Are you running the same versions of Imail and declude on each server, I
seem to remember something a while back about needing a later version of
Imail or Declude to catch webmail based virus attachments.
Jim Matuska Jr.
Computer Tech II
CCNA
Nez Perce Tribe
Information Systems
[EMAIL PROTECTED]
----- Original Message -----
From: "ISPhuset Nordic AS" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, August 12, 2003 12:41 PM
Subject: [Declude.Virus] problems when testing a new server
> Have sett up the server in the exact same with one exception
>
> on the old server i use f-prot312c
>
> on the new server i user f-prot314a_m
>
> when i run a test with eicar.com on the server localy in webmail
> it slips through when i have i only the on demand scanner installed
>
> copy of config
>
> #
> # Declude Virus configuration file
> #
>
> CODE 6F4B90A4
>
> # The "####" in the LOGFILE option gets replaced with the month/date
>
> LOGFILE E:\virus\vir####.log
> LOGLEVEL MID
> CONSOLE OFF
>
>
> # SCANFILE is the location of the command-line virus scanner. Note that it
> # must include the full path. VIRUSCODE is the code that scanner returns
if
> # it finds a virus.
>
> SCANFILE C:\f-prot\fpcmd.exe /TYPE /SILENT /NOMEM /NOFLOPPY
/ARCHIVE /NOBOOT /DUMB /REPORT=report.txt
>
> VIRUSCODE 3
> VIRUSCODE 6
> #VIRUSCODE 8
> REPORT Infection
>
> PRESCAN ON
>
>
> # VIRDIR is the directory to move E-mails with viruses; by default,
> # it is set to 'virus' (\IMail\spool\virus).
>
> VIRDIR E:\virus
>
> # The MAXATONCE option limits the number of AV processes. For example,
> # MAXATONCE 1 will only allow 1 AV process to run at once (IE for
licensing
> # purposes). A value of 0 (or commenting it out) allows unlimited
processes
> # to run at the same time.
> #MAXATONCE 1
>
> ## The following options allow you to limit scanning to only incoming or
outgoing
> # E-mail, with v1.13 and higher. If they are commented out ("#" in front
of them),
> # Declude will scan all E-mail.
>
> #INCOMING ON
> #OUTGOING ON
>
> BANEXT COM
> BANEXT PIF
> BANEXT EXE
> BANEXT SCR
>
> BANNAME message.zip
>
>
>
> when i turn on the real time protector i cant attatch the eicar.com file
deny it just at is should
>
> Any good ideas here
>
> ---
> [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
> ---
> This E-mail came from the Declude.Virus mailing list. To
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus". The archives can be found
> at http://www.mail-archive.com.
>
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
