[Declude.Virus] another option needed

2002-05-02 Thread Serge
onlysendifvirusnamehas also not as important as the skip option, it can be used for debugging/tracing. so if it does not take much work, please put it on the wish list. thanks --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus

Re: NJABL:Re: [Declude.Virus] Klez.h

2002-05-02 Thread Serge
hi, is there a variable for the following IP adress (sender) Received: from mailhost1.attcanada.net [206.191.82.42] - Original Message - From: Mike Watchman [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 02, 2002 4:20 PM Subject: NJABL:Re: [Declude.Virus] Klez.h So

Re: [Declude.Virus] Not scanning files

2002-05-03 Thread Serge
I have both fpcmd.exe and f-prot.exe in the fprot directory which one should be used ? I've always used F-prot.exe V312 and it works fine. what is fpcmd.exe ? - Original Message - From: Sheldon Koehler [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, May 03, 2002 11:19 PM Subject:

Re: [Declude.Virus] Alternate Solutions

2002-05-03 Thread Serge
try http://www.mwti.net/ We use them for mdeamon, and they have an exchange AV product - Original Message - From: Jerod M. Bennett [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, May 03, 2002 11:19 PM Subject: [Declude.Virus] Alternate Solutions Hello everyone, I have a

Re: [Declude.Virus] DSN:New Version of Virus Log File Analyzer

2002-05-03 Thread Serge
Is there a way to get the inbound/outbound stat per virus, instead of total for the report ? Also, inbound mean local delivery, and outbound is delivery to a remote mail server. Correct ? anyway we can get stats of viruses sent by local senders ? (Outbound + local2local) - Original Message

[Declude.Virus] OT: Can you connect to his server ?

2002-05-06 Thread Serge
minrex.gov.cu one of my clients is having problems snding mail to the above a tracert stop at 5 1047 55 207.45.219.18 I am not sure if it is a local routing Pb or something else can someone try to telnet to - minrex.gov.cu. type = MX, class = 1, ttl = 479, dlen = 4 preference 10,

Re: [Declude.Virus] OT: Can you connect to his server ?

2002-05-06 Thread Serge
[EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, May 06, 2002 5:59 PM Subject: FW: [Declude.Virus] OT: Can you connect to his server ? got right in -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Serge Sent: Monday, May 06, 2002 1:48 PM

Re: [Declude.Virus] SKIPIFVIRUSNAMEHAS

2002-05-09 Thread Serge
Here is our virus analisis for the last 2 days our main problem is sircam from our customers this has been the case for months , we tried everything we can think of to make them clean their computers, it always come back, probably from hotmail, ..., accounts. anyone have any hints ? also, for

Re: [Declude.Virus] SMTP AUTH - Imail v6.06

2002-05-16 Thread Serge
If you require SMTP AUTH, then users have to supply a valid E-mail address and password Do Imail compare this adress to the from adress you use ? - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, May 16, 2002 3:36 PM Subject: Re:

Re: [Declude.Virus] Default eml files - Klez

2002-05-16 Thread Serge
sets the %MAILFROM% var to a specific value (ie. unknown) for certain viruses? (As not to incriminate the forged sender to the recipient). Very interesting, as this is causing much confusion in our user base. we have user who take it on themselve to notify the forged sender. also, the

[Declude.Virus] forging virus

2002-06-22 Thread Serge
the from adress still shows in the header is is the forged adress? is there a way to eliminate this? I have customers fighting each other because of declude notifications! --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the

Re: [Declude.Virus] OT: unknown host

2002-07-01 Thread Serge
Does the message unknown host mean anything else than that the DNS did not locate the remote server adress ? I am getting the error below for many remote recipients at adresses of type @x.dti.bollore.com when i try to query DNS used by imail, i do get a valid mx hostaname and adress (see below)

Re: [Declude.Virus] Forged request

2002-10-15 Thread Serge
I've got subscribers sending all sorts of messages to the from address listed in the error message headers, when those people most likely didn't even send the message with a virus. Same here also the sender domain name should be blanked - Original Message - From: Helpdesk [EMAIL

Re: [Declude.Virus] Forged request

2002-10-15 Thread Serge
I had suggested a solution some time ago ONLYSENDIFVIRUS Klez,Magister DONTSENDIFVIRUS Klez, magistr, ... Where we can have different .eml for forgin virus that do not include headers, domain names, and keep complete eml notifications for other iruses - Original Message - From:

Re: [Declude.Virus] Lentin virus passing declude and f-prot but caught by local f-prot but caught by local f-prot

2003-01-11 Thread Serge
i had the same problem with lentin while running declude 1.61 upgrading to 1.65 fixed the problem - Original Message - From: Lenny Bauman To: [EMAIL PROTECTED] Sent: Saturday, January 11, 2003 3:57 PM Subject: Re: [Declude.Virus] Lentin virus passing declude

[Declude.Virus] OT @ipadress

2003-02-23 Thread Serge
I remember reading somewhere that we can send an email to a [EMAIL PROTECTED] is this correct ? what is the exact format ? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an

Re: [Declude.Virus] Virus Scan Marking All Messeges

2003-06-05 Thread Serge
try to install the window version in d:\fprot, instaed of just copying fpcmd as it probably needs other files /registry keys also, go to command prompt and try to execute fpcmd, and see if there are error messages - Original Message - From: Chad Killion To: [EMAIL PROTECTED]

Re: [Declude.Virus] F-Prot Scheduler

2003-06-14 Thread Serge
Try to schedule kill.exe 1 hour after each updater run - Original Message - From: David Dodell [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, June 14, 2003 1:10 PM Subject: [Declude.Virus] F-Prot Scheduler I like to keep things easy ... I use F-Prot scheduler to check for new

Re: [Declude.Virus] F-Prot Scheduler

2003-06-15 Thread Serge
Serge, what is this kill.exe ... I don't have it on my hard drive. it is from windows resources kit it can kill an active process in your case, you will need to find the name of the fprot updater process (i think it is updater.exe) and you schedule kill.exe updater.exe say 30 minutes after each

Re: [Declude.Virus] ban ext not working

2003-06-23 Thread Serge
i did upgrade to 1.70 from 1.65 few days before - Original Message - From: Serge [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, June 23, 2003 5:07 PM Subject: Re: [Declude.Virus] ban ext not working no changes lately sent mbx file and cfg files to [EMAIL PROTECTED

Re: [Declude.Virus] ban ext not working

2003-06-23 Thread Serge
sorry i sent the file to the list appologize - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, June 23, 2003 5:29 PM Subject: Re: [Declude.Virus] ban ext not working no changes lately sent mbx file and cfg files to [EMAIL PROTECTED]

Re: [Declude.Virus] Finding SPAM Messages

2003-06-23 Thread Serge
ok, scott every time i try to send mbx (zipped, renamed, ), it is now getting caught how can i send it ? and how did it get into my mailbox in the first place ? - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, June 23, 2003 5:54 PM

Re: [Declude.Virus] Finding SPAM Messages

2003-06-23 Thread Serge
I deactivated declude for my adress and sent you the mbx, have you receive it ? also, do you need the declude log, or imail log ? - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, June 23, 2003 6:47 PM Subject: Re: [Declude.Virus] Finding

Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
seems that the messages are not beiing scanned by declude nothing added to the header is this possible? or the only possibility is that they are being sent by imail1 /web messaging ? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from

Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
OT How can we verify (using the logs) that the message was sent using Imail1 and/or webmessaging also, isthe instructions about daisychain available on website? or only in archive ? thanks - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday,

Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
Below is the header it does say: Received: from Diaby [216.226.209.71] by cefib.com (SMTPD32-7.15) id AC0967A0288; Fri, 27 Jun 2003 18:25:13 + Doesn't this mean this is NOT an imail/webmessaging mail ? so why was it not scanned by declude ? no declude virus or junkmail headers were added

Re: [Declude.Virus] ban ext not working

2003-06-27 Thread Serge
191125 127.0.0.1 SMTP (5536) ldeliver cefib.com serge-main (1) [EMAIL PROTECTED] 12250 20030627 191702 127.0.0.1 SMTP (5536) ldeliver cefib.com bdiarra-main (1) [EMAIL PROTECTED] 12250 20030627 191702 208.154.200.5 190215470: Jun 27 19:17:01: %SEC-6-IPACCESSLOGP: list borderoutgoing

Re: [Declude.Virus] ban ext not working

2003-06-28 Thread Serge
if a file has a banned extension and a virus will it trigger the banned extension email or the recep, ... virus email? is a banned extension first scanned for viruses ? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the

Re: [Declude.Virus] ban ext not working

2003-06-28 Thread Serge
/2003 18:26:58 Q8c09067a02886365 Subject: See todays hottest stars in their most intimate moments - Original Message - From: Serge [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, June 28, 2003 3:23 AM Subject: Re: [Declude.Virus] ban ext not working attached are the 2 part

[Declude.Virus] FORGING VIRUS

2003-07-05 Thread Serge
sorry if this is a trivial question, but is there a skipifforgingvirus option ? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type

Re: [Declude.Virus] FORGING VIRUS

2003-07-06 Thread Serge
freedom. Regards, Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Saturday, July 05, 2003 6:21 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] FORGING VIRUS sorry if this is a trivial question

[Declude.Virus] OT? spool\overflow

2003-08-10 Thread Serge
what is the spool \ overflow directory, (filled with Qsmd) and what should i do about it ? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL

Re: [Declude.Virus] Sobig- The Morning After

2003-08-23 Thread Serge
here is sobig outbound traffic we stopped at our gateway 80 deny ip any host 67.73.21.6 log (3 matches) 90 deny ip any host 68.38.159.161 log (3 matches) 100 deny ip any host 67.9.241.67 log (3 matches) 110 deny ip any host 66.131.207.81 log (3 matches) 120 deny ip any host

[Declude.Virus] SoBig

2003-08-30 Thread serge
This is getting rediculous i have more than 36% infected ratio all sobig.f is there anything i can do about that? is there a utility that will go thru the log and count the numbers of viruses per remote (or local) ip adress? so i can block the most guilty adresses on my gateway ? Scan Summary

Re: [Declude.Virus] SoBig

2003-08-30 Thread serge
thanks scott i was able to select a dozen of adresses and this is making a big difference !SoBig senders deny tcp host 200.93.136.5 any eq smtp deny tcp host 81.192.2.130 any eq smtp deny tcp host 80.11.225.195 any eq smtp deny tcp host 80.11.225.123 any eq smtp deny tcp host 80.14.187.188 any

[Declude.Virus] Another request

2003-09-01 Thread serge
few days ago someone asked if all info for a message can be put on a single line in logs. i think it may be a good idea. at least if we can have the remoteip on the same line as virusname. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came

[Declude.Virus] Notification question

2003-09-02 Thread serge
scott if a notification need to go to %allrecep% and allrecep has many adresses both local and remote, what happens if we use onlysendiflocalrecep? 1-notification is sent only to local recep. 2-notification is sent to all recep or 3- no notification is sent --- [This E-mail was scanned for

Re: [Declude.Virus] Log analyzer question

2003-09-04 Thread serge
i've tried a few none give that possibilty so i'm using the tip scott gave me the folks of dlanalyzer are working on a virus log analyzer i have asked for that feature a simmilar report by sender adress (for non forging viruses) is also needed (for dial up users without fixed ip adresses) hope

[Declude.Virus] Request

2003-12-26 Thread serge
Scott can you add a variable %revdnsremoteip% to use in notifications of forging viruses ? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL

[Declude.Virus] Forging vs autoforge

2004-01-27 Thread Serge
Hi i'm still using forgingvirus and want to enable autoforge what will happen if a virus is marked by both ? can we change the autoforge action so it just tag the virus as forgingvirus ? TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail

[Declude.Virus] Another error

2004-02-25 Thread serge
Hi scott I have a lot of these any hints ? 02/24/2004 16:39:12 Q7b5e15400292c67d Error opening mime file E:\IMAILSRVR\spool\D7b5e15400292c67d.SMD02/24/2004 16:39:12 Q7b5e15400292c67d Scanned: Error starting scanner ===

Re: [Declude.Virus] Another error

2004-02-26 Thread Serge
PROTECTED] On Behalf Of Serge Sent: Thursday, February 26, 2004 10:16 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Another error Scott I have Mcafee on access scanner, but i specificaly exclude the imail the spool directory and all their subdirectories Regarding the backup, the error

Re: [Declude.Virus] Another error

2004-02-26 Thread Serge
Scott I have Mcafee on access scanner, but i specificaly exclude the imail the spool directory and all their subdirectories Regarding the backup, the error in occuring all day long, while we only run the backup once a day, so it cannot be that - Original Message - From: R. Scott Perry

Re: [Declude.Virus] Another error

2004-02-26 Thread Serge
PROTECTED] Sent: Thursday, February 26, 2004 8:04 PM Subject: RE: [Declude.Virus] Another error One question .. Do you only have one scanner? Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Serge Sent: Thursday, February 26, 2004 2:44 PM

Re: [Declude.Virus] Another error

2004-02-26 Thread Serge
thanks bill found it - Original Message - From: Bill Landry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, February 26, 2004 8:38 PM Subject: Re: [Declude.Virus] Another error - Original Message - From: Serge [EMAIL PROTECTED] just looked at the directory

Re: [Declude.Virus] F-prot 3.14c Error 5

2004-02-29 Thread Serge
Got this from frisk today any Dear Serge, According to our development team, no changes were done to the error codes in our command line scanners. Error code '5' generally means Scan aborted by Ctrl+C or Esc. - Original Message - From: David Dodell [EMAIL PROTECTED] To: [EMAIL

Re: [Declude.Virus] SKIPIFFORGING Question

2004-03-04 Thread Serge
in virus.cfg FORGINGVIRUS Eicar Just retested, it works as expected - Original Message - From: John Olden [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 04, 2004 4:22 PM Subject: Re: [Declude.Virus] SKIPIFFORGING Question Serge, old way in order to be able to use

Re: [Declude.Virus] marking subject line

2004-03-04 Thread Serge
(mainly that someone using just Declude Virus won't be running the Declude JunkMail code, and vice versa). OK, but if JM users ask for ContainEZIPatt test, why would you refuse the request :) - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent:

Re: [Declude.Virus] Bagle.J / news.com article on AV software opening zipped files.

2004-03-04 Thread serge
Scott the minimum that would be practicaly usable for us : 1- Notifications based on banned extension: ONLYSENDIFEXT, SKIPIFEXT AND 2-BANEZIPEXT2 independant from banext, as in BANEZIPEXT2 exe BANEZIPEXT2 com BANEXT scr BANEZIPEXT ON AND 3- ONLYSENDIFFORGING Also, request for 2 cross-product

[Declude.Virus] McAfee batch updates

2004-03-09 Thread Serge
I am working on the mcafee batch updates linked to on declude.com I am trying to customize the file for a special case, and to rewrite one to download the latest McAfee engine instead of SDAT for that, i need some help understanding the lines below any hints welcomed mainly, how do we get the

Re: [Declude.Virus] F-Prot version

2004-03-10 Thread Serge
I have set declude to call fprot version 3.14b and c, just in case i just moved to a new server and have plenty of unused power - Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, March 10, 2004 6:40 PM Subject: Re: [Declude.Virus] F-Prot version I

Re: [Declude.Virus] Virus wars heat up: Bagle.Q can't be detected as a virus by mailserver virus scanners

2004-03-18 Thread Serge
We have this in vulnerability notifications: SKIPIFVIRUSNAMEDOESNOTHAVE Vulnerability Will this work ? - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 18, 2004 2:17 PM Subject: RE: [Declude.Virus] Virus wars heat up: Bagle.Q can't

Re: [SpamIndex=10]Re: [Declude.Virus] Virus wars heat up: Bagle.Q can't be detected as a virus by mailserver virus scanners

2004-03-18 Thread Serge
I mean will these notifications still get sent for these new beasts - Original Message - From: Serge [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 18, 2004 5:00 PM Subject: [SpamIndex=10]Re: [Declude.Virus] Virus wars heat up: Bagle.Q can't be detected as a virus

Re: [SpamIndex=10]Re: [Declude.Virus] Virus wars heat up: Bagle.Q can't be detected as a virus by mailserver virus scanners

2004-03-18 Thread Serge
what is the vulnaribilité type these new virus/vuln will show in the virusname variable? - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 18, 2004 5:19 PM Subject: Re: [SpamIndex=10]Re: [Declude.Virus] Virus wars heat up: Bagle.Q

[Declude.Virus] Is this dangerous ?

2004-03-23 Thread serge
This is the type that ask you do click and download Dangerous ? How can it be blocked ? Received: from juengel.com [200.189.84.134] by mail.cefib.com (SMTPD32-8.05) id AA401500290; Tue, 23 Mar 2004 05:25:20 + Message-ID: [EMAIL PROTECTED] From: Security Fix [EMAIL PROTECTED] To: [EMAIL

Re: [Declude.Virus] New Virus Alert mailing list for urgent virus information

2004-03-26 Thread serge
we need a similar emergency list for spam tests going down, requiring changes in global.cfg - Original Message - From: Dale McDiarmid [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, March 26, 2004 10:37 PM Subject: Re: [Declude.Virus] New Virus Alert mailing list for urgent virus

Re: [Declude.Virus] New Virus Alert mailing list for urgent virus information

2004-03-26 Thread serge
For those of us who are not full time postmasters, we may spend days, sometime more than a couple of weeks without reading these lists. and when we come back, we usualy do not have the time to catch up so an emergency junkmail list would be welcomed, not necessarly to route to sms/pager, but at

Re: [Declude.Virus] Problem reinstalling 1.75 on a new server

2004-05-18 Thread Serge
You seem to have 2 different issues, one with declude, another with fprot 1- put the complete pass for virdir (in your case d:\imail\spool\virus ) 2- make sure d:\imail\spool\virus directory exists 3- what is the error message you are getting when you run fprot from command line ? 4- what is in

[Declude.Virus] Server Hijacked

2004-05-23 Thread serge
hi We got our server hijacked today. We use relay for adresses and one of our clients servers, who is using MDaemon was used as a relay to realy through our server. I blocked all coming smtp connection to adresses other than our mail server's. (outgoing smtp was blocked for a long time, but that

[Declude.Virus] Stranger...

2004-06-07 Thread Serge
Title: Strange... hi all urgent help needed I have imail1 client window ("create mail message") pop up on my server with all kind of real and strange addresses in the TO: and CC: Fields. The windows remains open on the server desktop. Is this a virus ? how can i identify the

Re: [Declude.Virus] Stranger...

2004-06-07 Thread Serge
LDAPservice is not running. Any other idea? - Original Message - From: Matt To: [EMAIL PROTECTED] Sent: Monday, June 07, 2004 8:07 PM Subject: Re: [Declude.Virus] Stranger... Never seen anything like it, but having an IMail window come up as a result of a

Re: [Declude.Virus] Stranger...

2004-06-07 Thread Serge
LDAPservice is not running. Any other idea? - Original Message - From: Matt To: [EMAIL PROTECTED] Sent: Monday, June 07, 2004 8:07 PM Subject: Re: [Declude.Virus] Stranger... Never seen anything like it, but having an IMail window come up as a result of a

Re: [Declude.Virus] Stranger...

2004-06-07 Thread Serge
LDAPservice is not running. Any other idea? - Original Message - From: Matt To: [EMAIL PROTECTED] Sent: Monday, June 07, 2004 8:07 PM Subject: Re: [Declude.Virus] Stranger... Never seen anything like it, but having an IMail window come up as a result of a

Re: [Declude.Virus] Stranger...

2004-06-07 Thread serge
PM Subject: Re: [Declude.Virus] Stranger... Does this shed any light? http://support.ipswitch.com/kb/IM-19980119-DD10.htm Darin. - Original Message - From: Serge To: [EMAIL PROTECTED] Sent: Monday, June 07, 2004 3:55 PM Subject: [Declude.Virus] Stranger

Re: [Declude.Virus] Stranger...

2004-06-07 Thread Serge
Message - From: serge To: [EMAIL PROTECTED] Sent: Monday, June 07, 2004 7:46 PM Subject: Re: [Declude.Virus] Stranger... i know imail1 is a command line mailer but how do i find what i causing the imail 1 window to be open and filed with all these adresses ? see attached

Re: [Declude.Virus] F-Prot Version 3.15 w/Declude

2004-07-05 Thread serge
C:\Program Files\FSI\F-Prot\FP-Updater\Updater.exe /run /quit Problem wih above is that when there is a new fprot version, the virus def update will fail I use the batch upgrade as a backup for these situations. - Original Message - From: Douglas Cohn [EMAIL PROTECTED] To: [EMAIL

Re: [Declude.Virus] Link for checking virus sending IP addresses

2004-07-06 Thread Serge
can not find the oiginal link but this will work if you replace the xs by the IP adress this is for class C (%F24) http://apps.declude.com/tools/virstats.ch?ip=xxx.xxx.xxx.0%2F24time=72type=IP - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED]

Re: [Declude.Virus] SKIPIFRECIP SKIPIFVIRUSNAMEHAS

2004-07-17 Thread serge
that should be possible in the regular viruses/forging viruses emls, you add SKIPIFVIRUSNAMEHAS Vulnerability In the vulnerability eml you add SKIPIFVIRUSNAMEDOESNOTHAVE Vulnerability SKIPIFRECIP [EMAIL PROTECTED] You can alsodo that by usng imail rules on the recepient mailbox in both

Re: [Declude.Virus] SKIPIFRECIP SKIPIFVIRUSNAMEHAS

2004-07-19 Thread Serge
see reply offlist - Original Message - From: Dan Geiser To: [EMAIL PROTECTED] Sent: Monday, July 19, 2004 8:01 PM Subject: Re: [Declude.Virus] SKIPIFRECIP SKIPIFVIRUSNAMEHAS Serge, When you use the names "regular viruses/forging viruses emls&

Re: Re[2]: [Declude.Virus] Feature request

2004-07-27 Thread serge
the issue will be resolved when the granularity is added to banzipext which scott said they should introduce in a future release. we will have something like banzipext SCR banzipext ZIP No ? - Original Message - From: Pete McNeil [EMAIL PROTECTED] To: Dan Geiser [EMAIL PROTECTED]

Re: [Declude.Virus] passworded zip file

2004-10-25 Thread Serge
create a special mailbox for your client let him use it only for that file useper-user config in declude virus proto whitelist (turn declude virus off) on that particular mailbox use imail rules to delete all mails to that mailbox that does not have the sender address and ip in the header

Re: [Declude.Virus] Scott, what is our future?

2004-10-25 Thread Serge
ditto looking seriously to moving to exim (unix, www.exim.org, free), or more likely, Mdaemon (windows platform, supports sniffer) knowing if declude is planning to interface with another product will probably help me make the decision - Original Message - From: Matt [EMAIL PROTECTED]

Re: [Declude.Virus] Scott, what is our future?

2004-10-26 Thread Serge
Or: Option 4: stay with Imail 8.05 or 8.13 , with declude antivirus and antispam. For now, it is working fine for us we will evaluate mdaemon and other product, but we will not switch now There are people still using Imail 6.0x I'm sure we can use the current code for at least a couple of years

Re: [Declude.Virus] about Imail1.exe security issue

2004-11-24 Thread Serge
we had the same issue few month ago i suspected problem from declude because the addresses that appear in the open imail1 window looked like ones that would be generated by declude notifications (or maybe imail gses ?) anyway, rebooting the server resolved the issue back then Unfortunatly, since

Re: [Declude.Virus] testvirus.org #22

2004-12-20 Thread Serge
have both fprot and mcafee Prescan off #22 getting caught without a problem #17 going thru Andrew is catching #17, can it have anything to do with AVAFTERJM ON ? - Original Message - From: David Sullivan [EMAIL PROTECTED] To: Declude.Virus@declude.com Sent: Monday, December 20, 2004 9:47

[Declude.Virus] PB installing 2.0B

2004-12-20 Thread Serge
I am trying to upgrade to 2.0B Getting an error of: Error copying file to taret directory With status at removing backup files Need Help, TIA --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To

Re: [Declude.Virus] PB installing 2.0B

2004-12-21 Thread Serge
[EMAIL PROTECTED] To: Declude.Virus@declude.com Sent: Tuesday, December 21, 2004 11:04 AM Subject: RE: [Declude.Virus] PB installing 2.0B Hi Serge: We had a similar issue but I think I know what happens. If Declude is in use then it can not copy the Declude.exe file in the install directory. We

Re: Re[2]: [Declude.Virus] PB installing 2.0B

2004-12-21 Thread Serge
Here is the reply I got Talk about automatic installation :) == Please reply above this line == PB installing 2.0B Sorry the install does not support extracting that one file. Please send me a listing of the imail folder. Then rename declude.exe to declude.old and retry the install.

[Declude.Virus] DO NOT UPGRADE

2004-12-21 Thread Serge
:02 AM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] PB installing 2.0B - Original Message - From: Serge [EMAIL PROTECTED] you are probably right we use to have the same issue with manual install However, the full install notes specificaly say that no service need

[Declude.Virus] Microsoft Antivirus in your future ?

2005-01-06 Thread Serge
Title: Infected NDRs ? http://www.cnn.com/2005/TECH/01/06/microsoft.antivrus.ap/index.html

Re: [Declude.Virus] Microsoft Antivirus in your future ?

2005-01-06 Thread Serge
Title: Message the curent product is retroactive, according to the article, and may become subscribtion based Rav product will compete directly with symantec and mcafee if they SELL it as a separate product, they will have no antitrust problems they learned their lesson, they won't bundle it

[Declude.Virus] Log analyzer

2007-11-07 Thread Serge
Hi how to make VLA work wih declude built in scanner ? apparantly it only handles viruses caught by second scanner TIA --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus.The archives

Re: [Declude.Virus] Declude Virus inoperable for 13% of th year?

2009-06-03 Thread Serge
, including price, quality, so even if you want to blame low prices and lack of staff,, it is still declude management fault, not the customers that is not to say that i'm not satisfied with declude product and support just dont agree with your logic BR Serge - Original Message

[Declude.Virus] External filter program

2001-10-03 Thread Serge Dergham
Hi, When using declude, can we still use an externel filter program as in http://support.ipswitch.com/kb/IM-2517-DM01.htm ??? thanks This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You

[Declude.Virus] a virus went thru !

2001-09-27 Thread Serge Dergham
hi, Declude + Fprot is a wonderful couple, catching hundred of viruses daily . But I just received an email infected with the W32.Magistr.39921@mm virus (caught localy by norton). I checked some declude logs, never found this virus Can it be a Fprot problem ? or can declude under heavy trafic

Re: [Declude.Virus] Magstr.39921

2001-10-08 Thread Serge Dergham
they aren't infected, or Fprot also let them through here. Anyone else? Dan -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham Sent: Monday, October 08, 2001 9:22 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] Magstr.39921

Re: [Declude.Virus] Magstr.39921

2001-10-08 Thread Serge Dergham
Message - From: Ken Lizotte [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, October 08, 2001 3:41 PM Subject: Re: [Declude.Virus] Magstr.39921 NOT A VERY NICE THING TO DO. SEND A VIRUS TO THE WHOLE LIST! PLEASE GET A NEW LIFE, THANK YOU. Ken - Original Message - From: Serge

Re: [Declude.Virus] v1.27 (beta) released

2001-10-11 Thread Serge Dergham
Scott would it be possible to get a SENDONLYIFLOCALRECIPIENT feature soon please? Yes, Yes, Yes :)) - Original Message - From: Craig Gittens [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 8:40 PM Subject: RE: [Declude.Virus] v1.27 (beta) released Scott

Re: [Declude.Virus] McAfee NetShield Upgrade

2001-10-11 Thread Serge Dergham
, but there are plenty of things that require the newer engines. 2: I don't like ME much. Haven't used it recently enough to help you. I've moved almost all clients with a corporate desktop solution to Trend Officescan. 3: See #2 Jerry - Original Message - From: Serge Dergham [EMAIL PROTECTED

Re: [Declude.Virus] McAfee NetShield Upgrade

2001-10-11 Thread Serge Dergham
- From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, October 11, 2001 10:04 PM Subject: Re: [Declude.Virus] McAfee NetShield Upgrade 4100 is over a year old. Get the latest 4165 from the mcafee site. Jerry - Original Message - From: Serge Dergham [EMAIL PROTECTED

[Declude.Virus] MISSING_REVERSE_DNS:Neshield

2001-10-12 Thread Serge Dergham
Hi, I exluded all imail directories (spool, domaines, users, ...) and the subdirectories from netshield scanning, but it is still trying to scan the spool (see below). Anyone run into this problem before ? please help ! 12/10/01 06:32 Cleaned AUTORITE NT\SYSTEM

Re: [Declude.Virus] Multiple Scanner Support - Pricing

2001-12-18 Thread Serge Dergham
- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Serge Dergham Sent: Tuesday, December 18, 2001 01:28 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Declude v1.30 released (beta) o PRO version adds internal support for multiple virus scanners. Com'on, the main

Re: [Declude.Virus] TempDir

2001-12-18 Thread Serge Dergham
Subject: Re: [Declude.Virus] TempDir - Original Message - From: Serge Dergham [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, December 18, 2001 3:10 PM Subject: Re: [Declude.Virus] TempDir and how to make sure not to run out of free space on the ram disk ? - Original

Re: [Declude.Virus] Fw: New version of F-PROT (3.11b)

2001-12-21 Thread Serge Dergham
Hi Jerry How do we find out what fprot engine is running (for dos)? is there a command line switch to show the version ? thanks - Original Message - From: Jerry Murdock [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, December 21, 2001 7:14 PM Subject: [Declude.Virus] Fw: New

Re: [Declude.Virus] Fw: New version of F-PROT (3.11b)

2001-12-21 Thread Serge Dergham
I dowloaded and installed 3.11b fprot dos declude are ok, but i cant run fprot windows anymore get the message can't run more than one instance of the program I am not running any instance. Anyone tried 3.11b and made it work ? - Original Message - From: Serge Dergham [EMAIL PROTECTED

Re: [Declude.Virus] f-prot 3.11b

2001-12-24 Thread Serge Dergham
I also tried everything, nothing seems to work I wrote tech support last friday, still waiting for an answer Fortunatly, I have netshield protecting the server (exept the spool directory), I only use Fprot for declude. But I don't like the idea of having a problem with any software installed on

[Declude.Virus] Fprot

2002-01-07 Thread Serge Dergham
Did anyone find an updated bug free 3.11b ? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail

Re: [Declude.Virus] Magistr.32678

2002-01-11 Thread Serge Dergham
1-If I set netshield to scan \spool, it will not interfere with declude ? the recieved files/emails are directly created in subdirectories, and declude will scan and send notification before netshield delete the files? 2- We can set netshield to scan \spool but not its subdirectories ? how ? 3-

[Declude.Virus] FPROT

2002-01-17 Thread Serge Dergham
What is the difference between the multi-user and the single user Fprot for windows ? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type

Re: [Declude.Virus] FPROT

2002-01-18 Thread Serge Dergham
I also knew of one windows version but when I tried to download 3.11b yesterday, I was presented with two choices: fp-win_311b_m.exe - This is the multi-user version of F-Prot Antivirus for Windows (size: 6331904 bytes, dated: Fri Jan 18 10:44:23 2002) fp-win_311b_s.exe - This is the single

  1   2   >