> 1. Put virus names in virus.cfg
That is not needed, new version will look up in a declude.com database to
find if it is a forging virus

Correct.


Hopfuly, scott promised that a future version will automaticaly replace
sender by [Forged] in forging viruses identified by new method, so we wont
have to maintain a local list

We do plan to do that.


Another question, for scott, what happens if declude site is down, and how
can we have a local backup database ?
Can we  set our local dns as secondary for your virus zone file ?

If our server isn't reachable for some reason, it will re-try a few seconds later (in case of a dropped packet or other temporary glitch), and if it still gets no response, Declude will assume that the virus is forging.


We do not have a mechanism for secondaries, as there are no zone files. That way, we are able to deal with variants (so that Bagle.J was known to be forging even before it came out, as we have any "Bagle"'s listed).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000.
Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".    The archives can be found
at http://www.mail-archive.com.

Reply via email to