RE: [Declude.JunkMail] No Tests Run

John Shacklett Tue, 06 Jun 2006 08:21:01 -0700

It's updating virus signatures just fine. What's missing is that AVG doesn't ever actually DETECT viruses. I've submitted several examples of DEBUG log output showing known viruses [including but not limited to EICAR tests from the Virus test page at declude.com] being passed as clean by AVG. Every time.

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gerry Comeau
Sent: Tuesday, 06 June 2006 10:40 AM
To: [email protected]
Subject: RE: [Declude.JunkMail] No Tests Run

John,

Please see knowledge database article #59 on AVG updates. Also, port 25 needs to be open to TCP traffic for the updates to come into the scanner\avg\db file.

Gerry

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Shacklett
Sent: Tuesday, June 06, 2006 8:27 AM
To: [email protected]
Subject: RE: [Declude.JunkMail] No Tests Run

Actually, Matt, it's worse than that. I have made several observations about issues I'm having with the current release [for example: built-in AVG does NOT work for me, not ever, not even once; newest release version has a virus logging change that broke my daily activity summary report script], and I get "we've relayed your problem to engineering" as a response and that's the end of it.

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt
Sent: Monday, 05 June 2006 5:47 PM
To: [email protected]
Subject: Re: [Declude.JunkMail] No Tests Run

John,

I guess my point is more about how to use a list for support. I'm sure that Declude wouldn't want to deal with dozens of people separately when they can deal with them (and learn from them) all at once.

They reverted to responding to such things posted on the list in private in many cases for some reason that totally escapes me. Not only that, but not all support requests are answered, or answered in a timely manner. Things would work much better if they were open and responsive to this list. They might not prefer this, but I'm virtually certain that I speak for almost everyone here.

Matt

John Shacklett wrote:

Matt, I did get a reply from Gerry earlier and I resubmitted my earlier support email to him, and he indicated they would escalate things, but that's it.

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Matt
Sent: Monday, 05 June 2006 4:29 PM
To: [email protected]
Subject: Re: [Declude.JunkMail] No Tests Run

Glenn,

I understand that logs might be difficult for you to post, but I would like to suggest that everyone experiencing such issues should attempt to share log entries if at all feasible. That would go a long way, especially when there could be multiple issues occurring that people are speaking about in one thread.

So far it looks like every message was sent from a null sender that was reported to the list.

Could people also confirm if they have settings for weight-based tests configured with actions in their Global.cfg? Something like:

    WEIGHT10      SUBJECT [SPAM]
    WEIGHT20      HOLD
    WEIGHT30      DELETE

Needless to say, when a half dozen people post about issues like this, it would be nice to get some list feedback from Declude within 8 hours. There's no sense in keeping this all a secret. Since I haven't heard anything back about this stuff, I have to now go on a goose chase in my system trying to figure out if there is an issue without even knowing exactly what it is. That wastes a lot of time when multiplied by the dozens of people that might react the same way on this list to such reports.

Thanks,

Matt

Glenn \ WCNet wrote:

I've had a swarm of stock-quote spam in the last few days. Declude 1.81, Imail 7.15. Appears from the headers there are no Declude tests running at all on these msgs, but there are Declude headers added. Majority are null senders. Various IPs. Some have my addy referenced as an X-RCPT, some do not. Majority also have an SMTP-FWD header. Those that are to legitimate recipients on my host, none of them (that I've checked thus far) have a fowarding addy set. Some but not all are being sent using The Bat! client. My Declude logs run up to 800MB per day, difficult to search them for details.

Received: from SMTP32-FWD by wcnet.net
(SMTP32) id A00000E38; Mon, 5 Jun 2006 00:48:32 -0500
Received: from SMTP32-FWD by wcnet.net
(SMTP32) id A00000F48; Mon, 5 Jun 2006 00:48:32 -0500
Received: from ZIA [203.81.233.129] by wcnet.net with ESMTP
(SMTPD32-7.15) id A5A187B7034E; Mon, 05 Jun 2006 00:48:17 -0500
Date: Mon, 5 Jun 2006 05:48:33 -0300
From: "Blair Montano" [EMAIL PROTECTED]
X-Mailer: The Bat! (3.78.20) Personal
Reply-To: [EMAIL PROTECTED]
X-Priority: 3 (Normal)
Message-ID: <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: You Too Can Profit From Microcaps
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Declude-Sender: <> [203.81.233.129]
X-Declude-Spoolname: Dc5a187b7034ef2f2.SMD
Status: R
X-UIDL: 323778081

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.

RE: [Declude.JunkMail] No Tests Run

Reply via email to