RE: [Declude.Virus] AVAFTERJM not working

[Colbeck, Andrew]

Title: Message

I think I ran into this too; for my part, it was a thinko.   The correct usage is:   AVAFTERJM ON   but with all the talk on this forum about "AVAFTERJM", that's all I used (that is, I left out the "ON" part).   Andrew 8) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark E. Smith Sent: Monday, December 20, 2004 8:37 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] AVAFTERJM not working I've been working with Darrell from Invariant systems using their log utility. We've been running AVAFTERJM based on the following logic:   We delete about 50% of email as spam via Junkmail (gateway system only). If we delete 50% of the email then we can reduce the load on Declude/FProt AV by 50% as long as the AV messages are scanned after JM.   So, we put AVAFTERJM in the virus.cfg per the instructions.   Darrell looked at our logs and found the following: Opened up our DEC and VIR1217.LOG.  In the VIRlog he found the message Q67df4a0000ae4237 which has a virus.  Then he went to the DEC1217.LOG and searched for the message and did not find it.  So, it would seem that AVAFTERJM isn't working properly   Thoughts?   The information contained in this email is intended solely for the addressee. This message may contain confidential and/or privileged material and access to this email by anyone else is unauthorized. Unauthorized recipients are required to maintain confidentiality. Any review, retransmission, dissemination or other use of by persons or entities other than the intended recipient is prohibited and may be unlawful. If you have received this message in error, please notify us immediately and destroy the original.   Les informations transmises par la présente sont destinées uniquement au(x) destinataires(s) sousmentionné(s). Le message peut contenir des informations confidentielles. L'accès à ce message par toute autre personne que celle(s) nommément désignée(s) en est donc interdit et la confidentialité du message doit être sauvegardée. Toute référence aux informations qui y figurent, toute retransmission, dissémination ou utilisation de celles-ci par quiconque qui n'en a pas l'autorisation est strictement défendu. Si vous avec reçu cette communication par erreur, veuillez nous en aviser immédiatement et détruire l'original.