RE: [Declude.Virus] viruses getting through

[Colbeck, Andrew]

Title: Message

Also, if your server is highly stressed, IMail will steal messages from Declude (alternately, "something" makes the file in use and Declude can't process the message in a timely fashion and so fails open) and the file is delivered by IMail without Declude writing the headers or updating the log files.   Andrew.   p.s. We suffered self-induced delayed-server-upgrade for 6 months and saw too much of this.  The new server is quite happy, thank you very much.   -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matt Sent: Wednesday, June 08, 2005 2:09 PM To: Declude.Virus@declude.com Subject: Re: [Declude.Virus] viruses getting through If you restart your server without first stopping IMail SMTP service, it will leak messages for several seconds.  Also, if you restart the IMail Queue Manager service it will steal messages from Declude.  Both situations can lead to messages being passed without headers. Matt Daniel Ivey wrote: Yes, I do have AVAFTERJM ON in the virus.cfg file. One clarification too, when I mentioned that the headers for Declude Virus were not there, there was also no headers for Declude Junkmail either, with I know those are working. I have attached the virus log file for so far today. We have them set to only write on error. Daniel ======================= Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax: 434 - 572 - 1981 [EMAIL PROTECTED] -----Original Message----- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED]] Sent: Wednesday, June 08, 2005 4:12 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] viruses getting through Declude Virus has no definitions to update. Are you using AFTERJM ON? Logs, what do the logs say? John T eServices For You -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Daniel Ivey Sent: Wednesday, June 08, 2005 12:54 PM To: 'Declude.Virus@declude.com' Subject: [Declude.Virus] viruses getting through Greetings, Over the past 2 days, I have had some viruses get through my Declude Virus, with updated definitions. Has anyone else seen this? Also, when I receive an email and look at the headers of the email, I am not seeing where Declude Virus scanned the message. Does anyone have any suggestions? I am running version 1.82. Thanks, Daniel ======================= Daniel Ivey GCR Company / GCR Online Voice: 434 - 570 - 1765 Fax: 434 - 572 - 1981 [EMAIL PROTECTED] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. -- ===================================================== MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =====================================================