Darrell,
1. Are components of the message hashed and some type of hash is sent to
CommTouch for analysis?
RPD extracts 2 types of patterns from the message, Distribution Patterns
(from the header), and Structural Pattern (mathematical sample of the body
and attachments. These patterns don't contain anything to violate privacy
concerns. They don't use things like recipient information, and the
structural patterns are a random sampling of the bytes of the message (not
looking for the content or meaning of the words). These patterns make up
what is called a digital signature, that is one way hashed using md5 and
sent to CT detection centers where the hash is compared to CT DB hashes.
A
reply is sent back with the result classification. This process takes
about
150ms.
2. What ports/protocol does it communicate with CommTouch back on?
The CT Engine communicates to CT centers over port 80. A proprietary
protocol is used for this communication, it is not standard HTTP. As long
as the box can access the internet (with or without a proxy), CT can
access
our centers. There is also a built-in failover mechanism.
3. Is there a mechanism that if false positive is detected to do a what we
call when using Sniffer a rule panic?
There is a procedure that Declude or users can report FP's to CommTouch. I
am having a KB article written on how to do this.
4. Is there a trial?
Unfortunately not as every time CT is activated we pay a fee.
David B
www.declude.com
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Darrell
([EMAIL PROTECTED])
Sent: Wednesday, July 19, 2006 10:26 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] Declude 4.3 - Commtouch trial ?
David,
Are components of the message hashed and some type of hash is sent to
CommTouch for analysis?
What ports/protocol does it communicate with CommTouch back on?
How does one handle false positives? through Declude or directly to
CommTouch?
Is there a mechanism that if false positive is detected to do a what we
call
when using sniffer a rule panic?
Is there a trial?
Darrell
David Barker writes:
Darrell,
It is not a DNS test. Commtouch analyzes large volumes of Internet
traffic in real time. New spam and Malware outbreaks are identified as
soon as emerge, and recorded in the Commtouch Detection Center. The
Commtouch in Declude queries the Commtouch Detection Center and
receives a message classification in real-time. The result is instant
protection from new outbreaks.
David B
www.declude.com
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Darrell
([EMAIL PROTECTED])
Sent: Wednesday, July 19, 2006 7:32 AM
To: [email protected]
Subject: Re: [Declude.JunkMail] Declude 4.3 - Commtouch trial ?
Also, to piggy back on this - we would like to know exactly how this
works.
Is something downloaded to your system is it DNS based etc?
Darrell
----------------------------------------------------------------------
-- Check out http://www.invariantsystems.com for utilities for Declude
And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers.
----- Original Message -----
From: "Scott Fisher" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Friday, July 14, 2006 5:26 PM
Subject: Re: [Declude.JunkMail] Declude 4.3 - Commtouch trial ?
-David,
Just curious is there a free one-month test drive option for CommTouch
or something similiar?
As one of those pesky non-ISP's the $195 a year is pretty reasonable,
but I'd really like to test drive it before I buy it.
Not to be offensive, but I have no belief of the "100% no false positive"
pitch and the "99.99+% spam catch rate" pitch.
Trust me I get many a phone call hyping those terms.
And I'll have to make that jump to Declude 4.x too.
----- Original Message -----
From: "David Barker" <[EMAIL PROTECTED]>
To: <[email protected]>
Sent: Tuesday, July 18, 2006 2:42 PM
Subject: RE: [Declude.JunkMail] Declude 4.3
There are restrictions on CommTouch being used by Service Providers
we had to ensure that NEW customers (ie. Service Providers After 1
June 06) understand the licensing restrictions.
Current Service Providers (ie. Before 1 June 06) are under no
restrictions for using Declude; only the CommTouch add-in component.
However we have managed to come to an agreement with CommTouch to
enable our legacy customers (ie. Service Providers Before 1 June 06)
to take advantage of CommTouch under a revenue share program, this
program is not being forced onto legacy customers but will be an
opportunity for us to help you increase revenues in your business, by
providing you with new product like the Declude Gateway which would
be independent of Imail/SmarterMail and will include CommTouch.
David B
www.declude.com
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
John T
(Lists)
Sent: Tuesday, July 18, 2006 3:02 PM
To: [email protected]
Subject: RE: [Declude.JunkMail] Declude 4.3
I guess we all missed the following paragraph in the license agreement:
3.2.6 sub-license, rent, sell, lease, distribute, or otherwise
transfer the Licensed Program save as provided under this End-User
License Agreement unless You obtain a separate License from Declude,
Inc. for such purposes (for example, You may not embed the Licensed
Program into another application and then distribute such to third
parties unless You first acquire an OEM License from Declude, Inc.).
As of June 1, 2006, ISP's and other service providers are not
permitted to use Declude software to clean and forward mail to
customers unless a separate revenue share agreement has been
established with Declude.
http://www.declude.com/Articles.asp?ID=121
Is Declude trying to put us out of business? We pay for the software
and now have to pay them some of your meager profits?
John T
eServices For You
"Seek, and ye shall find!"
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Gary Steiner
Sent: Tuesday, July 18, 2006 11:24 AM
To: [email protected]
Subject: [Declude.JunkMail] Declude 4.3
I guess someone is going to make an official announcement today
about
Declude 4.3?
I see that its downloadable in my account, but it would be nice to
know
what I'm
getting before I install it, especially the new Commtouch stuff.
The "Restrictions" listed next to the Add Commtouch section are
especially
confusing.
https://www.declude.com/articles.asp?ID=205
Who would use Declude and not fit the definitions of the restrictions?
Based on my
reading of the Restrictions, nobody who uses Declude will ever be
able to
use
Commtouch. If I am misreading this, would someone please explain it
to
me?
Gary
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type
"unsubscribe Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
-------------------------------------------
Check out http://www.invariantsystems.com for utilities for Declude,
Imail,
mxGuard, and ORF. IMail/Declude Overflow Queue Monitoring, SURBL/URI
integration, MRTG Integration, and Log Parsers.
---
This E-mail came from the Declude.JunkMail mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe
Declude.JunkMail". The archives can be found at
http://www.mail-archive.com.
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail". The archives can be found
at http://www.mail-archive.com.
