Stop/Start the decludeproc will reset the hijack counter.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mario
Antonio
Sent: Tuesday, October 31, 2006 9:42 AM
To: declude.virus@declude.com
Subject: [Declude.Virus] Hijack Question
For 4.x, you have to either restart the declude process or put that IP into
the Hijack .cfg to allow mail through.
I believe 3.05 would be the same.
They are contemplating an improvement to this aspect of Hijack in a future
version, but no idea of if / when.
- Original Message -
Mike,
Thanks a lot for your prompt response.
Regards
Mario Antonio
- Original Message -
From: Mike N [EMAIL PROTECTED]
To: declude.virus@declude.com
Sent: Tuesday, October 31, 2006 10:16 AM
Subject: Re: [Declude.Virus] Hijack Question
For 4.x, you have to either restart the
David,
One more question,
I am seeing that some Q files remain in the spool\proc\work folder,
is this normal?
why?
Should I clean them manually? Where are the corresponding D files?
Regards
Mario Antonio
- Original Message -
From: David Barker [EMAIL PROTECTED]
To:
Does anyone know if you have to restart the declude process after you have
moved back files from the HOLD2 folder into the spool ---Declude
3.0.5/Imail 8.22?
In the Declude 2.X you had to close the foreground screen/console (which
restarts Hijack) in order to clean all the IP addresses that have
There should not be orphan files I would think you are running some type of
virus scanner that is removing the D*.smd files from the \work directory.
David B
www.declude.com
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mario
Antonio
Sent: Tuesday,
Anyone know where to find this? I assume most people are
switching away from F-prot because of their wonderful new licensing structure. It
seems Clam and Mcafee are the most popular but what else are users using and
liking? Also is there any real difference between Clamwin and Clam-win32?
David,
I am running f-prot 3.16f
Take a look at my configs
SCANFILE C:\f-prot_windows\fpcmd.exe /TYPE /SILENT /NOMEM /ARCHIVE=5
/PACKED /NOBOOT /DUMB /REPORT=report.txt
VIRUSCODE 3
VIRUSCODE 6
VIRUSCODE 8
REPORT Infection:
Any suggestions?
Regards
Mario Antonio
-
1. Make sure that the Real-Time scanner of F-prot is disabled
2. At a minimum you should be running Declude 3.11
David
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mario
Antonio
Sent: Tuesday, October 31, 2006 2:38 PM
To: declude.virus@declude.com
Are you running the real time scanner on the spool folder. Disable the real
time scanner if it is running.
Kevin Bilbee
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Mario Antonio
Sent: Tuesday, October 31, 2006 11:38 AM
To:
-David
Since it is out there,
I also have seen rare D* messages without Q* file stranded in the work
folder also.
For me about 2 a month. They tend to be spam (of course so does 80% of all
mail).
If it is a legit message, I'll just forge up a corresponding Q* message and
reprocess them.
DEBUG logs for this would be extremely helpful
David
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott
Fisher
Sent: Tuesday, October 31, 2006 3:23 PM
To: declude.virus@declude.com
Subject: Re: [Declude.Virus] Hijack Question
-David
Since it is out
12 matches
Mail list logo
