In which regard?
- forging virus detection/MTLDB population (turned off by disabling forging virus detection with the "AUTOFORGE OFF" switch)
- v1.8x installation (can't turn off, sends an E-mail, not sure what triggers it)
- v2.0b installation (unconfirmed, but speculated).
Matt
decvirus wrote:
Matt,
In brief, how does one insure that virus "phone home" is turned off for declude?
________________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Tuesday, December 21, 2004 6:28 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] Upgrade issues
My two cents on this topic.
E-mail is something that needs to be highly available, including the spam and virus blocking capabilities. Many of our systems have redundancies in place or plans that allow for disaster recovery of catastrophic failures. For me, this includes my main facility being knocked off-line, rendering my server inaccessible (fire, earthquake, flood, or even fiber cuts).
I have determined that so long as a single server can handle my entire load, that the best method for me is to have a cold-spare on a separate network. This means that I need to be able to turn on this cold spare at a moment's notice and I can't be required to jump through hoops to get this to happen.
I fear that there is a phone-home mechanism being integrated into the system that is using this data. Phoning home has come up in the past and I must repeat that I strongly feel that Declude needs to let us know upfront what exactly it is doing and how this data is being used. This is not just limited to licensing mechanisms but also forging virus queries and any other such mechanism. A privacy policy should be published concerning this, and customers need to have the option of blocking the sharing of such data. There is obviously a limit to what one should expect to share, but where that limit is currently is unknown so far as Declude's policy goes. The use of data collected from my system to help fuel Declude's "Multiple Threat" DNSBL using default-opt-in for instance irked me, and the only established policy for opting out was to turn off forging virus detection. This was one of the factors that I used in deciding to turn this off and forgo all virus notifications. I did not want my data shared to an extent that I couldn' t control it, and I was concerned at my clients, and the people that they communicated with would get blacklisted as a result of merely being infected with a virus.
My concerns are different yet also similar in some ways when it comes to this license verification process. I want to know what data is being gathered by Declude and how it is being used, and I want to be notified before changes and given an option to not participate. I also want to know about the pitfalls of the licensing mechanism so that I know the caveats before I am faced with the need to perform an emergency cold-switch.
I understand that Declude has a well warranted concern about unlicensed usage of their software and improvements have to be made, however my hands can't be tied nor my or my customer's privacy violated in order to achieve this goal. Hopefully that will not be the case here.
Matt
Colbeck, Andrew wrote: You have it exactly, Serge.
The MAC address is guaranteed to be unique on the planet, but only the local network needs a MAC to be unique. A router needs a MAC to be unique on each network it can directly see.
Entering a MAC into the configuration for your network card is often called LAA (Locally Administered Address); using a custom MAC is uncommon, but certainly not rare.
Mostly I see this being done on firewalls or a new home-user firewall box to alleviate the bother of going to the ISP to register a new MAC address, thus letting the user keep the same IP they had.
Andrew 8)
-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Serge
Sent: Tuesday, December 21, 2004 4:59 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Upgrade issues
Douglas,
Any problems can result from changing mac ? (besside conflict with a
local machine)
TIA
----- Original Message ----- From: "Douglas Cohn" <[EMAIL PROTECTED]>
To: <Declude.Virus@declude.com>
Sent: Wednesday, December 22, 2004 12:02 AM
Subject: RE: [Declude.Virus] Upgrade issues
What exactly does this mean? How long will you wait and does Deculde run without the key?
The built-in failsafes are designed to ensure that you won't need to wait
until the next business >>day to get a new license key.
It is not like MAC addresses are impossible to change. Many drivers allow you to type in a MAC address.
If you are truly concerned about people using the product without a license use a hardware key <BG>. That will certainly help to keep the product running on just the server it was intended for.
http://www.safenet-inc.com/products/sentinel/index.asp
Unluckily they cost about $35 per machine but this stuff truly works and
in
99.999999% of all cases is foolproof.
DC
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Tuesday, December 21, 2004 6:47 PM
To: Declude.Virus@declude.com
Subject: Re: [Declude.Virus] Upgrade issues
Am I hearing correctly that, beginning with 2.0, licensing is tied to the MAC address?
Correct.
If so, what about those of us who load balance the traffic to the server across multiple NICs? This is a must to avoid downtime due to failure of a NIC (it's saved our bacon a couple of times).
Also, if a NIC is replaced, or we migrate to a different server, what is the process the get a new license key...and is that available 24/7/365?
We absolutely need to be able to handle these situations immediately without waiting until the next business day to get a new license key.
The built-in failsafes are designed to ensure that you won't need to wait until the next business day to get a new license key.
-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.
----
This outgoing message is guaranteed to be authentic by Message Level
users.
Guarantee the authenticity of your email @
http://www.messagelevel.com.
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail scanned for viruses by Declude Virus]
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list. To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus". The archives can be found
at http://www.mail-archive.com.
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
-- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
--- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
