> Is the client sending out the E-mails himself, or is he using IMail to
send
> them?

the emails sent by my client are being sent by himself without using IMAIL.
he uses his own ISP SMTP.


> Which version of Declude are you using ("\IMail\Declude -diag", exactly
> like that, from a command prompt will show you)?

    it is version 1.60


> One of the .SMD files shows that the E-mail was scanned twice (two
"Scanned
> for viruses" lines at the bottom), while the other three were once scanned
> once.

    Yes I noticed that too... I have no idea why is that, since the client
doesn't use IMAIL for SMTP.


>
> The other thing that I noted was that it was several minutes between the
> time that IMail accepted the bounce messages and Declude Virus was
> encountered this problem.  Is there a very heavy load on the server when
> this occurs?

that is rare.. there is not heavy load in the server. we receive between 10K
and 20K emails daily, unless that is heavy load, and our smtp process
between 1K and 3K daily. I have to double check figures..perhaps at that
time everybody was sending emails through the server.

>
> I tried reproducing the problem here with the .SMD files, and wasn't able
to.
>                                -Scott

thanks for your help and effort to find out what is going on. Today I looked
at declude log again and had several errors. All the SMD's I was able to
look at, came again from the same postmaster as a response to my client
email saying that the sender wasn't found or host didn't exist. Just like
the samples I sent you.

that is really strange. It seems like the message coming from the remote
postmaster has something that drives declude or F-Prot crazy. I have no idea
what to do about it.
I will keep looking

                -Luis Arango

---
[Email escaneado contra virus por Panda Consulting -www.pandacons.com-]
[Email scanned for viruses by Panda Consulting -www.pandacons.com-]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to