RE: [Declude.JunkMail] Massive CPU usage

2004-05-26 Thread Hermann Strassner
> > If you change "F-Prot.exe" to "fpcmd.exe" and remove the 
> "/NOFLOPPY", 
> > you'll be all set.

> I've got it going now, that's probably something I missed last time. 

It is important to remove the /NOFLOPPY switch, otherwise it will not
catch anything.

Hermann

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] F-Prot Update

2004-02-16 Thread Hermann Strassner
> Although this question is better asked on the Virus list,

You are right, i put in on this list by mistake.

> I assume you are using the 32bit Windows version, correct?

Yes i do.

> How do you have the update configured?

I run the scheduler from f-prot, and i do an update hourly.

If nobody is logged in, the scheduler does not run. Is there an other
way?

Hermann

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] F-Prot Update

2004-02-16 Thread Hermann Strassner
We use F-PROT Windows as virus scanner. The update engine runs only when
the computer is logged in.

Is there a possibility to update also when the computer is not logged
in?

Mit freundlichen Grüßen

Hama GmbH & Co KG
Dresdner Str. 9, 86653 Monheim

Hermann Straßner
EDV Server- und Netzwerkmanagement

Tel.:   +49 9091 502-433
Fax:+49 9091 502 77-433
e-Mail: [EMAIL PROTECTED]
Web:www.hama.de

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] DNS Report

2003-10-13 Thread Hermann Strassner
I get it

Hermann

>  -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] 
> Sent: Monday, October 13, 2003 4:30 PM
> To:   Declude JunkMail (E-mail)
> Subject:  [Declude.JunkMail] DNS Report
> 
> Is anyone able to get to the site? www.dnsreport.com Just want to make
> sure that it's just not me that is having problems.
> 
> Thanks,
> Greg
> 
> 

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] Global.cfg

2003-09-29 Thread Hermann Strassner
Hello!

Where do i find an updated global.cfg file? More and more blacklists are
no more working and produce errors.

Hermann

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Multi Server Configs

2003-08-25 Thread Hermann Strassner



I'm not saying that you are wrong to do what you do, just that I and 
many others consider the banned extensions a first line of defense for brand new 
viruses, and it is definitely necessary for good virus protection and causes no 
problems unless you are blocking more common extensions (like .exe).  All 
files that flunk the banned extensions test also get put into hold on the 
server, though I would prefer to be able to turn that off. 
 
I am 
blocking exe and dll.
And if 
i forward a banned file i know which file to forward. But i have to be sure that 
there is not also a virus in that file additional to the file i bann. Of 
course this is limited to the viruses that are known at this 
time.
 
Hermann


RE: [Declude.JunkMail] Multi Server Configs

2003-08-25 Thread Hermann Strassner



Scott,I know this is the wrong discussion group, but since we're on 
the topic, would it make more sense to test for banned extensions before it goes 
to the virus scanner in order to save processing power? 
 
Scott, 
please don`t do this. I forward messages with banned extension sometimes, and i 
must be sure that there is no virus in it!
 
Hermann
 


OSPROXY:Re: [Declude.JunkMail] External Spam Header

2003-07-29 Thread Hermann Strassner
R. Scott Perry wrote:
>> OK, i see. But what shoul i do if my provider has 30 or 40 outgoing
>> mailservers, each of them can deliver the mail to me?
>
> Get another provider.  :)

:)) Its just an email provider, and they are some of the biggest in Germany.

> However, note that you don't need to add all the IPs of all their
> mailservers, or all the IPs in their MX records -- just the IPs of the
> mailserver(s) that act as a backup for you.

One example:
Received: from mx11.web.de [217.72.192.170] by hama.de with ESMTP
  (SMTPD32-6.06) id AAC53EAC02A6; Tue, 29 Jul 2003 00:59:17 +0200
Received: from [217.173.157.213] (helo=lust-house-sex.com)
 by mx11.web.de with esmtp (WEB.DE 4.99 #420)
 id 19hGxZ-0006Xf-00

It is not that they are MXs (only two of them are), but they send it with
them.

Hermann

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] External Spam Header

2003-07-29 Thread Hermann Strassner
> You could add a filter with a line "HEADERS  0  CONTAINS  X-SPAM-FLAG:
> YES".  However:

OK. This is only possible in the Pro Version?

> Declude JunkMail can actually handle this -- if you add a line in the
> format "IPBYPASS 192.0.2.25" to the \IMail\Declude\global.cfg
> file, Declude
> JunkMail will scan the E-mail as if Declude JunkMail was running on the
> backup mailserver.

OK, i see. But what shoul i do if my provider has 30 or 40 outgoing
mailservers, each of them can deliver the mail to me? Is it possible to
bypass a complete subnet or an IP range?
(I have this problem with web.de and gmx.de)

Hermann

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


[Declude.JunkMail] External Spam Header

2003-07-29 Thread Hermann Strassner
Hello!

Our backup mail servers are located at our provider and run under Linux with
Spamassassin.
This program marks each mail as spam with an extra line in the header as
X-SPAM-FLAG: YES.

How can i use this flag on declude?
The mail themself are not detected, because they came from the mailserver of
out provider, and this mailserver show no signs of Spam.

Hermann

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.JunkMail mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.JunkMail".  The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] Stats on .biz, .us?

2003-06-05 Thread Hermann Strassner
Title: Message



What 
do you mean?
Mail 
from these domains or mail to these domains?

  -Original Message-From: 
  [EMAIL PROTECTED] 
  [mailto:[EMAIL PROTECTED]On Behalf Of Kami 
  RazvanSent: Wednesday, June 04, 2003 3:19 PMTo: 
  [EMAIL PROTECTED]Subject: [Declude.JunkMail] Stats on 
  .biz, .us?
  Hi;
   
  Is anyone 
  keeping track or have any stats on the % of spam in:
   
  .biz
  .us 
  
   
  domains?
   
  From what I see 
  it appears .biz and .us type domains have a higher probability of being SPAM 
  as a percentage of legitimate emails with those domains.
   
  Regards,
  Kami