Hi Dave,

 

I guess the key question is - WHEN did AVG make the change. They released
Version AVG 9 last October. Is THAT when AVG made the database structure
change which disabled the internal Virus Scanner in Declude until 4.10.46
was made available as an interim? If so - I must have missed the big
announcement that 4.10.46 was critical to install (since there is no way of
knowing how many Declude customers are using secondary scanner and thus are
not fully exposed.).

 

Best Regards,

Andy

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Friday, April 30, 2010 4:52 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Release Declude 4.10.48 -- MUST Install to
Reenable Virus Protection!

 

Mike,

 

I understand what the point of Andy's email is. I was commenting on
"CommTouch/Zerohour does a good job, but does not catch all known viruses" 

 

Yes AVG made a change to their database structure - Declude 4.10.46+ makes
use of their new data structure, this is integrated into the new release. In
order for Declude to work with the latest AVG updates one needs to be
running Declude version 4.10.46 or greater. If you have additional virus
scanners other than AVG or are running Commtouch then the move to the latest
version is not as imperative.


David

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Michael
Biddle (via mobile device)
Sent: Friday, April 30, 2010 4:40 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Release Declude 4.10.48 -- MUST Install to
Reenable Virus Protection!

 

Uhhh.. I am pretty sure that was not the point he was trying to make. While
no AV is 100 percent effective, there is no reason for it not to work for
days or weeks. It would appear that when core files with AVG are exploited,
AVG obviously pushed out a software update to their software and I assume it
needs manually implemented in Declude.

Some clarification on this matter would be great. 

Mike

  _____  

From: David Barker <dbar...@declude.com>
Sent: Friday, April 30, 2010 10:21 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Release Declude 4.10.48 -- MUST Install to
Reenable Virus Protection!

Andy is correct, it should be remembered that no AV is 100% accurate. This
is why besides AVG and Commtouch which are integrated into Declude users can
run up to 5 additional external virus scanners using Declude, and as seen
from the lists CalmAV is a good choice for a free scanner.

 

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
 <mailto:dbar...@declude.com> dbar...@declude.com

 

 

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Thursday, April 29, 2010 11:13 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] New Release Declude 4.10.48 -- MUST Install to
Reenable Virus Protection!

 

Declude Users - take note!

 

CommTouch/Zerohous does a good job, but does not catch all known viruses
(some days I have 5 or 6 DIFFERENT viruses/trojans sneaking by, some to
multiple users each!), it's absolutely imperative that AVG works if you
don't have additional scanners set up.

 

Unfortunately, AVG had stopped working (no one has said for how many weeks
or possible months it has not worked). I have confirmed that AVG is now
working again after I upgraded from 4.10.42-A to 4.10.48. So - I recommend
all Declude users get on top of this quickly!

 

(PS: This is the second time AVG has gone AWOL inside of Declude for
extended periods of times - and it's never discovered until I finally
insist. Naturally, I have zero confidence in the built-in scanner. It's
unreliable and there is no notification whenever it stops working.)

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Wednesday, April 28, 2010 12:56 PM
To: declude.junkm...@declude.com; declude.virus@declude.com;
declude.relea...@declude.com
Subject: [Declude.Virus] New Release Declude 4.10.48

 

The following release contains the following changes since 4.7.35 to the
current 4.10.48:

 

RELEASE   4.10.48 

 

----------------------------------------------------------------------------
----------------------------

4.10.48 Fix closing files when PCRE dll encounters an error.

 

----------------------------------------------------------------------------
----------------------------

4.10.47 Fix memory leak in AVG SDK Release Instance

 

----------------------------------------------------------------------------
----------------------------

4.10.46 Updated AVG SDK to  1.7.9783; Added avgcorex.dll and avgcert.dll

 

----------------------------------------------------------------------------
----------------------------

4.10.45 Optimize code for moving files to the spool directory for IMail

 

----------------------------------------------------------------------------
----------------------------

4.10.44 Optimize code for moving files to the spool directory for
Smartermail

 

----------------------------------------------------------------------------
----------------------------

4.10.43  Fixed variable names in the MoveToError function which were
declared globally

 

----------------------------------------------------------------------------
----------------------------

4.10.42-A Fix for SNF Authentication to turn off without having to restart
Decludeproc

 

----------------------------------------------------------------------------
----------------------------

4.10.42 Message Sniffer integrated into Declude

 

----------------------------------------------------------------------------
----------------------------

4.10.41 Added variable %AUTH% to show the authenticated sender of the email

 

----------------------------------------------------------------------------
----------------------------

4.10.40 XWHITELIST  ON in the global.cfg will give the reason for why the
email was WHITELISTED in the header of the email

 

----------------------------------------------------------------------------
----------------------------

4.9.39 Added a function to send a notify e-mail when hijack is triggered and
e-mails are being held in the Hold2 folder 

 

To turn the Hijack e-mail notify on add the following directive to the
hijack.cfg.

 

HIJNOTIFY           ON

 

Add the include HijackNotify.eml into the \Declude directory. The recipient
of the email can be modified.

 

----------------------------------------------------------------------------
----------------------------

4.8.39 IPBYPASS can be configured with CIDR

 

----------------------------------------------------------------------------
----------------------------

4.8.38 Add the Recipient, mailfrom and subject information to the blklst.txt
file.

 

 The format blklst.txt file is 

 

 
Date|time|spool#|IP|TotalWeight|LastAction|RecpList|mailfrom|subject|testsfa
iled

 

Example:

 

Multiple Recipients:

 

10/14/2009|11:40:06.109|53|24.177.234.76|18|s...@hcss.net,s...@hcss.net,test
i...@yahoo,beg...@yahoo.com,donotl...@gmail, 

|owner-nolist-30960_*bigm**ridgewoodcable*-...@soar.soulfulbliss.com|[59]Gua
ranteed*-payment-center|CATCHALLMAILS=0,NOLEGITCONTENT=0,IPNOTINMX=0,SORBS-D
UL=5,FIVETENRC=2,ZEN=7,SORBS=7,DYNHELO=5,FROMNOMATCH=2,WEIGHT10=10,WEIGHT14=
14,| 

 

 

One Recipient:

 

10/14/2009|11:40:06.296|15|218.16.123.185|37|s...@hcss.net,|info_claimsproce
ssgabjgfu...@gmx.net|CONTACT AGENT FOR
CONFIRMATION|CATCHALLMAILS=0,NOLEGITCONTENT=0,IPNOTINMX=0,FIVETEN-SRC=2,NJAB
L=4,BASE64=4,CMDSPACE=8,DYNHELO=5,HELOBOGUS

=5,REVDNS=10,SPFFAIL=10,WEIGHT10=10,WEIGHT14=14,WEIGHT20=20,WEIGHT30=30,|

 

----------------------------------------------------------------------------
----------------------------

 

4.8.37 PostiniFix,  Add a new directive POSTINIFIX ON/OFF goes in the
declude.cfg file

 

Configuration:

 

In declude.cfg file:   "POSTINIFIX    ON "  in order for the Postini Fix to
work

 

----------------------------------------------------------------------------
----------------------------

 

4.8.36 Fix for Virus test was not catching the EICAR test due to e-mail
formatting 

 

----------------------------------------------------------------------------
----------------------------

 

4.7.35 Added support for IMail SQL Database for AUTOWHITELIST.

 

----------------------------------------------------------------------------
----------------------------

 

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
 <mailto:dbar...@declude.com> dbar...@declude.com

 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to