[Declude.JunkMail] Declude Virus BANNAME question
Does BANNAME work on file names within a zip file? -Scott FisherDirector of ITFarm Progress Companies191 S Gary AveCarol Stream, IL 60188630-462-2323 This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. Although Farm Progress Companies has taken reasonable precautions to ensure no viruses are present in this email, the company cannot accept responsibility for any loss or damage arising from the use of this email or attachments. ---This E-mail came from the Declude.JunkMail mailing list. Tounsubscribe, just send an E-mail to [EMAIL PROTECTED], andtype "unsubscribe Declude.JunkMail". The archives can be foundat http://www.mail-archive.com.
[Declude.JunkMail] declude virus - additional info
We have mcafee at our location. I understand that I can use declude virus with it - but got some questions 1. which version of mcafee should I use? I have access to both the windows Virus Scan Enterprise 7.1.0 and the dos based Version 4.3.20. 2. If the suggestion is dos based 4.3.20, does anyone have a good automated update routine for it? If you say 7.1.0 then updating is not a problem, I'm just not sure of the command line needed. We're at a point were I've convinced Mgmnt that if they want zips to go through they need Declude Virus to get rid of the encrypted zips. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude virus - additional info
Doug, Should post these to the declude virus list... virus with it - but got some questions 1. which version of mcafee should I use? scan.exe I think it comes with all of them but not sure. based 4.3.20, does anyone have a good automated update routine for it? If you say 7.1.0 then updating is not a problem, I'm just not sure of the command line needed. I do - email me off list and I will send you my batch file. I run it every 4 hrs. [There are others on the Declude website as well.] -Nick Hayer We're at a point were I've convinced Mgmnt that if they want zips to go through they need Declude Virus to get rid of the encrypted zips. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude virus - additional info
We have mcafee at our location. I understand that I can use declude virus with it - but got some questions 1. which version of mcafee should I use? I have access to both the windows Virus Scan Enterprise 7.1.0 and the dos based Version 4.3.20. You can use any version of VirusScan (or NetShield) with Declude Virus. So either of the above will work. 2. If the suggestion is dos based 4.3.20, does anyone have a good automated update routine for it? If you say 7.1.0 then updating is not a problem, I'm just not sure of the command line needed. You might want to try http://www.declude.com/tools if you are looking for automated updating that goes beyond what McAfee provides. We're at a point were I've convinced Mgmnt that if they want zips to go through they need Declude Virus to get rid of the encrypted zips. :) -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude virus hanging...
Todd, is the production file called virus1.cfg? I don't know if that would cause any problems, but the default file name is just virus.cfg. What version of Declude are you running. There was a problem with having more than 5 or 6 BANNAME entries in the virus.cfg file. Scott release an interim update yesterday to resolve this. Bill - Original Message - From: Todd Holt [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 03, 2003 10:45 PM Subject: [Declude.JunkMail] Declude virus hanging... When I have Declude.Virus active it creates a .vir directory for each message, then never finishes the message, just leaves it hanging forever. When I turn off virus, messages flow properly. I have tried switching from f-prot to AVG with the same result. Virus.cfg attached. Any thoughts?? Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude virus hanging...
When I have Declude.Virus active it creates a .vir directory for each message, then never finishes the message, just leaves it hanging forever. When I turn off virus, messages flow properly. I have tried switching from f-prot to AVG with the same result. Virus.cfg attached. Any thoughts?? Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 virus1.cfg Description: Binary data
RE: [Declude.JunkMail] Declude virus hanging...
If you are using Declude version 1.76Beta then move to the latest interim release or use the 1.75 version. Try that. Tyler -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Todd Holt Sent: Thursday, December 04, 2003 1:46 AM To: [EMAIL PROTECTED] Subject: [Declude.JunkMail] Declude virus hanging... When I have Declude.Virus active it creates a .vir directory for each message, then never finishes the message, just leaves it hanging forever. When I turn off virus, messages flow properly. I have tried switching from f-prot to AVG with the same result. Virus.cfg attached. Any thoughts?? Todd Holt Xidix Technologies, Inc Las Vegas, NV USA www.xidix.com 702.319.4349 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude Virus BANNAME option with v1.76
The problem has been identified; there was a problem with v1.76 (beta) and subsequent interim releases and the BANNAME option. This issue is fixed in a new interim release v1.76i30 at http://www.declude.com/release/176i/declude.exe . Alternatively, you can comment out the BANNAME options by adding a # to the beginning of the lines that they are in. Hmmm, is it after the # of BANNAMEs reaches a certain point? I've had 2 instances of backlogs of mail in the spool in the past 3 months since going to Imail 8, but stopping/restarting SMTP + Queue Manager got mail moving again. We have 7.16 here for Declude, with 1 BANNAME listed - photos.zip. Didn't even realize I was missing the others mentioned.. but I'm not adding them yet. LOL! Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude Virus List
How can I get on the Declude Virus scan list --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude Virus BANNAME option with v1.76
Several people have reported issues with E-mail not being delivered over the past few days. The problem has been identified; there was a problem with v1.76 (beta) and subsequent interim releases and the BANNAME option. This issue is fixed in a new interim release v1.76i30 at http://www.declude.com/release/176i/declude.exe . Alternatively, you can comment out the BANNAME options by adding a # to the beginning of the lines that they are in. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
In almost all cases, this is a situation where someone thought it would be cool to tweak a setting that they weren't familiar with (Gee, Split attachments into multiple E-mails probably will make my E-mail faster!, they think). Heh, in our case it would be Hey, good way to get your message deleted. =) I've been deleting the Vulnerabilities, and more than 95% have all been SPAM, only 1 person I've spoken with to correct this problem ever complained, and as Scott mentioned, he thought it was to help speed up delivery. I just explained that ANY potential threat to our users is taken seriously, and we'll not risk the whole for someone too lazy to fix their mail. He fixed his problem. =) What about the rest on the list? Do you delete vulnerabilities? Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
I've always wondered about this. So how do you desensitize Outlook? i.e. tell it not to break apart attachments as John posted? Matt Robertson [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
Hi, Paul, I don't delete on any one test. But currently any e-mail messages that have an overall weight of 50 get deleted automatically. This is based on the default scoring system for DJM and a few 10 point tests of my own. I've never seen a legit message with a weight that high. I've been doing more analysis and I'm hoping within 2 weeks to have my delete weight pushed down to 40. Dan - Original Message - From: paul [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:53 PM Subject: Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS) In almost all cases, this is a situation where someone thought it would be cool to tweak a setting that they weren't familiar with (Gee, Split attachments into multiple E-mails probably will make my E-mail faster!, they think). Heh, in our case it would be Hey, good way to get your message deleted. =) I've been deleting the Vulnerabilities, and more than 95% have all been SPAM, only 1 person I've spoken with to correct this problem ever complained, and as Scott mentioned, he thought it was to help speed up delivery. I just explained that ANY potential threat to our users is taken seriously, and we'll not risk the whole for someone too lazy to fix their mail. He fixed his problem. =) What about the rest on the list? Do you delete vulnerabilities? Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. This E-mail is scanned and free from viruses. www.nexustechgroup.com This E-mail is scanned and free from viruses. www.nexustechgroup.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re[2]: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
Hi Matt, MR So, since I can't find this setting in Outlook XP I'm going to assume MR its due to an old copy of Outlook 97 or somesuch. Or am I wrong about MR that? well, I didn't see it in XP version (outlook 2002) but I could have missed it I guess. But, I did see it in Outlook 2000... so, it's there and maybe in earlier versions. -j --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
Interesting. I've been using email since FidoNet but never messed with that. Ignorance truly is bliss :D So, since I can't find this setting in Outlook XP I'm going to assume its due to an old copy of Outlook 97 or somesuch. Or am I wrong about that? --Matt-- --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
Hi, Declude is catching all of the MS Outlook attachments due to vulnerability issue. How can desensitize the scan? Thank you. --- [This E-mail scanned for viruses by Friend.ly.net.] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
SKIPIFVIRUSNAMEDOESNOTHAVE Vulnerability From: [EMAIL PROTECTED] To: %ALLRECIPS%,[EMAIL PROTECTED] Subject: We blocked an e-mail sent to you! Delivery blocked: %ALLRECIPS% The mail server for %LOCALHOST% scans each e-mail for Viruses, SPAM (Junk Mail) and e-mail vulnerabilities. We caught an e-mail addressed to you that is formatted with %VIRUSNAME%, and have quarantined it for your protection. If you recognize the below information as a valid e-mail that you want or should have received, please let us know. Otherwise, the e-mail will be deleted after 3 days. FROM: %MAILFROM% TO: %ALLRECIPS% SUBJECT: %SUBJECT% Remote IP: %REMOTEIP% DATE: %DATE% @ %TIME% SPOOL FILE: %QUEUENAME% Headers of the e-mail in question: %HEADERS% John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Frederick Samarelli Sent: Monday, August 11, 2003 12:31 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS) John. Would you mind sharing the vulnerability.eml message. Thanks - Original Message - From: John Tolmachoff (Lists) [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, August 11, 2003 2:31 PM Subject: RE: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS) I have Declude send out a vulnerablility.eml message. If the receiver recognizes it, he replies and I put the files back into the spool folder letting them know to have the sender fix the problem. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of paul Sent: Monday, August 11, 2003 11:53 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS) In almost all cases, this is a situation where someone thought it would be cool to tweak a setting that they weren't familiar with (Gee, Split attachments into multiple E-mails probably will make my E-mail faster!, they think). Heh, in our case it would be Hey, good way to get your message deleted. =) I've been deleting the Vulnerabilities, and more than 95% have all been SPAM, only 1 person I've spoken with to correct this problem ever complained, and as Scott mentioned, he thought it was to help speed up delivery. I just explained that ANY potential threat to our users is taken seriously, and we'll not risk the whole for someone too lazy to fix their mail. He fixed his problem. =) What about the rest on the list? Do you delete vulnerabilities? Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
Declude is catching all of the MS Outlook attachments due to vulnerability issue. How can desensitize the scan? That's Declude Virus that is doing it -- and you need to desensitize Outlook, not Declude Virus. :) We're not aware of any vulnerabilities that are generating false positives. Which vulnerability is it? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
I've always wondered about this. So how do you desensitize Outlook? i.e. tell it not to break apart attachments as John posted? In exactly the same way that it became broken in the first place. :) Assuming that the problem is the Partial Vulnerability, the reason it started occurring is because someone is running a version of Outlook that allows attachments to be split into multiple E-mails (something that was used back when most mailservers limited E-mail to 50K each). All they need to do is switch back to the default setting of not splitting up the attachments among multiple E-mails. In almost all cases, this is a situation where someone thought it would be cool to tweak a setting that they weren't familiar with (Gee, Split attachments into multiple E-mails probably will make my E-mail faster!, they think). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
I have Declude send out a vulnerablility.eml message. If the receiver recognizes it, he replies and I put the files back into the spool folder letting them know to have the sender fix the problem. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of paul Sent: Monday, August 11, 2003 11:53 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS) In almost all cases, this is a situation where someone thought it would be cool to tweak a setting that they weren't familiar with (Gee, Split attachments into multiple E-mails probably will make my E-mail faster!, they think). Heh, in our case it would be Hey, good way to get your message deleted. =) I've been deleting the Vulnerabilities, and more than 95% have all been SPAM, only 1 person I've spoken with to correct this problem ever complained, and as Scott mentioned, he thought it was to help speed up delivery. I just explained that ANY potential threat to our users is taken seriously, and we'll not risk the whole for someone too lazy to fix their mail. He fixed his problem. =) What about the rest on the list? Do you delete vulnerabilities? Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
I'm seeing a lot of these: 08/11/2003 00:05:37 Q1610005b050c0a12 Outlook 'CR' vulnerability [From: vi] in line 7 08/11/2003 02:12:51 Q33e12758026284fb File(s) are INFECTED [[Outlook 'Blank Folding' Vulnerability]: 0] The 'CR' are messages that do not have attachements. The 'CR' vulnerability occurs when there is a long CR character (carriage return) in the E-mail headers, which the RFCs do not allow (and causes a vulnerability, so Declude Virus has to quarantine the E-mail). As usual, upgrading the broken mail client normally fixes the problem. The Blank Folding vulnerability is a bit different (it occurs when there is a line in the header with just a single space or tab and nothing else; this is technically valid but never necessary, and causes a vulnerability). Upgrading the mail client should fix this, as well. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
quarantine, quick san once a month and have only rescued one -- rest to the bit bucket. Most don't even have correctly spelled subject lines. -Original Message- From: paul What about the rest on the list? Do you delete vulnerabilities? --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Declude Virus Pro and Fprot (DOS)
I don't delete on any one test. But currently any e-mail messages that have an overall weight of 50 get deleted automatically. But that's using junkmail. I'm talking Declude Virus. There's no weights in virus scanning, it is or it isn't. Some people ignore the vulnerability detections, others, like me, delete them, some HOLD for review. They may not be viruses now, but COULD be in the future. But you are right about junkmail tests, you shouldn't delete mail on one test alone. Paul --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Declude Virus Junkmail
Hello, We are ISP using Imail and we are evaluating Declude Virus Junkmail. I was wondering anyone can offer insight on how much of a load these 2 programs will put on our servers. Our machines have roughly 200 domains on each server. The server does both web and email services. If we install Delcude Virus Junkmail on each server will this be to much? We have the trial version on Virus running and it doesn't seem to bad yet (but we just started it). Our servers range from PII-300 dual PII-1GHz machines. I know a rough estimate on the number of emails would be good but I really don't know. So if you have some figures for a server with about 200 domains and the amount of email generated a day I would appreciate anything Let me know about the stats for server loading... Thanks, Adam Adam Hobach CyberLynk Sales/Support [EMAIL PROTECTED] or [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Declude Virus Junkmail
We are ISP using Imail and we are evaluating Declude Virus Junkmail. I was wondering anyone can offer insight on how much of a load these 2 programs will put on our servers. Our machines have roughly 200 domains on each server. That depends mostly on how many E-mails you send/receive per day (you could have no impact on a server with thousands of domains and hundreds of thousands of users if there is not much E-mail sent/received per day, whereas there would be a large impact on a server with just 1 domain and 1 user that sends/receives hundreds of thousands of E-mails per day). There are other factors, such as the CPU speed of the server, and what percentage of your E-mail needs to be scanned (the pre-scanning in Declude Virus Pro helps out there, by only sending potentially dangerous HTML E-mails to the scanner, rather than all of them). But the number of E-mails sent/received per day is the most important. I know a rough estimate on the number of emails would be good but I really don't know. 1,000 per day? 10,000? 1,000,000? For a quick estimate, you can type the following lines from a command prompt: find ldeliver sys0408.txt /C find rdeliver sys0408.txt /C That will show an estimate of the number of E-mails received (ldeliver) and sent (rdeliver) in a day. So if you have some figures for a server with about 200 domains and the amount of email generated a day I would appreciate anything A typical server with 200 domains would send/receive about 15,000 to 25,000 E-mails/day, but we have customers with 200 domains that have traffic as low as about 1,000 E-mails/day and as high as about 200,000 E-mails/day. If you're in the low end (1,000), any of your servers should be able to handle the load. At the high end (200,000), you'll need lots of CPU power. In the 15,000 to 25,000 range, an average server (500MHz) should be able to handle the load fine (although you may see noticeably higher CPU usage in the Task Manager, it shouldn't affect other services). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Declude Virus Junkmail
Hello Adam, we run both on one server. A Dual P-II 350 /w 256MB ram. Imail deliver about 4k e-mails each day and we have about 8-8.5k incoming e-mails of which 4-4.5k gets blocked by declude junkmail. Rarely gets over 10% load. This is on about 60+ domains which one domain is for our dial-up service with 500+ accounts. Tuesday, April 09, 2002, 11:01:52 AM, you wrote: AH Hello, AH We are ISP using Imail and we are evaluating Declude Virus Junkmail. I was AH wondering anyone can offer insight on how much of a load these 2 programs AH will put on our servers. AH Our machines have roughly 200 domains on each server. The server does both AH web and email services. If we install Delcude Virus Junkmail on each AH server will this be to much? We have the trial version on Virus running and AH it doesn't seem to bad yet (but we just started it). Our servers range from AH PII-300 dual PII-1GHz machines. AH I know a rough estimate on the number of emails would be good but I really AH don't know. So if you have some figures for a server with about 200 domains AH and the amount of email generated a day I would appreciate anything AH Let me know about the stats for server loading... AH Thanks, AH Adam AH AH Adam Hobach AH CyberLynk Sales/Support AH [EMAIL PROTECTED] or [EMAIL PROTECTED] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.JunkMail] Declude Virus Junkmail
I use Virus and Junkmail (with a ton of tests if that matters).
A typical day sees around 50,000 messages through the server. I process ALL
incoming and outgoing mail with BOTH programs.
Machine:
Dual PIII 1 Gig
1 Gig RAM
Hardware RAID 5 array (mailboxes and system on separate partitions) with 5
17 Gig 15K SCSI drives
2 17 Gig 15K SCSI Drives Mirrored (again, with hardware) for the spool
There is occasionally a crunch (never enough to hurt, just enough to notice)
because it seems that all of my users pick the same time of the day to send
their email!
My big expenditure on this server was on my disks and 2 separate Adaptec
RAID cards. My old server was just 350Mhz but the simple mirrored drive set
was always the slowdown.
I could probably get by with twice the load I have on the same hardware.
¤º°`°º¤ø,¸¸,ø¤º°`°º¤øø¤º°`°º¤ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤øø¤º°`°º¤ø
splehP ttocS
rotartsinimdA smetsyS TN
secivreS tenretnI renroKbeW
moc.renrokbew@pttocs
moc.renrokbew.www
$a=@ARGV;while($a){$a=~s/(.$)//;$b=$b.$1;}print $b\n;
¤º°`°º¤ø,¸¸,ø¤º°`°º¤øø¤º°`°º¤ø¤º°`°º¤ø,¸¸,ø¤º°`°º¤øø¤º°`°º¤ø
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Adam Hobach
Sent: Tuesday, April 09, 2002 12:02 PM
To: [EMAIL PROTECTED]
Subject: [Declude.JunkMail] Declude Virus Junkmail
Hello,
We are ISP using Imail and we are evaluating Declude Virus Junkmail. I was
wondering anyone can offer insight on how much of a load these 2 programs
will put on our servers.
Our machines have roughly 200 domains on each server. The server does both
web and email services. If we install Delcude Virus Junkmail on each
server will this be to much? We have the trial version on Virus running and
it doesn't seem to bad yet (but we just started it). Our servers range from
PII-300 dual PII-1GHz machines.
I know a rough estimate on the number of emails would be good but I really
don't know. So if you have some figures for a server with about 200 domains
and the amount of email generated a day I would appreciate anything
Let me know about the stats for server loading...
Thanks,
Adam
Adam Hobach
CyberLynk Sales/Support
[EMAIL PROTECTED] or [EMAIL PROTECTED]
---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
---
[ This E-mail scanned for viruses by www.WebKorner.com ]
---
[ This E-mail scanned for viruses by www.WebKorner.com ]
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.JunkMail mailing list. To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.JunkMail. You can E-mail
[EMAIL PROTECTED] for assistance. You can visit our web
site at http://www.declude.com .
Re: [Declude.JunkMail] Declude Virus request
The Klez.E virus, and maybe some other ones, fake the from address when they are sent. Would it be possible to allow administrators the option to send or not send virus warning messages depending upon the virus? This has been added to the suggestion database. I can't say for sure if/when this may be added, but it likely will get added as there are more and more viruses that change the return address. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Declude Virus and Junkmail
Scott, Last week my mailbox was overflowing with SPAM, viruses and major complaints from customers that were fed up with the junk and viruses. I installed the Declude Virus and Junkmail software and now this week my mailbox is STILL overflowing with mail, however, this time it is from customers THANKING me for ridding them of the junkmail. I have to say that in my 7 years running this ISP business, I have NEVER found a product that works as well as your Virus and Junkmail software. I highly recommend your products to EVERYONE. They have SURPASSED my expectations. I am glad I bought it at this price before you realize how good it is and charge accordingly! Your technical support in assisting me was outstanding. Other software companies should take a lesson from you in the support area. Keep up the good work and let me know if there is anything I can do to assist you! I apologize to the group for sending this to everyone but I wanted to make sure that if a lurker was on line thinking about buying this product he/she should order it now. Bob Bloise System Administrator Trellis Technologies, Inc. (704) 849-7789 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Declude Virus and Junkmail
I have to say that in my 7 years running this ISP business, I have NEVER found a product that works as well as your Virus and Junkmail software. I highly recommend your products to EVERYONE. They have SURPASSED my expectations. I am glad I bought it at this price before you realize how good it is and charge accordingly! Wow, thanks for the kind words! :) -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Declude Virus and Junkmail
Hey i agree totally with him, we are a webhosting company for the oilfield industry, it is a GREAT virus product, no hassle operation, easy virus updates with f-prot! - Original Message - From: R. Scott Perry [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, January 29, 2002 5:12 AM Subject: Re: [Declude.JunkMail] Declude Virus and Junkmail I have to say that in my 7 years running this ISP business, I have NEVER found a product that works as well as your Virus and Junkmail software. I highly recommend your products to EVERYONE. They have SURPASSED my expectations. I am glad I bought it at this price before you realize how good it is and charge accordingly! Wow, thanks for the kind words! :) -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses by our Stealth Virus Detector] --- [This E-mail scanned for viruses by our Stealth Virus Detector] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.JunkMail] Declude Virus
Scott, In Declude Virus, if you add in BANEXT .xxx will Declude treat the e-mail as a virus and move the e-mail to a quarantine area just like a virus. I have noticed since I have added a couple of these lines that directory has received more files but I have not been notified. Jeff ** TymeWyse Internet P.O.Box 84 - 583 N. Main St., Canyonville, OR 97417 tel/fax: (541) 839-6027 - [EMAIL PROTECTED] ** --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: [Declude.JunkMail] Declude Virus
In Declude Virus, if you add in BANEXT .xxx will Declude treat the e-mail as a virus and move the e-mail to a quarantine area just like a virus. I have noticed since I have added a couple of these lines that directory has received more files but I have not been notified. That's correct (note that the format is BANEXT xxx not BANEXT .xxx, though). Declude Virus will quarantine the E-mail, and send the \IMail\Declude\BANnotify.eml file (if there is one). -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.JunkMail. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
