RE: [Declude.Virus] Netsky.P Occasionally Slips through?

2004-03-30 Thread R. Scott Perry
If F-prot notes a file as suspicious is it stopped by declude or passed. Can this be a setting possibly? IE if F-prot notes it as suspicious allow declude to block it. You can add a line VIRUSCODE 8 to your \IMail\Declude\virus.cfg file to block E-mails that F-Prot considers suspicious.

RE: [Declude.Virus] Netsky.P Occasionally Slips through?

2004-03-30 Thread Grant Griffith - Declude Virus
Just add the VIRUSCODE 8 to the config files. Note that it may have some false positives, but we are OK with that. Would rather that than a possible virus getting thru. Sincerely, Grant Griffith, Vice President EI8HT LEGS Web Management Co., Inc. http://www.getafreewebsite.com 877-483-3393

RE: [Declude.Virus] Server down

2004-03-30 Thread Todd Holt
It was probably an admin that opened his own mail on that machine. Todd Holt Xidix Technologies, Inc Las Vegas, NV USA 702.319.4349 www.xidix.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Douglas Cohn Sent: Tuesday, March 30, 2004 6:55 AM To:

[Declude.Virus] Proactive Response - Maybe already in Pro version

2004-03-30 Thread Jeff Maze - Hostmaster
Hello, I was just wondering something. Like most people on the list, I told Declude to block EZIP files. I just got a call from a client that said that his messages couldn't be sent out because it was an EZIP file (password protected zip file; payroll). I told him of the server

Re: [Declude.Virus] Proactive Response - Maybe already in Pro version

2004-03-30 Thread R. Scott Perry
Like most people on the list, I told Declude to block EZIP files. I just got a call from a client that said that his messages couldn't be sent out because it was an EZIP file (password protected zip file; payroll). I told him of the server configuration and suggested that maybe zipping

Re: [Declude.Virus] A way to sneak PW zips through server

2004-03-30 Thread Greg Little
Declude can be configured to do several kinds of blocking for these. Block all non-passworded zips. Block zips inside of zips. Until the virus writers use this trick it should be safe to leave this door open. With many different e-mail protection solutions (each handling these situations

[Declude.Virus] [Partial Vulnerability]

2004-03-30 Thread Jeff Kratka
Scott, What is the Partial Vulnerability that Declude Virus is picking up. I have a customer asking me why and what and how to fix. [Partial Vulnerability] virus in the Unknown File attachment. Jeff Kratka TymeWyse Internet P.O.Box 84 - 110

Re: [Declude.Virus] [Partial Vulnerability]

2004-03-30 Thread R. Scott Perry
What is the Partial Vulnerability that Declude Virus is picking up. I have a customer asking me why and what and how to fix. [Partial Vulnerability] virus in the Unknown File attachment. See http://www.declude.com/virus/vulnerability.htm for details. They are using a *very* outdated option in

Re: [Declude.Virus] [Partial Vulnerability]

2004-03-30 Thread Matt
Jeff, I ran into this the other day. Outlook/Outlook Express allows users to split attachments over a certain size, and the default size is 60 KB. People tend to turn this on when they run into a limitation and then never turn it off. You can turn off in Declude with BANPARTIAL OFF in your

[Declude.Virus] EZIP problem

2004-03-30 Thread ISPHuset Nordic
Hi anyone else experienced problems with zipfile maked with the latest winzip version? Reported by a user it is encryoting in a way per default so that declude take it as a EZIP and block it. Benny --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This

Re: [Declude.Virus] EZIP problem

2004-03-30 Thread R. Scott Perry
Hi anyone else experienced problems with zipfile maked with the latest winzip version? Reported by a user it is encryoting in a way per default so that declude take it as a EZIP and block it. If a .ZIP files is marked as being split among multiple .ZIP files (whether or not it actually is),

RE: [Declude.Virus] EZIP problem

2004-03-30 Thread ISPHuset Nordic
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: 30. mars 2004 22:19 To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] EZIP problem Hi anyone else experienced problems with zipfile maked with the latest winzip

RE: [Declude.Virus] EZIP problem

2004-03-30 Thread ISPHuset Nordic
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: 30. mars 2004 22:19 To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] EZIP problem Hi anyone else experienced problems with zipfile maked with the latest winzip

RE: [Declude.Virus] EZIP problem

2004-03-30 Thread R. Scott Perry
If a .ZIP files is marked as being split among multiple .ZIP files (whether or not it actually is), BANEXT EZIP will block it as well (since it could hide a virus). No it's a single zip file It doesn't matter if it is a single .ZIP file or not -- Declude Virus will block it if it was

[Declude.Virus] declude junkmail vs iMail Anti Spam feature

2004-03-30 Thread Johan Driesmans
Hi, We recently upgraded iMail from v7.07 to v8.05 We noticed that iMail also has an anti-spam feature. We where planning a licence upgrade from declude anti-virus to junkmail also... Who has experience with this and why should I buy junkmail also if iMail has the feature build in...

RE: [Declude.Virus] declude junkmail vs iMail Anti Spam feature

2004-03-30 Thread Rodney Bertsch
Johan, We've done the same thing and are also using the I-Mail spam filter. Declude does have a junkmail option which I'd very much like to switch to. However management seems satisfied with the spam filtering by I-Mail. As mail administrator though, I am FAR from satisfied with I-Mail's

Re: [Declude.Virus] declude junkmail vs iMail Anti Spam feature

2004-03-30 Thread Matt
For those that are more informed, Declude is hands down a better solution from multiple avenues, i.e. configuration options, false negatives, false positives, and efficiency. IMail has at best first generation spam blocking capabilities. The only advantage with IMail anti-spam is that the

Re: [Declude.Virus] declude junkmail vs iMail Anti Spam feature

2004-03-30 Thread Darin Cox
We tried IMail's anti-spam features for a few days but had a lot of trouble with false positives and spam slipping through...Declude JM was much easier for use to implement, has many more capabilities, and is extensible. declude.junkmail is the JM list. Darin. - Original Message -

Re: [Declude.Virus] declude junkmail vs iMail Anti Spam feature

2004-03-30 Thread Rick Davidson
Declude is WAY superior to the Imail anti-spam implementation, you have far more control and granularity. And if you do use the Imail implementation look over their filter files real good before you use them, you will find virtually every airline, internet fax services and many other non spam

[Declude.Virus] Faster second scanner needed

2004-03-30 Thread Matt
As I continue to research opportunities for increasing efficiency in order to extend the life of my current environment, I have identified AVG Anti-Virus as one of the biggest processor hogs, and holder of the most opportunity. F-Prot is 4 times faster, and maybe more efficient than that when

RE: [Declude.Virus] Faster second scanner needed

2004-03-30 Thread John Tolmachoff \(Lists\)
FYI, I did some heavy talking with a contact at Kaspersky about 1 1/2 ago regarding using their product to integrate into a product I was trying to develop, but did not get off the ground. They are very helpful and courteous. John Tolmachoff Engineer/Consultant/Owner eServices For You

Re: [Declude.Virus] Faster second scanner needed

2004-03-30 Thread Adrian Hauri
AVG takes about 4 seconds to fire up the AV Engine and scan. I'm running the 16bit version 6 of AVG. I would recommend you to use McAfee. I use version 4.32 for more than a year now and it is as fast as F-Prot. Also it was the first and only AV scanner for several days who was able to detect

Re: [Declude.Virus] Netsky.P Occasionally Slips through?

2004-03-30 Thread Adrian Hauri
the same happens here with f-prot for dos: 14:57:39.69 4 EXTFILTER(ANTIVIRUS) inp(39): * start virusscan for Queue\1730292.msg 14:57:40.64 4 EXTFILTER(ANTIVIRUS) inp(97): * Found the W32/[EMAIL PROTECTED] virus !!! in Queue\1730292.msg MCAFEE. 14:57:41.36 4 EXTFILTER(ANTIVIRUS) inp(54): * Message

Re: [Declude.Virus] Faster second scanner needed

2004-03-30 Thread Matt
Adrian, This is helpful, however the control is different as mine was based on the 32 bit version of F-Prot (fpcmd.exe). It appears from your logs that 16 bit F-Prot beat out 32-bit McAfee by 50% or more. I'm not sure if the F-Prot being 16 bit had all that much effect, but one would expect

Re: [Declude.Virus] Faster second scanner needed

2004-03-30 Thread Adrian Hauri
MyAV scanners are running a bit slower than yoursbecause the server is not very new and fancy and we do not have that much traffic: PIII 666 256MB Ram IDE Raid1 withold 2x30GB HD (2-3years old) I guess with Raid10, new HD, dual P4 and more ram this would speed it up10x. Anyway, the