Like many peddlers of security software, they can sell more by portraying
the situation as worse than it really is. I tried this on an ISP who has
been in the business since 1997. Aggressively anti-spam, although they have
to fight against stolen account passwords, etc.
Reputation: Likely
The 'Blank Folding' vulnerability may be allowed by the RFC, but that
doesn't make them the right thing to do. The problem is that virus scanners
don't scan for attachments that could be embedded into the headers in one of
these lines but Outlook would still execute them.Just because no
BlankThis used to happen to us several times daily with old versions (Sep 2006
version). Since upgrading to the latest (4.3.30), we have not seen any
problem.The 3.x family should have a corresponding recent release that will
fix your problem.
(In our cases, the problem message -
Mostly with external DB:
If upgrading from 2006.1 or less, and if your external DB is on another
machine, you must move the changes you made to machine.config into the app's
web.config under the appropriate section - if you followed this procedure
earlier:
Isn't the function of DEP to protect all internet-facing services from buffer
overflows?Does Declude legitimately execute code in a data segment?If
DEP cannot be enabled, collect samples of poison messages / messages that cause
.GP1 and .GP2 files with the latest version and send them
Especially since 2006.2 fixes a vulnerabilty in 2006.1 - we'll have to roll
it out quickly.
- Original Message -
From: Scott Fisher [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Monday, February 12, 2007 12:28 PM
Subject: Re: [Declude.JunkMail] [Declude.JunkMail] Imail
What vulnerability in 2006.1 are you referring to? AFAIK, there is none.
John T
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike N
Sent: Monday, February 12, 2007 9:44 AM
To: declude.junkmail@declude.com
Subject: Re: [Declude.JunkMail
I would recommend sending the DECLUDE.GP1 and GP2 files to Declude for
analysis. In addition, look at the .GP1 file to see if you can retrieve the
message that caused the crash and include that when sending to Declude.
I have found one such case and those formats come in spurts - some times
Since Blue Frog died and Okopipi isn't done yet,
here's the Spur-M-Enator(TM) -
http://thecarpcstore.com/phpbb2/viewtopic.php?t=389postdays=0postorder=ascstart=0
Is it
legal?
Does it work?
Who knows? But it can't hurt to find
outg. Includes all source as _javascript_. Runs in
a browser
I've seen some messages with dozens of Kbytes of CC
and TO E-mail lists that would fail this test.
- Original Message -
From:
Herb Guenther
To: declude.junkmail@declude.com
Sent: Thursday, November 09, 2006 3:30
PM
Subject: Re: [Declude.JunkMail] End of
There is a minor compatability problem with 8.2x
and 1.82 in the form of an occasional memory leak - shouldn't be an issue with
lower volumes. We ran on this configuration for a while.
Declude 4.X works fine with 8.22.
- Original Message -
From:
Brian T.
To:
You can now submit Phishes to http://www.phishtank.com . At least you can
do something about them now, but it remains to be seen how effective the
information will be.
- Original Message -
From: Dave Beckstrom [EMAIL PROTECTED]
To: declude.junkmail@declude.com
Sent: Wednesday,
I've read some stories on this one. Is Declude considering developing
support for this with their API?
I don't know about Declude, but it's a natural plugin for one or more of
the SURBLs - I expect they'll have something soon. In which case, the
InvURBL add-on will catch these eventually.
The 2005 date for declude.exe is fine - it just
hasn't needed changes since then.
Declude.cfg holds settings for the overall
Declude Service, and the overall licensing.
Global.cfg is just for common Junkmail
settings.
- Original Message -
From:
Frederick Samarelli
Has anyone measured the difference in CPU requirements between Fprot and the
internal AVG? We've upgraded to the latest Declude and turned off the
internal scanner for now. We will probably migrate before the Fprot
renewal under the new terms - I just wanted an idea if we have to upgrade to
Find /I
/I Ignores the case of characters when searching for the string.
- Original Message -
Question, what is the best quick way to search the logs via command line for
a string and not have the search be case sensitive?
Seek /I, and ye shall find!
g
---
This E-mail
The proof-of-concepts which have been tested on multiple versions also list
a not vulnerable category if other versions have been tested.
I get the feeling that Ipswitch has washed its hands of the previous
version that is more than 90 days old. They take a passive approach to
security;
I am running the latest versions ... The Decludeproc does crash on
average 1-2 times per day for me, but it restarts itself.
Do the crashes produce Declude.GP1 and Declude.GP2 files? Does Declude
Support still accept Declude.GP1 and GP2 files?Nobody writes perfect
code, but if
Product: Declude Security Suite 4.x
Function: Hijack
Hijack is critical to ISPs today because viruses can show up at any time
and get your server on a blacklist before you can detect and react.
Problem #1 - After a customer has cleaned out their PC and removed the
virus, there must be a
The file Console.txt seems to be write-only; it is useful for finding out
what's going on, but I don't think it's possible to edit and have
DecludeProc reread it unless it is just not documented some how.
[Console.txt is displayed by the WebConfiguration GUI]
- Original Message -
If E-mail with spam and virus protection is offered
to our customers as a loss leader for an unrelated business, does this mean that
CommTouch would pay us to use their product? (Negative
revenue).
- Original Message - What
makes the good folk at Declude and CommTouch believe
I looked in the 4.x Junkmail manual, and couldn't find an authoritative
definition of the Country tests. I have found a number of archived
messages, but it is tricky to know if the reason that things are documented
is that they are being deprecated or whatever.
Is there a Kbase article or
I have seen a spammer who is either using broken spamware or intentionally
attaching an extra E-mail address to a real-named target mortgage spam.
The result is that you get messages like John Smith: IRS seizure where
John Smith is a co-worker or neighbor of the same E-mail domain. I call it
Thanks for the update - it was very well written. I can be patient to wait
for everything to get organized knowing what is going on. My input -
Please keep a priority on 'no-error' software: The software should
never fault. If it does, you should be able to use DECLUDE.GP1 and
I found that WINSOCKCLEANUP ON would force a reset if the \proc directory
never hits 0. In this case, files build up in the \review subfolder which
require manual processing.
- Original Message -
From: David Barker [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent: Tuesday,
On 8.15HF2 - The problem has been occuring here (slightly more frequently on
weekends, leading me to believe hack/DOS) through last weekend. Then no
problem since then.
- Original Message -
From: John Tolmachoff (Lists) [EMAIL PROTECTED]
To: Declude.JunkMail@declude.com
Sent:
26 matches
Mail list logo
