Re: [Declude.Virus] gokar

2001-12-13 Thread R. Scott Perry
>Anyone seen this gokar worm yet? > >We haven't but have seen quite a bit of traffic on incidents list. > >I see it is included in the Mcaffee (NEA) 4176 Dat. It was not in my >NAV list until just a few minutes ago at about 4:30 cst. In f-prot I >see gokar.a only so I'm not sure bout the other

[Declude.Virus] gokar

2001-12-13 Thread Smart Business Lists
Anyone seen this gokar worm yet? We haven't but have seen quite a bit of traffic on incidents list. I see it is included in the Mcaffee (NEA) 4176 Dat. It was not in my NAV list until just a few minutes ago at about 4:30 cst. In f-prot I see gokar.a only so I'm not sure bout the other varia

Re: [Declude.Virus] MISSING_REVERSE_DNS:Load experience

2001-12-13 Thread R. Scott Perry
>With PRESCAN it runs without a hitch (have only had to restart and >clean up once). With PRESCAN off, then we have a problem coping >with the load. I'm ranging about 0.7% of messages infected >compared to some higher figures I have seen by others - Perhaps >the prescanning feature cuts down on

Re: [Declude.Virus] MISSING_REVERSE_DNS:Load experience

2001-12-13 Thread FIRST Internet Declude Virus Account
- # of message per day: 150,000-200,000 - non-local mail delivered to sendmail servers for further delivery - scanning both incoming and outgoing mail - using Declude 1.28 - using F-PROT - PRESCAN set in config With PRESCAN it runs without a hitch (have only had to restart and clean up on

RE: MISSING_REVERSE_DNS:RE: [Declude.Virus] Troubleshooting Imail/declude log parser v1.1 (usage.cmd)

2001-12-13 Thread Jeff Pitoniak
This script looks at Imail *and* Declude logs, hence the name "Imail/Declude log parser." DOMLIST.EXE shows a summary of incoming and outgoing mail by domain. I have configured my Imail server to record POP3 and SMTP logs to the SYSLOG service which uses log.txt rather than to a file(sys

RE: [Declude.Virus] MISSING_REVERSE_DNS:Load experience

2001-12-13 Thread Craig Gittens
I use McAfee with a load of over 50,000 being received and usually around 12,000 being sent per day. Recently I have had to gdeliver to a sendmail box. Craig. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday, December 13, 200

RE: [Declude.Virus] MISSING_REVERSE_DNS:Load experience

2001-12-13 Thread George Peace
Sure did. I ran Version 1.2 on the MID level log file. >George how did you pull those stats together? Did you use the same log >analyser as mentioned in this list? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing

RE: [Declude.Virus] MISSING_REVERSE_DNS:Load experience

2001-12-13 Thread Mark Chadwick
George how did you pull those stats together? Did you use the same log analyser as mentioned in this list? Mark Chadwick IT Support Engineer Science International Bateman House 82-88 Hills Road Cambridge Cambs CB2 1LQ +44(0)1223 326500 -Original Message- From: [EMAIL PROTECTED] [mailto:

Re: [Declude.Virus] MISSING_REVERSE_DNS:Load experience

2001-12-13 Thread George Peace
We're running 125,000 to 140,000 messages/day with around 30,000 mailboxen. Yes, there's trouble but there's no blame implied... Two things have happened. One is that we had to shut off incoming virus scanning to keep the imail box stable for more than a few hours at a time. The other, unexpe

Re: MISSING_REVERSE_DNS:RE: [Declude.Virus] Load experience

2001-12-13 Thread R. Scott Perry
> > Which virus scanner are you using? > > Note that McAfee may > > have troubles dealing with such a volume. > >At the moment there is no scan engine. OK, I thought that you were saying that the ISP was running Declude, and was having troubles. Now I understand -- the troubles they are having

MISSING_REVERSE_DNS:RE: [Declude.Virus] Load experience

2001-12-13 Thread markus
> Which virus scanner are you using? > Note that McAfee may > have troubles dealing with such a volume. At the moment there is no scan engine. Wich one is the fastest on your experience? > >There is a ISP having a lot of trouble since the last "virus-wave" in > >the last two weeks. > What k

RE: [Declude.Virus] MISSING_REVERSE_DNS:Load experience

2001-12-13 Thread Keith Yount
We've been using it for quite some time and have not noticed it impact the server unnecessarily. On heavy days we average 45K to 50K+, and we are using NIA's (Mcafee) Netshield. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of R. Scott Perry Sent: Thursday

Re: [Declude.Virus] MISSING_REVERSE_DNS:Load experience

2001-12-13 Thread R. Scott Perry
>Is there someone who has tried to run IMAIL & DECLUDE with a load of >over 50.000 msg./day? That is a heavy load, but we do have a number of customers using such a configuration. Which virus scanner are you using? Note that McAfee may have troubles dealing with such a volume. >There is a I

MISSING_REVERSE_DNS:RE: [Declude.Virus] Troubleshooting Imail/declude log parser v1.1 (usage.cmd)

2001-12-13 Thread Paul W. Lucido
I guess my question is, what log file are you scanning for viruses? Looking at the following command: %spl%DOMLIST %spl%log%mm%%yd%.txt | find /V "Domain Lister - (C) Copyright 2001" | find /V "Please consider using our" >>%log%%mm%%yd%usage.log this performs a domlist.exe on log1212.txt. What v

[Declude.Virus] MISSING_REVERSE_DNS:Load experience

2001-12-13 Thread markus
Hi all, Is there someone who has tried to run IMAIL & DECLUDE with a load of over 50.000 msg./day? The server should act only as SMTP-Gateway, no POP3 or IMAP-load. There is a ISP having a lot of trouble since the last "virus-wave" in the last two weeks. Markus --- [This E-mail was scanned for

[Declude.Virus]

2001-12-13 Thread Web Administrator
--- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can

[Declude.Virus] Troubleshooting Imail/declude log parser v1.1 (usage.cmd)

2001-12-13 Thread Jeff Pitoniak
If you are having problems with this command script, the following instructions allow you to see the output and errors of all of the commands involved. Open usage.cmd in a text editor (making sure that word wrap is not turned on) and add a colon to the 1st line of the script to disable hiding the

[Declude.Virus] Test

2001-12-13 Thread Jeff Pitoniak
Sorry, just checking to see if MISSING_REVERSE_DNS stopped showing in the subject of my posts as I finally got around to reverse dns after a major network infrastructure re-engineering project we just finished.   Regards, Jeff -- "If your only tool is a hammer, pretty soon everything starts