR Support - why not? > > > > > > Hi Goran: > > > > Oh, I've been thinking about just that. However does that mean you > hold > > all > > virus files? > > > > I don't think I could afford the additional disk space (the spool file > is > > already too big as it is.) > > > > Best Regards > > Andy > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic > > Sent: Friday, January 28, 2005 12:48 PM > > To: Declude.Virus@declude.com > > Subject: RE: [Declude.Virus] RAR Support - why not? > > > > > > Andy, > > > > Someone posted on this list a while ago a small ASP page that I am > using > > to > > requeue a banned file. I send out a bannotify.eml what has the link > back > > to > > the server with the appropriate file name. The user says I really > really > > want this file and clicks on the link. It gets requeued automatically > into > > the spool directory and it is not scanned/banned again and the user > gets > > it > > within 30 minutes. > > > > I remember that there was some discussion on the list a while ago > about > > having the users authenticate and fill in a form etc. I decided not to > > bother with that. > > > > I can send you my bannotify.eml and the asp file if you wish. Let me > know > > > > > > > > > > Goran Jovanovic > > The LAN Shoppe > > > > > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > > > Sent: Thursday, January 27, 2005 6:27 PM > > > To: Declude.Virus@declude.com > > > Subject: RE: [Declude.Virus] RAR Support - why not? > > > > > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP > > files, > > > and will block banned file extensions in .RAR files the same way as > it > > > blocks banned file extensions in .ZIP files. << > > > > > > Beautiful! > > > > > > Now we just need McAfee to scan inside RAR files <G> > > > > > > (Globally banning zipped .EXE files is not an option for me - I > gotta > > give > > > those customers SOME practical way to send/receive "restricted" file > > > types.) > > > > > > Best Regards > > > Andy > > > > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, > > > just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus". The archives can be found > > > at http://www.mail-archive.com. > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > > just > > send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
