Re: [Declude.JunkMail] Declude errors.
It seems that the latest release of InoculateIT has a bug in it where it will try to scan the report.txt file file that it creates, and then ends up hanging. What I would recommend doing in this case is removing the /LIS .\report.txt from the SCANFILE line, and removing the REPORT line from the \IMail\Declude\virus.cfg file, until CA fixes the problem. So, does this mean Declude Virus won't work now? not that it is now, but I renamed the virus.cfg to virus.bak last night to keep it from creating the .vir directories. Paul --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
It seems that the latest release of InoculateIT has a bug in it where it will try to scan the report.txt file file that it creates, and then ends up hanging. What I would recommend doing in this case is removing the /LIS .\report.txt from the SCANFILE line, and removing the REPORT line from the \IMail\Declude\virus.cfg file, until CA fixes the problem. So, does this mean Declude Virus won't work now? It will work just fine, except that CA won't be able to report the virus name, until they get that bug fixed. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
Thanks Jon, here's what I know: Change log to MID, then repost please. MID? Sorry for being dumb here but I don't know what that stands for. Have to ask, are those the correct directories? Yes. Looks like you also need a line: REPORT infected by virus. I don't know. I set it up per the manual, and there was no REPORT line listed, just VIRUSCODE. Do you have any other Virus software on the server? No. Is this on a NTFS partition? Yes. Are the permissions set correctly? What permissions am I supposed to set for it? Being a program, I wasn't aware I needed to set Per program permissions. What should I check? In the SCANFILE line, is there really supposed to be a . before \report.txt? Yes, that's what Scott told me to do. Thanks for bearing with me here. I'll learn this or die trying! Paul --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
It will work just fine, except that CA won't be able to report the virus name, until they get that bug fixed. -Scott Ok, I'll make that change then. The AV will still say virus found and Declude will deal with it even with no report? Paul --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude errors.
Scott has been helping you, and since it is his program, he knows best. Change log to MID, then repost please. MID? Sorry for being dumb here but I don't know what that stands for. This is the line near the top of the virus.cfg file that says: LOGLEVEL(ERROR,WARNING,LOW,MID,HIGH,DEBUG) Here is the explanation from the JunkMail manual, as I triple checked and some how it is not on the Virus manual: (Attention Scott.) You can also change the level of logging: ERROR to only record error messages, WARNING will also record warning messages, LOW to report basic information about each message, MID to report slightly more information, HIGH to report a lot of information, or DEBUG to report as much information as possible (this should not normally be used). Looks like you also need a line: REPORT infected by virus. I don't know. I set it up per the manual, and there was no REPORT line listed, just VIRUSCODE. This is the configuration per the manual: SCANFILEC:\Progra~1\Comput~1\Inocul~1\inocucmd.exe /LIS .\report.txt VIRUSCODE 100 REPORT infected by virus I will leave it to Scott to answer further. Are the permissions set correctly? What permissions am I supposed to set for it? Being a program, I wasn't aware I needed to set Per program permissions. What should I check? That is more of a question if someone has gone in and manually changed the permissions or run some kind of lock down tool. Thanks for bearing with me here. I'll learn this or die trying! We are all here in the same boat. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
It will work just fine, except that CA won't be able to report the virus name, until they get that bug fixed. Ok, I'll make that change then. The AV will still say virus found and Declude will deal with it even with no report? Yes, the virus will still be detected, and Declude Virus will handle it properly -- with the one exception being that Declude Virus won't know the name of the virus. Regarding the REPORT line, it normally should be used with CA, but in this instance should not be used (so that Declude Virus won't expect the file to be there, which will cause problems if it is not there). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
Thanks Jon! You are such a help! Ok, here is what I have. This is the line near the top of the virus.cfg file that says: LOGLEVEL (ERROR,WARNING,LOW,MID,HIGH,DEBUG) Ok, I can do that. SCANFILE C:\Progra~1\Comput~1\Inocul~1\inocucmd.exe /LIS .\report.txt VIRUSCODE 100 REPORT infected by virus ARGH! You're right! I DON'T have that line! Would that cause an error? Scott? I'll add it and see if anything happens differently, as well as change to MED. That is more of a question if someone has gone in and manually changed the permissions or run some kind of lock down tool. Ok, no, we haven't done that. Thanks for all the help! Paul --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
Thanks Scott, As an FYI and per request of Jon, I added the REPORT line and tried it again with the MID setting, here is a snip of the logs. I have now removed the /LIS and REPORT. We'll see how that goes. Oh, can I delete the .vir directories that Declude didn't yesterday? That shouldn't effect anything right? Paul 10/22/2002 10:55:26 Q666200610084648d ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:26 Q666200610084648d Scanned: Virus Free [MIME: 2 6368] 10/22/2002 10:55:28 Q66a2001201f8610d ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:28 Q66a2001201f8610d Scanned: Virus Free [MIME: 1 3653] 10/22/2002 10:55:29 Q66a4003a0154661e ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:29 Q66a4003a0154661e Scanned: Virus Free [MIME: 1 14306] 10/22/2002 10:55:33 Q66a80026016676f7 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:33 Q66a80026016676f7 Scanned: Virus Free [MIME: 1 3644] 10/22/2002 10:55:34 Q66a800160194761c ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:34 Q66a800160194761c Scanned: Virus Free [MIME: 2 330] 10/22/2002 10:55:34 Q66a8002f029e78ac ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:34 Q66a8002f029e78ac Scanned: Virus Free [MIME: 2 42195] 10/22/2002 10:55:39 Q66ae00180194904b ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:39 Q66ae00180194904b Scanned: Virus Free 10/22/2002 10:55:40 Q66af000f01cc91b2 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:40 Q66af000f01cc91b2 Scanned: Virus Free [MIME: 1 866] 10/22/2002 10:55:41 Q66b1003601de9973 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:41 Q66b1003601de9973 WARNING: Couldn't remove .vir directory D:\IMail\spool\D66b1003601de9973.vir\: SHARING VIOLATION. 10/22/2002 10:55:41 Q66b1003601de9973 Likely problem: An on-access scanner is interfering; disable or set not to scan subdirectories off of \IMail\spool. 10/22/2002 10:55:41 Q66b1003601de9973 Scanned: Virus Free [MIME: 1 2569] 10/22/2002 10:55:42 Q66b1003c01fc9af9 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:42 Q66b1003c01fc9af9 WARNING: Couldn't remove .vir directory D:\IMail\spool\D66b1003c01fc9af9.vir\: SHARING VIOLATION. 10/22/2002 10:55:42 Q66b1003c01fc9af9 Likely problem: An on-access scanner is interfering; disable or set not to scan subdirectories off of \IMail\spool. 10/22/2002 10:55:42 Q66b1003c01fc9af9 Scanned: Virus Free 10/22/2002 10:55:46 Q66b6000a01c0ac5e ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:46 Q66b6000a01c0ac5e Scanned: Virus Free 10/22/2002 10:55:47 Q66b6001901e6acdb ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:47 Q66b6001901e6acdb Scanned: Virus Free 10/22/2002 10:55:48 Q66b6000a01a8ad0a ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:48 Q66b6000e01b0ad0a ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:48 Q66b6000a01a8ad0a Scanned: Virus Free 10/22/2002 10:55:48 Q66b6000f01e4ae52 Scanned: Virus Free 10/22/2002 10:55:48 Q66b6000e01b0ad0a Scanned: Virus Free 10/22/2002 10:55:48 Q66b6001301e8aea1 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:48 Q66b6001a015aae52 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:48 Q66b6001301e8aea1 WARNING: Couldn't remove .vir directory D:\IMail\spool\D66b6001301e8aea1.vir\: SHARING VIOLATION. 10/22/2002 10:55:48 Q66b6001301e8aea1 Likely problem: An on-access scanner is interfering; disable or set not to scan subdirectories off of \IMail\spool. 10/22/2002 10:55:48 Q66b6001a015aae52 WARNING: Couldn't remove .vir directory D:\IMail\spool\D66b6001a015aae52.vir\: SHARING VIOLATION. 10/22/2002 10:55:48 Q66b6001301e8aea1 Scanned: Virus Free 10/22/2002 10:55:48 Q66b6001a015aae52 Likely problem: An on-access scanner is interfering; disable or set not to scan subdirectories off of \IMail\spool. 10/22/2002 10:55:48 Q66b6001a015aae52 Scanned: Virus Free 10/22/2002 10:55:53 Q66ba001e0216bedd ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:53 Q66ba001e0216bedd Scanned: Virus Free [MIME: 2 9829] 10/22/2002 10:55:55 Q66be00250192cca8 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:56 Q66be00250192cca8 Scanned: Virus Free [MIME: 1 1594] 10/22/2002 10:55:58 Q66c100260192d91c ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:55:58 Q66c100260192d91c Scanned: Virus Free [MIME: 2 8376] 10/22/2002 10:56:02 Q66c60049017eebd8 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 10:56:02 Q66c60049017eebd8 Scanned: Virus Free [MIME: 2 7682] 10/22/2002 10:56:03
Re: [Declude.JunkMail] Declude errors.
As an FYI and per request of Jon, I added the REPORT line and tried it again with the MID setting, here is a snip of the logs. As I suspected, it caused a problem. :) I have now removed the /LIS and REPORT. We'll see how that goes. That should go fine. Oh, can I delete the .vir directories that Declude didn't yesterday? That shouldn't effect anything right? Yes, it is safe to delete any stray .vir directories. The only problem it can cause is if they are .vir directories that Declude Virus is currently using, in which case deleting the directory could potentially allow a virus through (if the E-mail being scanned contained a virus). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
That should go fine. Nope, same stuff... here's part of the logs. 10/22/2002 12:15:10 Q79640009018ea595 Outlook MIME exploit: type=audio/x-wav, name=DirectHitMSN[1].scr. 10/22/2002 12:16:10 Q79640009018ea595 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:10 Q79640009018ea595 File(s) are INFECTED [0] 10/22/2002 12:16:10 Q79640009018ea595 Scanned: CONTAINS A VIRUS [MIME: 3 121387] 10/22/2002 12:16:10 Q79640009018ea595 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 10/22/2002 12:16:10 Q79640009018ea595 Subject: Honey 10/22/2002 12:16:13 Q799c01d45156 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:13 Q799c01d45156 Scanned: Virus Free [MIME: 2 3465] 10/22/2002 12:16:16 Q7990003801b652dc ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:16 Q7990003801b652dc Scanned: Virus Free [MIME: 6 12934] 10/22/2002 12:16:18 Q7996003901b6674f ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:18 Q7996003901b6674f Scanned: Virus Free [MIME: 1 5986] 10/22/2002 12:16:20 Q799800de00fc6ec1 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:20 Q799800de00fc6ec1 Scanned: Virus Free [MIME: 2 8452] 10/22/2002 12:16:42 Q79ad012f0124c32a ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:42 Q79ad012f0124c32a Scanned: Virus Free [MIME: 2 9829] 10/22/2002 12:16:43 Q79ae01a500e6c628 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:43 Q79ae01a500e6c628 Scanned: Virus Free [MIME: 1 9100] 10/22/2002 12:16:50 Q79b601300124e614 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:50 Q79b601300124e614 Scanned: Virus Free [MIME: 1 3651] 10/22/2002 12:16:52 Q79b8019e0084eb83 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:52 Q79b8019e0084eb83 WARNING: Couldn't remove .vir directory D:\IMail\spool\D79b8019e0084eb83.vir\: SHARING VIOLATION. 10/22/2002 12:16:52 Q79b8019e0084eb83 Likely problem: An on-access scanner is interfering; disable or set not to scan subdirectories off of \IMail\spool. 10/22/2002 12:16:52 Q79b8019e0084eb83 Scanned: Virus Free [MIME: 1 887] 10/22/2002 12:16:56 Q79ba02cb0120f71b ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:56 Q79ba02cb0120f71b Scanned: Virus Free [MIME: 2 14798] 10/22/2002 12:16:57 Q79bd003a01460033 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:57 Q79bd003a01460033 Scanned: Virus Free [MIME: 1 3073] 10/22/2002 12:16:57 Q79bc001a0144fd65 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:57 Q79bc001a0144fd65 Scanned: Virus Free [MIME: 2 5192] 10/22/2002 12:17:02 Q79c20014014e136d ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:02 Q79c20014014e136d Scanned: Virus Free 10/22/2002 12:17:07 Q79c702bf00d026e6 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:07 Q79c702bf00d026e6 Scanned: Virus Free [MIME: 3 41280] 10/22/2002 12:17:11 Q79ca0024010a32ad ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:11 Q79ca0024010a32ad Scanned: Virus Free [MIME: 2 7911] 10/22/2002 12:17:20 Q79d30026010a5856 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:20 Q79d30026010a5856 Scanned: Virus Free [MIME: 1 2358] 10/22/2002 12:17:24 Q79d7003b01466834 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:24 Q79d7003b01466834 Scanned: Virus Free [MIME: 1 13760] 10/22/2002 12:17:26 Q79d9003c01466efb ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:26 Q79d9003c01466efb Scanned: Virus Free [MIME: 5 39281] 10/22/2002 12:17:33 Q79de00e2006a8273 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:33 Q79de00e2006a8273 Scanned: Virus Free [MIME: 2 12955] 10/22/2002 12:17:40 Q79e700e4006aa647 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:40 Q79e700e4006aa647 Scanned: Virus Free [MIME: 1 3408] 10/22/2002 12:17:45 Q79c1001b01440f66 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:45 Q79c1001b01440f66 Scanned: Virus Free [MIME: 3 215276] 10/22/2002 12:17:46 Q79ed00e200fcbdd6 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:46 Q79ed00e200fcbdd6 Scanned: Virus Free [MIME: 2 13227] 10/22/2002 12:17:49 Q79f1001c0144cb25 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:49 Q79f1001c0144cb25 Scanned: Virus Free [MIME: 1 2240] 10/22/2002 12:17:54 Q79f601a10084dfb6 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:54 Q79f601a10084dfb6 WARNING: Couldn't remove .vir directory D:\IMail\spool\D79f601a10084dfb6.vir\: SHARING VIOLATION. 10/22/2002 12:17:54
Re: [Declude.JunkMail] Declude errors.
You'll need to go back to the original settings that I gave you for the buggy version of Innocu*: SCANFILE C:\Progra~1\Comput~1\Inocul~1\inocucmd.exe VIRUSCODE 100 Note that there must be no occurrences of report.txt in the virus.cfg file, and no lines beginning with REPORT. -Scott At 12:18 PM 10/22/2002, you wrote: That should go fine. Nope, same stuff... here's part of the logs. 10/22/2002 12:15:10 Q79640009018ea595 Outlook MIME exploit: type=audio/x-wav, name=DirectHitMSN[1].scr. 10/22/2002 12:16:10 Q79640009018ea595 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:10 Q79640009018ea595 File(s) are INFECTED [0] 10/22/2002 12:16:10 Q79640009018ea595 Scanned: CONTAINS A VIRUS [MIME: 3 121387] 10/22/2002 12:16:10 Q79640009018ea595 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 10/22/2002 12:16:10 Q79640009018ea595 Subject: Honey 10/22/2002 12:16:13 Q799c01d45156 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:13 Q799c01d45156 Scanned: Virus Free [MIME: 2 3465] 10/22/2002 12:16:16 Q7990003801b652dc ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:16 Q7990003801b652dc Scanned: Virus Free [MIME: 6 12934] 10/22/2002 12:16:18 Q7996003901b6674f ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:18 Q7996003901b6674f Scanned: Virus Free [MIME: 1 5986] 10/22/2002 12:16:20 Q799800de00fc6ec1 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:20 Q799800de00fc6ec1 Scanned: Virus Free [MIME: 2 8452] 10/22/2002 12:16:42 Q79ad012f0124c32a ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:42 Q79ad012f0124c32a Scanned: Virus Free [MIME: 2 9829] 10/22/2002 12:16:43 Q79ae01a500e6c628 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:43 Q79ae01a500e6c628 Scanned: Virus Free [MIME: 1 9100] 10/22/2002 12:16:50 Q79b601300124e614 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:50 Q79b601300124e614 Scanned: Virus Free [MIME: 1 3651] 10/22/2002 12:16:52 Q79b8019e0084eb83 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:52 Q79b8019e0084eb83 WARNING: Couldn't remove .vir directory D:\IMail\spool\D79b8019e0084eb83.vir\: SHARING VIOLATION. 10/22/2002 12:16:52 Q79b8019e0084eb83 Likely problem: An on-access scanner is interfering; disable or set not to scan subdirectories off of \IMail\spool. 10/22/2002 12:16:52 Q79b8019e0084eb83 Scanned: Virus Free [MIME: 1 887] 10/22/2002 12:16:56 Q79ba02cb0120f71b ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:56 Q79ba02cb0120f71b Scanned: Virus Free [MIME: 2 14798] 10/22/2002 12:16:57 Q79bd003a01460033 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:57 Q79bd003a01460033 Scanned: Virus Free [MIME: 1 3073] 10/22/2002 12:16:57 Q79bc001a0144fd65 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:16:57 Q79bc001a0144fd65 Scanned: Virus Free [MIME: 2 5192] 10/22/2002 12:17:02 Q79c20014014e136d ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:02 Q79c20014014e136d Scanned: Virus Free 10/22/2002 12:17:07 Q79c702bf00d026e6 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:07 Q79c702bf00d026e6 Scanned: Virus Free [MIME: 3 41280] 10/22/2002 12:17:11 Q79ca0024010a32ad ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:11 Q79ca0024010a32ad Scanned: Virus Free [MIME: 2 7911] 10/22/2002 12:17:20 Q79d30026010a5856 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:20 Q79d30026010a5856 Scanned: Virus Free [MIME: 1 2358] 10/22/2002 12:17:24 Q79d7003b01466834 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:24 Q79d7003b01466834 Scanned: Virus Free [MIME: 1 13760] 10/22/2002 12:17:26 Q79d9003c01466efb ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:26 Q79d9003c01466efb Scanned: Virus Free [MIME: 5 39281] 10/22/2002 12:17:33 Q79de00e2006a8273 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:33 Q79de00e2006a8273 Scanned: Virus Free [MIME: 2 12955] 10/22/2002 12:17:40 Q79e700e4006aa647 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:40 Q79e700e4006aa647 Scanned: Virus Free [MIME: 1 3408] 10/22/2002 12:17:45 Q79c1001b01440f66 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:45 Q79c1001b01440f66 Scanned: Virus Free [MIME: 3 215276] 10/22/2002 12:17:46 Q79ed00e200fcbdd6 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/22/2002 12:17:46 Q79ed00e200fcbdd6 Scanned: Virus Free [MIME: 2 13227] 10/22/2002 12:17:49 Q79f1001c0144cb25 ERROR: Virus scanner
Re: [Declude.JunkMail] Declude errors.
You'll need to go back to the original settings that I gave you for the buggy version of Innocu*: SCANFILE C:\Progra~1\Comput~1\Inocul~1\inocucmd.exe VIRUSCODE 100 Note that there must be no occurrences of report.txt in the virus.cfg file, and no lines beginning with REPORT. -Scott Ok, I tried this and still no go. I get the same timeout and cannot delete messages. I'm seriously looking at F-prot or something, cause this Innoculan is giving me a migraine. Like I said, this has GOT to work somehow, but I'll be danged if I know what that is. I know the on demand is disabled, but why it's still there is a mystery to me. help! Paul --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
You'll need to go back to the original settings that I gave you for the buggy version of Innocu*: SCANFILE C:\Progra~1\Comput~1\Inocul~1\inocucmd.exe VIRUSCODE 100 Note that there must be no occurrences of report.txt in the virus.cfg file, and no lines beginning with REPORT. Ok, I tried this and still no go. I get the same timeout and cannot delete messages. Were you getting these errors before you started making the changes this morning (IE was there any point where it was working correctly)? Do you have an on-access virus scanner running (one that scans files as they are saved to the hard drive), which would interfere with Declude? I'm seriously looking at F-prot or something, cause this Innoculan is giving me a migraine. Like I said, this has GOT to work somehow, but I'll be danged if I know what that is. I know the on demand is disabled, but why it's still there is a mystery to me. help! One way to tell if the on-access virus scanner is running is to copy the eicar.com file (from http://www.eicar.org ) to your hard drive -- if you can't do it (or if it immediately disappears, or you see a pop-up message), then you have an on-access virus scanner running that should be turned off (or set not to scan the \Imail\spool\ directory). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
Were you getting these errors before you started making the changes this morning (IE was there any point where it was working correctly)? No, I've always gotten these errors. Do you have an on-access virus scanner running (one that scans files as they are saved to the hard drive), which would interfere with Declude? The only anti-virus on the machine is Innocuate. And on access is disabled. I was able to save the eicar.com file to the drive with no errors. Do I have to run Declude.exe again? I've only run it once, yesterday and to change I stopped/started SMTP services. Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
The only anti-virus on the machine is Innocuate. And on access is disabled. I was able to save the eicar.com file to the drive with no errors. Do I have to run Declude.exe again? I've only run it once, yesterday and to change I stopped/started SMTP services. I'm going to respond to this on the Declude Virus forum. :) -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude errors.
I'm going to respond to this on the Declude Virus forum. :) -Scott I am sooo sorry guys, didn't mean to hog the JUNKMAIL list with my virus questions rest assured I signed up for the Declude Virus list. again, sorry. Paul --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude errors.
again, sorry. No problem. Nothing that 20 lashes with a wet noodle can't take care of. ;) John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude errors.
Hey gang, I feel bad for tormenting poor Scott these past days about my questions, so I'll post one here as well.. We just installed Declude Virus, and have it set to run with Etrust Innoculan, and this is a snip of the logs. FYI we totally disabled to on demand scanning as per Scott. Any ideas for what to do next? Here is my virus cfg and the log. THANKS!! Paul cfg: LOGFILE d:\imail\spool\vir.log LOGLEVELLOW CONSOLE OFF SCANFILED:\CA\eTrust\InoculateIT\inocucmd.exe /LIS .\report.txt VIRUSCODE 100 VIRDIR d:\imail\spool\virus logs: : Virus Free [MIME: 1 1727] 10/21/2002 17:28:39 Q714a00090202ffb7 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:28:39 Q714a00090202ffb7 WARNING: Couldn't remove .vir directory D:\IMail\spool\D714a00090202ffb7.vir\: SHARING VIOLATION. 10/21/2002 17:28:39 Q714a00090202ffb7 Likely problem: An on-access scanner is interfering; disable or set not to scan subdirectories off of \IMail\spool. 10/21/2002 17:28:39 Q714a00090202ffb7 Scanned: Virus Free [MIME: 4 1493] 10/21/2002 17:28:41 Q714c0010022407d5 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:28:41 Q714c0010022407d5 WARNING: Couldn't remove .vir directory D:\IMail\spool\D714c0010022407d5.vir\: SHARING VIOLATION. 10/21/2002 17:28:41 Q714c0010022407d5 Likely problem: An on-access scanner is interfering; disable or set not to scan subdirectories off of \IMail\spool. 10/21/2002 17:28:41 Q714c0010022407d5 Scanned: Virus Free [MIME: 2 371] 10/21/2002 17:28:42 Q714d001a013a0aa4 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:28:42 Q714d001a013a0aa4 Scanned: Virus Free [MIME: 1 1147] 10/21/2002 17:28:44 Q7150001b013a1552 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:28:44 Q7150001b013a1552 WARNING: Couldn't remove .vir directory D:\IMail\spool\D7150001b013a1552.vir\: SHARING VIOLATION. 10/21/2002 17:28:44 Q7150001b013a1552 Likely problem: An on-access scanner is interfering; disable or set not to scan subdirectories off of \IMail\spool. 10/21/2002 17:28:44 Q7150001b013a1552 Scanned: Virus Free [MIME: 2 1224] 10/21/2002 17:28:47 Q71530010021c21f5 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:28:47 Q71530010021c21f5 Scanned: Virus Free [MIME: 2 2217] 10/21/2002 17:28:51 Q7156001102182f91 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:28:51 Q7156001102182f91 Scanned: Virus Free [MIME: 2 7149] 10/21/2002 17:28:54 Q715a001202183e75 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:28:54 Q715a001202183e75 Scanned: Virus Free 10/21/2002 17:28:56 Q715b000f02364396 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:28:56 Q715b000f02364396 Scanned: Virus Free [MIME: 2 4988] 10/21/2002 17:28:58 Q715d001001fc4b37 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:28:58 Q715d001001fc4b37 Scanned: Virus Free [MIME: 1 3614] 10/21/2002 17:29:02 Q7162001002365d96 ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:29:03 Q7162001002365d96 Scanned: Virus Free [MIME: 2 5010] 10/21/2002 17:29:03 Q7162001302245f5b ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:29:03 Q7162001302245f5b Scanned: Virus Free [MIME: 1 2257] 10/21/2002 17:29:07 Q7166000a02486c5b ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:29:07 Q7166000a02486c5b Scanned: Virus Free [MIME: 1 4126] 10/21/2002 17:29:11 Q716a002100947e8c ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:29:11 Q716a002100947e8c Scanned: Virus Free [MIME: 1 937] 10/21/2002 17:29:12 Q716b001202367eca ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:29:12 Q716b001202367eca Scanned: Virus Free [MIME: 2 9431] 10/21/2002 17:29:16 Q71700010021e931d ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:29:16 Q71700010021e931d Scanned: Virus Free [MIME: 1 2693] 10/21/2002 17:29:16 Q71700022009493aa ERROR: Virus scanner didn't finish after 60 seconds; terminating. 10/21/2002 17:29:16 Q71700022009493aa Scanned: Virus Free [MIME: 2 4219] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude errors.
Change log to MID, then repost please. LOGFILE d:\imail\spool\vir.log LOGLEVELLOW CONSOLE OFF SCANFILED:\CA\eTrust\InoculateIT\inocucmd.exe /LIS .\report.txt VIRUSCODE 100 VIRDIR d:\imail\spool\virus Have to ask, are those the correct directories? Looks like you also need a line: REPORT infected by virus. FYI we totally disabled to on demand scanning as per Scott. Any ideas for what to do next? Here is my virus cfg and the log. Do you have any other Virus software on the server? Is this on a NTFS partition? Are the permissions set correctly? In the SCANFILE line, is there really supposed to be a . before \report.txt? John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
Scott, Thanks for all of your help on this - as I soon suspected after replying to you, it turned out to be one of my guys here playing with the word filters, and had turned the WEIGHT10 value to 0 in testing various things...Sorry for the false alarm. I do have one other thingI accidently ran the declude.exe file again today (I'm a keyboard shortcut person - doesn;t always fair well in windows) and the junkmail and virus processes are now not running; i stopped/started smtp several times with no liuck; have search mail archives and cannot find anything directly to thisany suggestions? Thanks! Sincerely, Randy Armbrecht Global Web Solutions®, Inc. 804-346-5300 x102 877-800-GLOBAL (4562) x102 - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: Webmaster - GlobalWeb.net [EMAIL PROTECTED] Sent: Wednesday, October 16, 2002 4:24 PM Subject: Re: [Declude.JunkMail] declude errors? Here it is: That is strange -- it is set up correctly. Could you send me the \IMail\spool\dec1016.log file? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [Scanned for viruses on GlobalWeb.net's system using Declude/F-Prot AV] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
I do have one other thingI accidently ran the declude.exe file again today (I'm a keyboard shortcut person - doesn;t always fair well in windows) and the junkmail and virus processes are now not running; i stopped/started smtp several times with no liuck; have search mail archives and cannot find anything directly to thisany suggestions? Normally, running the Declude.exe file manually won't cause any problems if Declude has already been installed. The only problem should be if Declude hasn't already been installed. Could you save the Declude diagnostics (by going to a command prompt and typing \IMail\declude -diag diag.txt (*exactly* like that, with no changes). This will report the diagnostic information to a file diag.txt, which you can send me. From that, I should be able to tell where the problem is. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
Declude (C) Copyright 2000-2002 Computerized Horizons. All Rights Reserved. Diagnostics ON (Declude v1.60). Declude JunkMail: Config file found (C:\imail\Declude\global.CFG). Declude Virus: Config file found (C:\imail\Declude\Virus.CFG). Declude Hijack:Not installed (no C:\imail\Declude\Hijack.CFG file). Declude Confirm: Not installed (no C:\imail\Declude\Confirm.CFG file). 27 spam tests defined: LOOSENSPAMHEADERS MONKEYFORMMAIL MONKIEPROXIES ORDB OSDUL OSFORM OSLIST OSPROXY OSRELAY OSSMART OSSOFT OSSRC SPAMCOP DSN NOABUSE NOPOSTMASTER BADHEADERS HELOBOGUS MAILFROM PERCENT REVDNS ROUTING SPAMHEADERS SNIFFER WEIGHT10 WEIGHT20 DSBL IMail reports Official Host Name as: imail.globalweb.net. IMail's SendName registry seems OK: C:\IMAIL\Declude.exe. Declude JunkMail Status: PRO version registered. Declude Virus Status:Standard Version Registered. Declude Hijack Status: NOT REGISTERED: No activation code. End of diagnostics. We have hijack turned Off right now trying to diagnose some IMail Spool build ups. Sincerely, Randy Armbrecht Global Web Solutions®, Inc. 804-346-5300 x102 877-800-GLOBAL (4562) x102 - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 18, 2002 11:18 AM Subject: Re: [Declude.JunkMail] declude errors? I do have one other thingI accidently ran the declude.exe file again today (I'm a keyboard shortcut person - doesn;t always fair well in windows) and the junkmail and virus processes are now not running; i stopped/started smtp several times with no liuck; have search mail archives and cannot find anything directly to thisany suggestions? Normally, running the Declude.exe file manually won't cause any problems if Declude has already been installed. The only problem should be if Declude hasn't already been installed. Could you save the Declude diagnostics (by going to a command prompt and typing \IMail\declude -diag diag.txt (*exactly* like that, with no changes). This will report the diagnostic information to a file diag.txt, which you can send me. From that, I should be able to tell where the problem is. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
We have hijack turned Off right now trying to diagnose some IMail Spool build ups. The diagnostics look fine. I would recommend stopping/restarting the IMail SMTP service. If that doesn't fix it, some more details of the problem would be helpful (such as whether or not a log file is being created, or whether there is any indication that Declude is working). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
I had previously stopped/restarted smtp service, both from the IMAIL admin/SMTP tab and the win control panel services; declude logs are not being generated - junkmail and virus both stopped logging at 10.28am; have dbl checked to be sure that log file directories are all correclty entered in the config files - I was initially thinking at first that the 're-install' had overwrote the spool file directory entry modifications we have made in the past, but not the case Sincerely, Randy Armbrecht Global Web Solutions®, Inc. 804-346-5300 x102 877-800-GLOBAL (4562) x102 - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, October 18, 2002 11:34 AM Subject: Re: [Declude.JunkMail] declude errors? We have hijack turned Off right now trying to diagnose some IMail Spool build ups. The diagnostics look fine. I would recommend stopping/restarting the IMail SMTP service. If that doesn't fix it, some more details of the problem would be helpful (such as whether or not a log file is being created, or whether there is any indication that Declude is working). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] declude errors?
we have noticed over the last day or 2 that some messages are getting marked with our WEIGHT 10 Header mark of [SPAM ??] even though the message didn;t fail any tests - the header says it failed WEIGHT 10, but WEIGHT 10 is not a test is it? just a tier level of sorts, correct? Anyone have any idea what could be causing this? We are battling the typical (at least what I feel is typical) spool sluggish-nish of IMail during peak times of the day, but that's for another list... here's the headers of one of those emails.(email of sender has been changed to protect the innocent) Message-ID: 005601c2752a$aba6b260$8d82d043@desktop From: Tori B. [EMAIL PROTECTED] To: Randy Armbrecht [EMAIL PROTECTED] Subject: [SPAM ??]sample page Date: Wed, 16 Oct 2002 11:42:43 -0400 Organization: Domain2, Inc. MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_000_0053_01C27509.23CBA7E0 X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600. X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600. X-Declude-Sender: [EMAIL PROTECTED] [207.217.120.122] X-Note: Scanned by Declude JunkMail sent from pintail.mail.pas.earthlink.net ([207.217.120.122]). X-Spam-Tests-Failed: WEIGHT10 sent from pintail.mail.pas.earthlink.net ([207.217.120.122]). X-RCPT-TO: [EMAIL PROTECTED] Status: U X-UIDL: 327984042 SYS Log shows: 10:16 11:44 SMTPD(096300D8) [207.217.120.122] MAIL FROM:[EMAIL PROTECTED] 10:16 11:44 SMTPD(096300D8) [207.217.120.122] RCPT TO:[EMAIL PROTECTED] 10:16 11:44 SMTPD(096300D8) [207.217.120.122] C:\IMAIL\spool\D8963096300d8b474.SMD 3196 10:16 11:44 SMTP-(0CB4) processing C:\IMAIL\spool\Q8963006f00f0b36a.SMD 10:16 11:44 SMTP-(0CB4) finished C:\IMAIL\spool\Q8963006f00f0b36a.SMD status=1 Declude log shows: 10/16/2002 11:44:41 Q8963096300d8b474 Msg failed WEIGHT10 (Weight of 0 reaches or exceeds the limit of 0.) Any thoughts? Thanks! Sincerely, Randy Armbrecht Global Web Solutions®, Inc. 804-346-5300 x102 877-800-GLOBAL (4562) x102 - Original Message - From: John Tolmachoff [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 16, 2002 1:26 PM Subject: RE: [Declude.JunkMail] Way OT now! I get email that talks about situations like that all the time, describing mythical joys and riches beyond belief. I call it spam, and I'm looking for something that helps me control it. Do you have any suggestions? Now see what I started. ;) Sheesh. John Tolmachoff IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [Scanned for viruses on GlobalWeb.net's system using Declude/F-Prot AV] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
we have noticed over the last day or 2 that some messages are getting marked with our WEIGHT 10 Header mark of [SPAM ??] even though the message didn;t fail any tests - the header says it failed WEIGHT 10, but WEIGHT 10 is not a test is it? just a tier level of sorts, correct? WEIGHT10 is a pseudo test -- Declude JunkMail treats it as if it were a test, but since it relies on the results of other tests, it isn't really a test by itself. Declude log shows: 10/16/2002 11:44:41 Q8963096300d8b474 Msg failed WEIGHT10 (Weight of 0 reaches or exceeds the limit of 0.) What else does the Declude JunkMail log file show for this E-mail (the other lines with 8963096300d8b474 in them)? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
that is the puzzling part - that is the only line shown in declude logs. Sincerely, Randy Armbrecht Global Web Solutions®, Inc. 804-346-5300 x102 877-800-GLOBAL (4562) x102 - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, October 16, 2002 3:59 PM Subject: Re: [Declude.JunkMail] declude errors? we have noticed over the last day or 2 that some messages are getting marked with our WEIGHT 10 Header mark of [SPAM ??] even though the message didn;t fail any tests - the header says it failed WEIGHT 10, but WEIGHT 10 is not a test is it? just a tier level of sorts, correct? WEIGHT10 is a pseudo test -- Declude JunkMail treats it as if it were a test, but since it relies on the results of other tests, it isn't really a test by itself. Declude log shows: 10/16/2002 11:44:41 Q8963096300d8b474 Msg failed WEIGHT10 (Weight of 0 reaches or exceeds the limit of 0.) What else does the Declude JunkMail log file show for this E-mail (the other lines with 8963096300d8b474 in them)? -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [Scanned for viruses on GlobalWeb.net's system using Declude/F-Prot AV] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude errors?
that is the puzzling part - that is the only line shown in declude logs. In that case, I'm guessing that the WEIGHT10 test isn't set up correctly (something was changed from the default). If you E-mail me your \IMail\Declude\global.cfg file, I should be able to figure out what the problem is. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
