[Declude.Virus] AVAFTERJM ?

2005-09-22 Thread Marcel Sangers
Title: AVAFTERJM ?






Hello all,

We make use of the latest Declude version (spam+virus) Pro. What does the AVAFTERJM option do? Antivirus scanning after Junkmail I suppose? What is the default? First scanning viruses followed by scanning for spam?

Due to the large amounts of spam I would suggest first filtering out spam followed by possible viruses? Is that correct?

Regards,

Marcel




[Declude.Virus] Bypassing ban extensions

2005-09-22 Thread John Carter
I have some particular users for whom I want to virus scan their messages
but would like to by-pass the holding on banned extension under normal
circumstances.  Is there anything in the current release or the beta that
would allow this?

If not, my suggestion would be

BYPASSBAN   Sender  [EMAIL PROTECTED]
BYPASSBAN   Recpt   [EMAIL PROTECTED]
or maybe just
BYPASSBAN   [EMAIL PROTECTED]  -- bypass whether sender or recp't.

NOBYPASSprice.zip
NOBYPASS(etc.)

This would allow specifying the people who would not be held as long as
their message did not contain a specified/known problem attachment.

I realize there are some potential issues here, but that should be up to the
individual administrator to decide upon.

Thanks,
John

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] AVAFTERJM ?

2005-09-22 Thread Darrell \([EMAIL PROTECTED])
Marcel, 

AVAFTERJM ON goes in the virus.cfg file and it makes AV run after JM as 
you suspected.  Several of us run this mode for the reason you cited.  The 
only deal you have to remember is if something is trapped by JM and you put 
it back in the queue it will not be virus scanned. 


Darrell

invURIBL - Intelligent URI filtering plug-in for Declude.  Try it today 
http://www.invariantsystems.com 

Marcel Sangers writes: 

Hello all, 


We make use of the latest Declude version (spam+virus) Pro. What does
the AVAFTERJM option do? Antivirus scanning after Junkmail I suppose?
What is the default? First scanning viruses followed by scanning for
spam? 


Due to the large amounts of spam I would suggest first filtering out
spam followed by possible viruses? Is that correct? 


Regards,
Marcel 




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] AVAFTERJM ?

2005-09-22 Thread Panda Consulting S.A. Luis Alberto Arango
Title: AVAFTERJM ?



If using the AVAFTERJM option in Declude Virus, Declude 
Virus will run after Declude JunkMail.

this is the
Processing Order for Imail (taken form the manual). the 
default is that Declude Virus runs before Declude JunkMail

Both IMail and Declude have a number of different tests that they run on 
E-mail. The order used is as follows: 1. IMails Control Access file (to 
block IPs)
2. IMails Kill List (to block return addresses)
3. IMail v8 anti-spam (most tests)
4. Declude Virus
5. Declude Hijack
6. Declude JunkMail
7. IMail's filters and extra IMail v8 anti-spam 
tests

Luis Arango


  
  
  From: [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED] On Behalf Of Marcel 
  SangersSent: Jueves, 22 de Septiembre de 2005 03:16 
  a.m.To: Declude.Virus@declude.comSubject: 
  [Declude.Virus] AVAFTERJM ?
  
  Hello all,
  We make use of the 
  latest Declude version (spam+virus) Pro. What does the AVAFTERJM option do? 
  Antivirus scanning after Junkmail I suppose? What is the default? First 
  scanning viruses 
  followed by scanning for spam?
  Due to the large 
  amounts of spam I would suggest first filtering out 
  spam followed by possible viruses? Is that correct?
  Regards,
  Marcel


[Declude.Virus] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread David Barker
2 new Directives

WAITFORTHREADS  1500
Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds
this can be changed so that when the maximum threads are in use this time
specifics the wait before checking to launch more threads.  

WAITBETWEENTHREADS 1
Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond
The time to wait between spawning one thread and starting to process another
thread.

David B
www.declude.com

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread Keith Johnson
David,
Are these to be used to correct issues with Dual-proc, or is
that still an ongoing issue still be looking at?  Thanks for the time.

Keith

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 11:41 AM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
Subject: [Declude.Virus] Declude Beta 3.0.4.4 Posted


2 new Directives

WAITFORTHREADS  1500
Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5
seconds this can be changed so that when the maximum threads are in use
this time
specifics the wait before checking to launch more threads.  

WAITBETWEENTHREADS 1
Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1
millisecond The time to wait between spawning one thread and starting to
process another thread.

David B
www.declude.com

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread David Barker
Yes, these are to help adjust for timing with Dual-proc

Different systems / configuration respond differently to these settings.  

In particular they to fine tune through-put with CPU utilization.

1. SLOW server that is heavily loaded 

You may want to try to increase WAITBETWEENTHREADS and lower THREADS.

2. FAST server
Use the THREADS and WAITFORTHREADS to adjust the CPU utilization.

When decludeproc first starts up it will use a lot of the CPU but after that
the %CPU used by decludeproc should come way down. 

The %CPU of all processes running may be high depending on external tests,
other processes, etc.  If the system is spiking but coming down quickly
that's good.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson
Sent: Thursday, September 22, 2005 12:27 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

David,
Are these to be used to correct issues with Dual-proc, or is
that still an ongoing issue still be looking at?  Thanks for the time.

Keith

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 11:41 AM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
Subject: [Declude.Virus] Declude Beta 3.0.4.4 Posted


2 new Directives

WAITFORTHREADS  1500
Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5
seconds this can be changed so that when the maximum threads are in use
this time
specifics the wait before checking to launch more threads.  

WAITBETWEENTHREADS 1
Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1
millisecond The time to wait between spawning one thread and starting to
process another thread.

David B
www.declude.com

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread Grant Griffith
Is anyone using Declude Confirm with success in this beta version?  Was just
curious if it is working properly now in this newer version.  I am still
running version 2.0.6.16 as I don't have a test box to play with.  But I
really need to get Declude Confirm working so was thinking of going with the
beta this weekend.

Thanks,
Grant Griffith
EI8HTLEGS, A Division of ETC
(812)932-1000

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 10:41 AM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
Subject: [Declude.Virus] Declude Beta 3.0.4.4 Posted

2 new Directives

WAITFORTHREADS  1500
Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds
this can be changed so that when the maximum threads are in use this time
specifics the wait before checking to launch more threads.  

WAITBETWEENTHREADS 1
Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond
The time to wait between spawning one thread and starting to process another
thread.

David B
www.declude.com

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread John Tolmachoff \(Lists\)
Grant, contact me off list and we can test this.

John T
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 On Behalf Of Grant Griffith
 Sent: Thursday, September 22, 2005 10:58 AM
 To: Declude.Virus@declude.com
 Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted
 
 Is anyone using Declude Confirm with success in this beta version?  Was
just
 curious if it is working properly now in this newer version.  I am still
 running version 2.0.6.16 as I don't have a test box to play with.  But I
 really need to get Declude Confirm working so was thinking of going with
the
 beta this weekend.
 
 Thanks,
 Grant Griffith
 EI8HTLEGS, A Division of ETC
 (812)932-1000
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
 Sent: Thursday, September 22, 2005 10:41 AM
 To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
 Subject: [Declude.Virus] Declude Beta 3.0.4.4 Posted
 
 2 new Directives
 
 WAITFORTHREADS  1500
 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5
seconds
 this can be changed so that when the maximum threads are in use this time
 specifics the wait before checking to launch more threads.
 
 WAITBETWEENTHREADS 1
 Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond
 The time to wait between spawning one thread and starting to process
another
 thread.
 
 David B
 www.declude.com
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread John Tolmachoff \(Lists\)
There is an issue with both Hijack and Confirm with Beta 3.0.4.4. The issue
has to do with the handling of domain aliases. Declude is aware of the issue
and is working on it.

John T
eServices For You


 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 On Behalf Of Grant Griffith
 Sent: Thursday, September 22, 2005 10:58 AM
 To: Declude.Virus@declude.com
 Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted
 
 Is anyone using Declude Confirm with success in this beta version?  Was
just
 curious if it is working properly now in this newer version.  I am still
 running version 2.0.6.16 as I don't have a test box to play with.  But I
 really need to get Declude Confirm working so was thinking of going with
the
 beta this weekend.
 
 Thanks,
 Grant Griffith
 EI8HTLEGS, A Division of ETC
 (812)932-1000
 
 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of David Barker
 Sent: Thursday, September 22, 2005 10:41 AM
 To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
 Subject: [Declude.Virus] Declude Beta 3.0.4.4 Posted
 
 2 new Directives
 
 WAITFORTHREADS  1500
 Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5
seconds
 this can be changed so that when the maximum threads are in use this time
 specifics the wait before checking to launch more threads.
 
 WAITBETWEENTHREADS 1
 Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond
 The time to wait between spawning one thread and starting to process
another
 thread.
 
 David B
 www.declude.com
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 
 
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread Andy Schmidt
Hi David,

I can't help but ask...

You are proposing options that will help with the dual processor issue.
But, are you REPRODUCING the issue and fixing it? I understand that the
problem is that the service goes to sleep for 30 seconds, even though there
are messages in the PROC folder. Clearly that should not happen.  Changing
the timings will only create a trade-off by consuming extra
machine-resources.

Even on a dual-processor system should the service be able to determine
reliably if a folder has content or not?  

I'm just worried that the beta is declared successful when an entire class
of machines is only working with a bandage.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 12:28 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

Yes, these are to help adjust for timing with Dual-proc

Different systems / configuration respond differently to these settings.  

In particular they to fine tune through-put with CPU utilization.

1. SLOW server that is heavily loaded 

You may want to try to increase WAITBETWEENTHREADS and lower THREADS.

2. FAST server
Use the THREADS and WAITFORTHREADS to adjust the CPU utilization.

When decludeproc first starts up it will use a lot of the CPU but after that
the %CPU used by decludeproc should come way down. 

The %CPU of all processes running may be high depending on external tests,
other processes, etc.  If the system is spiking but coming down quickly
that's good.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson
Sent: Thursday, September 22, 2005 12:27 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

David,
Are these to be used to correct issues with Dual-proc, or is that
still an ongoing issue still be looking at?  Thanks for the time.

Keith

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 11:41 AM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
Subject: [Declude.Virus] Declude Beta 3.0.4.4 Posted


2 new Directives

WAITFORTHREADS  1500
Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds
this can be changed so that when the maximum threads are in use this time
specifics the wait before checking to launch more threads.  

WAITBETWEENTHREADS 1
Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond
The time to wait between spawning one thread and starting to process another
thread.

David B
www.declude.com

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread Bill Billman
Hi Andy,

The directives are for tuning both single and multiprocessor systems.  They
are not meant as a tradeoff.  Some multiprocessor systems do not exhibit the
reported sleep for 30 seconds behavior.  We have not been able to reproduce
it ourselves.  This doesn't mean that we do not take it seriously nor does
it mean that we have given up.  I picked up another dual processor machine
tonight and tomorrow we will attempt to reproduce the reported behavior on
it.  It's hard to fix something that we can't reproduce but we will keep
trying.  It's not even clear to me that this problem still exists in the
latest version.  But until the issue is resolved I can assure you we will
not give up.  If you are having this or any other problems please send us
your configuration files along with system specs and log files, debug level
is best.

The beta is a success thanks to our customers and we do appreciate your
efforts.  We set out to fix the 8.2 issues.  We have accomplished that and
fixed some other stuff along the way.  The product will not ship bug free.
But I do assure you that we will prioritize and address every issue that we
know of.

Once we have this baseline release, along with fixing bugs we plan on
implement some cool new stuff that you guys have asked for. 

It's precisely because this is a wonderfully active and sharing community
that Declude is the premier email vulnerability software solution.  Let's
keep the dialog, observations, and ideas flowing and I promise that Declude
will become even better.

All the best,
Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt
Sent: Thursday, September 22, 2005 7:56 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

Hi David,

I can't help but ask...

You are proposing options that will help with the dual processor issue.
But, are you REPRODUCING the issue and fixing it? I understand that the
problem is that the service goes to sleep for 30 seconds, even though there
are messages in the PROC folder. Clearly that should not happen.  Changing
the timings will only create a trade-off by consuming extra
machine-resources.

Even on a dual-processor system should the service be able to determine
reliably if a folder has content or not?  

I'm just worried that the beta is declared successful when an entire class
of machines is only working with a bandage.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 12:28 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

Yes, these are to help adjust for timing with Dual-proc

Different systems / configuration respond differently to these settings.  

In particular they to fine tune through-put with CPU utilization.

1. SLOW server that is heavily loaded 

You may want to try to increase WAITBETWEENTHREADS and lower THREADS.

2. FAST server
Use the THREADS and WAITFORTHREADS to adjust the CPU utilization.

When decludeproc first starts up it will use a lot of the CPU but after that
the %CPU used by decludeproc should come way down. 

The %CPU of all processes running may be high depending on external tests,
other processes, etc.  If the system is spiking but coming down quickly
that's good.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson
Sent: Thursday, September 22, 2005 12:27 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

David,
Are these to be used to correct issues with Dual-proc, or is that
still an ongoing issue still be looking at?  Thanks for the time.

Keith

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 11:41 AM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
Subject: [Declude.Virus] Declude Beta 3.0.4.4 Posted


2 new Directives

WAITFORTHREADS  1500
Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 seconds
this can be changed so that when the maximum threads are in use this time
specifics the wait before checking to launch more threads.  

WAITBETWEENTHREADS 1
Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond
The time to wait between spawning one thread and starting to process another
thread.

David B
www.declude.com

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, just
send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be 

RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread Andy Schmidt
Thanks Bill.  I had gotten the impression as if everyone with dual-processor
system was reporting this and that people were still seeing it with the
latest version.

I have so far not installed the beta, because of those issues - I just don't
have a single-processor system to use and was waiting for a beta that
addressed this problem.  (My feeling was, nothing is gained by briefly
installing a system if it's already known not to function on my
environment).

If you're saying that the dual-processor problem only appears for selected
systems and rather the exception than the rule, then I might give it try to
see if I get lucky.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill Billman
Sent: Thursday, September 22, 2005 08:44 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted


Hi Andy,

The directives are for tuning both single and multiprocessor systems.  They
are not meant as a tradeoff.  Some multiprocessor systems do not exhibit the
reported sleep for 30 seconds behavior.  We have not been able to reproduce
it ourselves.  This doesn't mean that we do not take it seriously nor does
it mean that we have given up.  I picked up another dual processor machine
tonight and tomorrow we will attempt to reproduce the reported behavior on
it.  It's hard to fix something that we can't reproduce but we will keep
trying.  It's not even clear to me that this problem still exists in the
latest version.  But until the issue is resolved I can assure you we will
not give up.  If you are having this or any other problems please send us
your configuration files along with system specs and log files, debug level
is best.

The beta is a success thanks to our customers and we do appreciate your
efforts.  We set out to fix the 8.2 issues.  We have accomplished that and
fixed some other stuff along the way.  The product will not ship bug free.
But I do assure you that we will prioritize and address every issue that we
know of.

Once we have this baseline release, along with fixing bugs we plan on
implement some cool new stuff that you guys have asked for. 

It's precisely because this is a wonderfully active and sharing community
that Declude is the premier email vulnerability software solution.  Let's
keep the dialog, observations, and ideas flowing and I promise that Declude
will become even better.

All the best,
Bill

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt
Sent: Thursday, September 22, 2005 7:56 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

Hi David,

I can't help but ask...

You are proposing options that will help with the dual processor issue.
But, are you REPRODUCING the issue and fixing it? I understand that the
problem is that the service goes to sleep for 30 seconds, even though there
are messages in the PROC folder. Clearly that should not happen.  Changing
the timings will only create a trade-off by consuming extra
machine-resources.

Even on a dual-processor system should the service be able to determine
reliably if a folder has content or not?  

I'm just worried that the beta is declared successful when an entire class
of machines is only working with a bandage.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206 


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 12:28 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

Yes, these are to help adjust for timing with Dual-proc

Different systems / configuration respond differently to these settings.  

In particular they to fine tune through-put with CPU utilization.

1. SLOW server that is heavily loaded 

You may want to try to increase WAITBETWEENTHREADS and lower THREADS.

2. FAST server
Use the THREADS and WAITFORTHREADS to adjust the CPU utilization.

When decludeproc first starts up it will use a lot of the CPU but after that
the %CPU used by decludeproc should come way down. 

The %CPU of all processes running may be high depending on external tests,
other processes, etc.  If the system is spiking but coming down quickly
that's good.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson
Sent: Thursday, September 22, 2005 12:27 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

David,
Are these to be used to correct issues with Dual-proc, or is that
still an ongoing issue still be looking at?  Thanks for the time.

Keith

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 11:41 AM
To: 

Re: [Declude.Virus] Declude Beta 3.0.4.4 Posted

2005-09-22 Thread Darrell \([EMAIL PROTECTED])
The directives are for tuning both single and multiprocessor systems. 
They
are not meant as a tradeoff.  Some multiprocessor systems do not exhibit 
the
reported sleep for 30 seconds behavior.  We have not been able to 
reproduce

it ourselves.


I can produce it on my machine even on version 3.0.4.4.  David was also 
provided remote access to my machine and seen this issue occur when I first 
reported it under the early beta.



It's hard to fix something that we can't reproduce but we will keep
trying.  It's not even clear to me that this problem still exists in the
latest version.


I posted earlier (and to the [EMAIL PROTECTED]) that the problem still exists 
in the latest beta.  Again, I can provide remote access to this machine if 
needed.  You can mitigate the effects of this issue by adjusting the 
waitformail, but it seems to cause more cpu related usage.


What concerns me even more than the obvious issue with multiprocessor 
machines is its excessive use of CPU.  This is also included in my beta 
notes.


Darrell



-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Andy Schmidt
Sent: Thursday, September 22, 2005 7:56 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

Hi David,

I can't help but ask...

You are proposing options that will help with the dual processor issue.
But, are you REPRODUCING the issue and fixing it? I understand that the
problem is that the service goes to sleep for 30 seconds, even though 
there

are messages in the PROC folder. Clearly that should not happen.  Changing
the timings will only create a trade-off by consuming extra
machine-resources.

Even on a dual-processor system should the service be able to determine
reliably if a folder has content or not?

I'm just worried that the beta is declared successful when an entire 
class

of machines is only working with a bandage.

Best Regards
Andy Schmidt

Phone:  +1 201 934-3414 x20 (Business)
Fax:+1 201 934-9206


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 12:28 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

Yes, these are to help adjust for timing with Dual-proc

Different systems / configuration respond differently to these settings.

In particular they to fine tune through-put with CPU utilization.

1. SLOW server that is heavily loaded

You may want to try to increase WAITBETWEENTHREADS and lower THREADS.

2. FAST server
Use the THREADS and WAITFORTHREADS to adjust the CPU utilization.

When decludeproc first starts up it will use a lot of the CPU but after 
that

the %CPU used by decludeproc should come way down.

The %CPU of all processes running may be high depending on external tests,
other processes, etc.  If the system is spiking but coming down quickly
that's good.

David B
www.declude.com

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Keith Johnson
Sent: Thursday, September 22, 2005 12:27 PM
To: Declude.Virus@declude.com
Subject: RE: [Declude.Virus] Declude Beta 3.0.4.4 Posted

David,
Are these to be used to correct issues with Dual-proc, or is that
still an ongoing issue still be looking at?  Thanks for the time.

Keith

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of David Barker
Sent: Thursday, September 22, 2005 11:41 AM
To: Declude.JunkMail@declude.com; Declude.Virus@declude.com
Subject: [Declude.Virus] Declude Beta 3.0.4.4 Posted


2 new Directives

WAITFORTHREADS  1500
Located in the Declude.cfg - Defined in milliseconds eg. 1500 = 1.5 
seconds

this can be changed so that when the maximum threads are in use this time
specifics the wait before checking to launch more threads.

WAITBETWEENTHREADS 1
Located in the Declude.cfg - Defined in milliseconds eg. 1 = 1 millisecond
The time to wait between spawning one thread and starting to process 
another

thread.

David B
www.declude.com

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
just

send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.
---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
just

send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe, 
just

send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

--
No virus found in this incoming message.
Checked by