RE: [Declude.Virus] AVAFTERJM not working

[Mark E. Smith]

Title: Message

Ah ha!   Note to Declude staff -- update the documentation. :) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, Andrew Sent: Monday, December 20, 2004 12:17 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] AVAFTERJM not working I think I ran into this too; for my part, it was a thinko.   The correct usage is:   AVAFTERJM ON   but with all the talk on this forum about "AVAFTERJM", that's all I used (that is, I left out the "ON" part).   Andrew 8) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark E. Smith Sent: Monday, December 20, 2004 8:37 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] AVAFTERJM not working I've been working with Darrell from Invariant systems using their log utility. We've been running AVAFTERJM based on the following logic:   We delete about 50% of email as spam via Junkmail (gateway system only). If we delete 50% of the email then we can reduce the load on Declude/FProt AV by 50% as long as the AV messages are scanned after JM.   So, we put AVAFTERJM in the virus.cfg per the instructions.   Darrell looked at our logs and found the following: Opened up our DEC and VIR1217.LOG.  In the VIRlog he found the message Q67df4a0000ae4237 which has a virus.  Then he went to the DEC1217.LOG and searched for the message and did not find it.  So, it would seem that AVAFTERJM isn't working properly   Thoughts?   The information contained in this email is intended solely for the addressee. This message may contain confidential and/or privileged material and access to this email by anyone else is unauthorized. Unauthorized recipients are required to maintain confidentiality. Any review, retransmission, dissemination or other use of by persons or entities other than the intended recipient is prohibited and may be unlawful. If you have received this message in error, please notify us immediately and destroy the original.   Les informations transmises par la pr�sente sont destin�es uniquement au(x) destinataires(s) sousmentionn�(s). Le message peut contenir des informations confidentielles. L'acc�s � ce message par toute autre personne que celle(s) nomm�ment d�sign�e(s) en est donc interdit et la confidentialit� du message doit �tre sauvegard�e. Toute r�f�rence aux informations qui y figurent, toute retransmission, diss�mination ou utilisation de celles-ci par quiconque qui n'en a pas l'autorisation est strictement d�fendu. Si vous avec re�u cette communication par erreur, veuillez nous en aviser imm�diatement et d�truire l'original.