Hi Goran, We move them to another partition nightly, run any desired monthly reports on the 1st, zip them up on the 5th (to give time to review logs for recent days), and store for 6 months in zip format on another partition. We have plenty of disk space, so local storage hasn't been a problem yet.
Our backup processes are a fairly complete disk-to-disk/production-machine-to-"warm"-spare, so the logs are available there as well. Darin. ----- Original Message ----- From: "Goran Jovanovic" <[EMAIL PROTECTED]> To: <[email protected]> Sent: Friday, January 28, 2005 5:24 PM Subject: RE: [Declude.Virus] RAR Support - why not? Darin, What do you do with the old log files? Do you put them on another machine for processing/analysis/archiving? If you are archiving how long do you keep the data? Thanx Goran Jovanovic The LAN Shoppe > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Darin Cox > Sent: Friday, January 28, 2005 5:15 PM > To: [email protected] > Subject: Re: [Declude.Virus] RAR Support - why not? > > Notices only go out for banned files. We include a statement that the > email > will be available to be requeued for x number of days...so automatic > processes clean it up if it's unclaimed. > > Regarding the space problem, are you moving logs off to another partition > on > a nightly basis? Between that, automatic cleanup, and zipping old logs > ours > stays pretty clean. > > Darin. > > > ----- Original Message ----- > From: "Andy Schmidt" <[EMAIL PROTECTED]> > To: <[email protected]> > Sent: Friday, January 28, 2005 5:05 PM > Subject: RE: [Declude.Virus] RAR Support - why not? > > > Hi Goran: > > Oh, I've been thinking about just that. However does that mean you hold > all > virus files? > > I don't think I could afford the additional disk space (the spool file is > already too big as it is.) > > Best Regards > Andy > > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Goran Jovanovic > Sent: Friday, January 28, 2005 12:48 PM > To: [email protected] > Subject: RE: [Declude.Virus] RAR Support - why not? > > > Andy, > > Someone posted on this list a while ago a small ASP page that I am using > to > requeue a banned file. I send out a bannotify.eml what has the link back > to > the server with the appropriate file name. The user says I really really > want this file and clicks on the link. It gets requeued automatically into > the spool directory and it is not scanned/banned again and the user gets > it > within 30 minutes. > > I remember that there was some discussion on the list a while ago about > having the users authenticate and fill in a form etc. I decided not to > bother with that. > > I can send you my bannotify.eml and the asp file if you wish. Let me know > > > > > Goran Jovanovic > The LAN Shoppe > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > > [EMAIL PROTECTED] On Behalf Of Andy Schmidt > > Sent: Thursday, January 27, 2005 6:27 PM > > To: [email protected] > > Subject: RE: [Declude.Virus] RAR Support - why not? > > > > >> 1.82 will treat encrypted .RAR files the same as encrypted .ZIP > files, > > and will block banned file extensions in .RAR files the same way as it > > blocks banned file extensions in .ZIP files. << > > > > Beautiful! > > > > Now we just need McAfee to scan inside RAR files <G> > > > > (Globally banning zipped .EXE files is not an option for me - I gotta > give > > those customers SOME practical way to send/receive "restricted" file > > types.) > > > > Best Regards > > Andy > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus". The archives can be found > > at http://www.mail-archive.com. > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just > send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com.
