RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

2010-03-19 Thread Andy Schmidt
Thanks - downloaded and installed.

I'll have to take a look at the integrated Sniffer. I got pulled away and
never got back to it.

I'll have to take a good luck at the rulebase update - on first glace it
seems as if your script is leaving out the crucial SNF2CHECK to make sure
that the downloaded rulebase is valid BEFORE replacing it. So I'll have to
look at it very carefully.

-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Thursday, March 18, 2010 4:05 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

Release notes for Declude Security Suite 4.10.42  [28 December 2009]

EVA FIX Fix for Virus test not catching the eicar test due to e-mail
formatting

This was done in interim 4.8.36 which is still on the Interim site if you
just want to try switching out the decludeproc.exe and testing to see if the
issue is resolved.

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
dbar...@declude.com


-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Thursday, March 18, 2010 12:22 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

Declude 4.6.35 Diagnostics
Compilation Platform: IMail
Copyright (c) 2000-2009 Declude, Inc.

Host Name
MAYWOOD-IS-0012.WEBHOST.HM-SOFTWARE.COM
Daisy Chain smtp32.exe
DNS Server  127.0.0.1

Product Details

 JunkMail   ON
 EVAON
 Hijack OFF

 AVGON
 CommTouch  ON

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Thursday, March 18, 2010 12:07 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

What version of Declude are you running ?




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



Re: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

2010-03-19 Thread Pete McNeil

On 3/19/2010 11:26 AM, Andy Schmidt wrote:

Thanks - downloaded and installed.

I'll have to take a look at the integrated Sniffer. I got pulled away and
never got back to it.

I'll have to take a good luck at the rulebase update - on first glace it
seems as if your script is leaving out the crucial SNF2CHECK to make sure
that the downloaded rulebase is valid BEFORE replacing it. So I'll have to
look at it very carefully.
   


Andy,

The script cannot call snf2check for the embedded SNF because that would 
expose the OEM rulebase.


The SNF engine performs the SNF2CHECK task before it accepts a new 
rulebase so it's ok to leave that out of the update script in OEM 
integrations of the SNF engine.


In fact, the getRulebase.cmd script need not be used at all by an OEM -- 
they can use their own facility. However in this case I recommended 
strongly that Declude use a modified getRulebase script so that Declude 
customers could modify it to perform additional tasks in the way they 
are used to.


Hope this helps,

Best,

_M



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

2010-03-18 Thread David Barker
Andy work with our support so we can disable it for you for testing.  Let us
know when you want to do it.

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Thursday, March 18, 2010 11:29 AM
To: Declude.virus@declude.com
Subject: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

 

Hi,

 

I want to test the virus scanners using EICAR. However, CommTouch gets in
the way and blocks it.

 

How do I temporarily disable CommTouch  in Declude Virus, so that the EICAR
file is handled by the interna/external scanners?

 

Best Regards,

Andy


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

2010-03-18 Thread Andy Schmidt
Hi Dave,

 

Thanks. So the answer is, there is no local override where we can disable
CommTouch ourselves. Such a directive maybe something for the to-do list.

 

To be frank - I was trying to test AVG. I've noticed in recent weeks that my
external scanners (ClamAV and my trusted McAfee) have been catching infected
emails - but AVG never catches any. The files in the AVG folder are all from
today. So when I had 2 minutes, I just wanted to quickly check if AVG had
somehow disabled itself again by passing an EICAR file through - but I
don't have time to make a big project out of it.

 

Best Regards,

Andy

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Thursday, March 18, 2010 11:43 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

 

Andy work with our support so we can disable it for you for testing.  Let us
know when you want to do it.

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Thursday, March 18, 2010 11:29 AM
To: Declude.virus@declude.com
Subject: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

 

Hi,

 

I want to test the virus scanners using EICAR. However, CommTouch gets in
the way and blocks it.

 

How do I temporarily disable CommTouch  in Declude Virus, so that the EICAR
file is handled by the interna/external scanners?

 

Best Regards,

Andy


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

2010-03-18 Thread David Barker
What version of Declude are you running ?

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Thursday, March 18, 2010 12:02 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

 

Hi Dave,

 

Thanks. So the answer is, there is no local override where we can disable
CommTouch ourselves. Such a directive maybe something for the to-do list.

 

To be frank - I was trying to test AVG. I've noticed in recent weeks that my
external scanners (ClamAV and my trusted McAfee) have been catching infected
emails - but AVG never catches any. The files in the AVG folder are all from
today. So when I had 2 minutes, I just wanted to quickly check if AVG had
somehow disabled itself again by passing an EICAR file through - but I
don't have time to make a big project out of it.

 

Best Regards,

Andy

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Thursday, March 18, 2010 11:43 AM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

 

Andy work with our support so we can disable it for you for testing.  Let us
know when you want to do it.

 

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Thursday, March 18, 2010 11:29 AM
To: Declude.virus@declude.com
Subject: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

 

Hi,

 

I want to test the virus scanners using EICAR. However, CommTouch gets in
the way and blocks it.

 

How do I temporarily disable CommTouch  in Declude Virus, so that the EICAR
file is handled by the interna/external scanners?

 

Best Regards,

Andy


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com. 


---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus. The archives can be found
at http://www.mail-archive.com. 



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

2010-03-18 Thread Andy Schmidt
Declude 4.6.35 Diagnostics
Compilation Platform: IMail
Copyright (c) 2000-2009 Declude, Inc.

Host Name
MAYWOOD-IS-0012.WEBHOST.HM-SOFTWARE.COM
Daisy Chain smtp32.exe
DNS Server  127.0.0.1

Product Details

 JunkMail   ON
 EVAON
 Hijack OFF

 AVGON
 CommTouch  ON

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Thursday, March 18, 2010 12:07 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

What version of Declude are you running ?




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

2010-03-18 Thread David Barker
Release notes for Declude Security Suite 4.10.42  [28 December 2009]

EVA FIX Fix for Virus test not catching the eicar test due to e-mail
formatting

This was done in interim 4.8.36 which is still on the Interim site if you
just want to try switching out the decludeproc.exe and testing to see if the
issue is resolved.

David Barker
VP Operations Declude
Your Email security is our business
978.499.2933 office
978.988.1311 fax
dbar...@declude.com


-Original Message-
From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of Andy
Schmidt
Sent: Thursday, March 18, 2010 12:22 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

Declude 4.6.35 Diagnostics
Compilation Platform: IMail
Copyright (c) 2000-2009 Declude, Inc.

Host Name
MAYWOOD-IS-0012.WEBHOST.HM-SOFTWARE.COM
Daisy Chain smtp32.exe
DNS Server  127.0.0.1

Product Details

 JunkMail   ON
 EVAON
 Hijack OFF

 AVGON
 CommTouch  ON

From: supp...@declude.com [mailto:supp...@declude.com] On Behalf Of David
Barker
Sent: Thursday, March 18, 2010 12:07 PM
To: declude.virus@declude.com
Subject: RE: [Declude.Virus] How to disable CommTouch Zerohour (for testing)

What version of Declude are you running ?




---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to imail...@declude.com, and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.