RE: [Declude.JunkMail] Requeue links for junkmail
http://www.ssc-isp.net/dlabeta/ It does exactly what you are asking an a few log reports. If you have anyquestions after downloading email me off list. Kevin Bilbee > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of serge > Sent: Monday, May 17, 2004 9:39 PM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Requeue links for junkmail > > > The requeue.asp by Markus works great. > Wonder if something similar exists for junkmail where users > get an end of day email listing the senders and subjects of > "holded" spam, and they can click on a link if they recognize > a specific message ? TIA > > > - Original Message - > From: "Adolfo Justiniano" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, May 14, 2004 4:44 AM > Subject: RE: [Declude.Virus] .smd files in c:/ > > > > > Care to share ? > > > > I apologize for any errors in my writing, English is not my native > > language. > > > > I'm using this script that Markus was gentle to share to the list: > > http://www.mail-archive.com/[EMAIL PROTECTED]/msg04996.html > > > > And my vulnerability.eml has these lines: > > > > SKIPIFVIRUSNAMEDOESNOTHAVE Vulnerability > > From: [EMAIL PROTECTED] > > To: %ALLRECIPS% > > Subject: We blocked an E-mail sent to you! > > > > NOTE: This is an AUTOMATIC message. > > > > We caught an E-mail addressed to you that explores a > vulnerability and > > have quarantined it for your protection. > > > > Following is the information about the E-mail: > > > > From: %MAILFROM% > > To: %ALLRECIPS% > > Subject: %SUBJECT% > > Vulnerability: %VIRUSNAME% > > Attachment: %VIRUSFILE% > > Date: %DATE% @ %TIME% > > Spool name: %QUEUENAME% > > > > If you recognize the above information as a valid E-mail > that you want > > or should have received, request it's automatic unblocking > by clicking > > in the > > following link: http://www.mydomain.com/requeue.asp?id=%QUEUENAME% > > > > If the unblocking isn't requested the E-mail will be > deleted after 3 > > days. > > > > Headers Follow: > > > > %HEADERS% > > > > Adolfo Justiniano > > Santa Cruz BBS > > e-mail: [EMAIL PROTECTED] > > http://www.scbbs.net > > > > --- > > [This E-mail was scanned for viruses by the Santa Cruz BBS > anti-virus > system] > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus".The archives can be found > > at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be > found at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hotmail not accept inbound mail?
This looks like it's an ongoing, long term issue. DNReports MX connection problems. http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson > Sent: 11 May 2004 20:29 > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? > > Yep hotmail is not accepting from us either, I am seeing > connection resets from them > > Rick Davidson > National Systems Manager > North American Title Group > - > - Original Message - > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, May 11, 2004 2:44 PM > Subject: [Declude.JunkMail] Hotmail not accept inbound mail? > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Requeue links for junkmail
When you use this I assume it is on the IMail server? Does the ASP work with IMail's web server or do you have to make IIS work in the mix? I have not even installed IIS and am not sure how it would react on the same machine, badly I think. Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of serge > Sent: Tuesday, May 18, 2004 12:39 AM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] Requeue links for junkmail > > The requeue.asp by Markus works great. > Wonder if something similar exists for junkmail where users get an end of > day email listing the senders and subjects of "holded" spam, and they can > click on a link if they recognize a specific message ? > TIA > > > - Original Message - > From: "Adolfo Justiniano" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Friday, May 14, 2004 4:44 AM > Subject: RE: [Declude.Virus] .smd files in c:/ > > > > > Care to share ? > > > > I apologize for any errors in my writing, English is not my native > > language. > > > > I'm using this script that Markus was gentle to share to the list: > > http://www.mail-archive.com/[EMAIL PROTECTED]/msg04996.html > > > > And my vulnerability.eml has these lines: > > > > SKIPIFVIRUSNAMEDOESNOTHAVE Vulnerability > > From: [EMAIL PROTECTED] > > To: %ALLRECIPS% > > Subject: We blocked an E-mail sent to you! > > > > NOTE: This is an AUTOMATIC message. > > > > We caught an E-mail addressed to you that explores a vulnerability and > > have > > quarantined it for your protection. > > > > Following is the information about the E-mail: > > > > From: %MAILFROM% > > To: %ALLRECIPS% > > Subject: %SUBJECT% > > Vulnerability: %VIRUSNAME% > > Attachment: %VIRUSFILE% > > Date: %DATE% @ %TIME% > > Spool name: %QUEUENAME% > > > > If you recognize the above information as a valid E-mail that you want > > or > > should have received, request it's automatic unblocking by clicking in > > the > > following link: http://www.mydomain.com/requeue.asp?id=%QUEUENAME% > > > > If the unblocking isn't requested the E-mail will be deleted after 3 > > days. > > > > Headers Follow: > > > > %HEADERS% > > > > Adolfo Justiniano > > Santa Cruz BBS > > e-mail: [EMAIL PROTECTED] > > http://www.scbbs.net > > > > --- > > [This E-mail was scanned for viruses by the Santa Cruz BBS anti-virus > system] > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.Virus".The archives can be found > > at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Requeue links for junkmail
> Does the ASP work with IMail's web server or do you have to > make IIS work in the mix? I have not even installed IIS and > am not sure how it would react on the same machine, badly I think. You can use the asp script from any IIS server that has access to the Imail spool/hold folder. Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Bounce Messages for blocked attachments
Hello all - I need to create a bounce message for all messages not received because they contained an attachment that was currently being blocked such as .zip..etc. Any direction on this would be greatly appreciated. Or point me in the right direction as to where I can obtain this information. Thanks. Samantha Bridges --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Requeue links for junkmail
Would it work on the same machine if it had two IP addresses and you restricted IMail to one of them and IIS to the other? Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Markus Gufler > Sent: Tuesday, May 18, 2004 7:56 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Requeue links for junkmail > > > > Does the ASP work with IMail's web server or do you have to > > make IIS work in the mix? I have not even installed IIS and > > am not sure how it would react on the same machine, badly I think. > > You can use the asp script from any IIS server that has access to the > Imail > spool/hold folder. > > Markus > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] SPEWS problem
While in general its impossible. Some folks have been removed before, but I think that is only "lengend". They will (spews) want you to post your delist request to NANAE where everyone will flame/rip you for days.. SPEWS loves to list adjacent netblocks to spammers in an effort to force the isp to do something about the spammer.. If anyone uses SPEWS they stand to block a lot of legit mail. Darrell - Check out http://www.invariantsystems.com for utilities for Declude and Imail. Quoting Goran Jovanovic <[EMAIL PROTECTED]>: > Anyone have any experience with SPEWS.ORG? It seems that the IP address > of our server we are using is listed in SPEWS. Has anyone ever got > themselves de-listed? > > > > Goran Jovanovic > The LAN Shoppe > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] SPEWS problem
It looks like our block is listed and not specifically our IP. I will have to see if I can get our IP de-listed There is a company that one of our users is trying to send to and they do an outright block as soon as the MAIL FROM is entered... sigh Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) > Sent: Tuesday, May 18, 2004 8:54 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] SPEWS problem > > While in general its impossible. Some folks have been removed before, but > I > think that is only "lengend". They will (spews) want you to post your > delist > request to NANAE where everyone will flame/rip you for days.. > > SPEWS loves to list adjacent netblocks to spammers in an effort to force > the isp > to do something about the spammer.. If anyone uses SPEWS they stand to > block a > lot of legit mail. > > Darrell > > - > Check out http://www.invariantsystems.com for utilities for Declude and > Imail. > > Quoting Goran Jovanovic <[EMAIL PROTECTED]>: > > > Anyone have any experience with SPEWS.ORG? It seems that the IP address > > of our server we are using is listed in SPEWS. Has anyone ever got > > themselves de-listed? > > > > > > > > Goran Jovanovic > > The LAN Shoppe > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hotmail not accept inbound mail?
dnsreprots.com hasn't worked for two day for me. the link doesn't work either? I keep getting different pages that want to see me free web space. Is it just me? Robert - Original Message - From: David Lewis-Waller <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 18, 2004 5:52 AM Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail? > This looks like it's an ongoing, long term issue. DNReports MX connection > problems. > > http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson > > Sent: 11 May 2004 20:29 > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? > > > > Yep hotmail is not accepting from us either, I am seeing > > connection resets from them > > > > Rick Davidson > > National Systems Manager > > North American Title Group > > - > > - Original Message - > > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Tuesday, May 11, 2004 2:44 PM > > Subject: [Declude.JunkMail] Hotmail not accept inbound mail? > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Requeue links for junkmail
it would need some acrobatics better to use different ports, than it will work fiine on same machine use port 80 for imail, disabeledport 80 for IIS have several sites set up on IIS for monitorring purposes, using different ports - Original Message - From: "Goran Jovanovic" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 18, 2004 12:34 PM Subject: RE: [Declude.JunkMail] Requeue links for junkmail Would it work on the same machine if it had two IP addresses and you restricted IMail to one of them and IIS to the other? Goran Jovanovic The LAN Shoppe 2345 Yonge Street, Suite 302 Toronto, Ontario M4P 2E5 Phone: (416) 440-1167 x-2113 Cell: (416) 931-0688 E-Mail: [EMAIL PROTECTED] > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Markus Gufler > Sent: Tuesday, May 18, 2004 7:56 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] Requeue links for junkmail > > > > Does the ASP work with IMail's web server or do you have to > > make IIS work in the mix? I have not even installed IIS and > > am not sure how it would react on the same machine, badly I think. > > You can use the asp script from any IIS server that has access to the > Imail > spool/hold folder. > > Markus > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hotmail not accept inbound mail?
When clicking the link below, I get a "unable to connect to server" (using Opera 7.5).. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Sent: Tuesday, May 18, 2004 9:05 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? dnsreprots.com hasn't worked for two day for me. the link doesn't work either? I keep getting different pages that want to see me free web space. Is it just me? Robert - Original Message - From: David Lewis-Waller <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 18, 2004 5:52 AM Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail? > This looks like it's an ongoing, long term issue. DNReports MX > connection problems. > > http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Rick > > Davidson > > Sent: 11 May 2004 20:29 > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? > > > > Yep hotmail is not accepting from us either, I am seeing connection > > resets from them > > > > Rick Davidson > > National Systems Manager > > North American Title Group > > - > > - Original Message - > > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Tuesday, May 11, 2004 2:44 PM > > Subject: [Declude.JunkMail] Hotmail not accept inbound mail? > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Requeue links for junkmail
> Would it work on the same machine if it had two IP addresses > and you restricted IMail to one of them and IIS to the other? For sure! The standard port for Imail Webmail is 8383 So you can run IIS on port 80 also on the same machine using one single IP. If you already run Imail Webmail on port 80 you can also activate IIS and configure the requeue website to run on a non standard port (for example http://www.your-domain.com:8080/requeue.asp) Or if you don't want to install IIS on your Imail-machine you can save the requeue.asp on another server running IIS. Then you have to change the variable t_spoolpath in the asp script to something like t_spoolpath = "\\UNC_NAME_OF_YOUR_IMAIL_SRV\SHARE_OF_C_IMAIL_SPOOL" For example t_spoolpath = "\\IMAILSRV\spool" if your Imail server name is "IMAILSRV" and you've shared your spool folder as "spool" Or t_spoolpath = "\\205.150.108.13\spool" if your Imail-server is not in the same IP multicast subnet. Keep in mind that the anonymous user from the web where you call the requeue.asp must have read/write access to the spool folder. I recommend to let run the IIS web under a special anonymous user account that exists both on your web- and imail-server. Now set up the share and NTFS-permissions for your spool folder that this user has the appropriate rights. Hope this helps Markus --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Requeue links for junkmail
great will test it and let you know - Original Message - From: "Kevin Bilbee" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 18, 2004 7:44 AM Subject: RE: [Declude.JunkMail] Requeue links for junkmail > http://www.ssc-isp.net/dlabeta/ > > > It does exactly what you are asking an a few log reports. > > If you have anyquestions after downloading email me off list. > > > Kevin Bilbee > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of serge > > Sent: Monday, May 17, 2004 9:39 PM > > To: [EMAIL PROTECTED] > > Subject: [Declude.JunkMail] Requeue links for junkmail > > > > > > The requeue.asp by Markus works great. > > Wonder if something similar exists for junkmail where users > > get an end of day email listing the senders and subjects of > > "holded" spam, and they can click on a link if they recognize > > a specific message ? TIA > > > > > > - Original Message - > > From: "Adolfo Justiniano" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Friday, May 14, 2004 4:44 AM > > Subject: RE: [Declude.Virus] .smd files in c:/ > > > > > > > > Care to share ? > > > > > > I apologize for any errors in my writing, English is not my native > > > language. > > > > > > I'm using this script that Markus was gentle to share to the list: > > > http://www.mail-archive.com/[EMAIL PROTECTED]/msg04996.html > > > > > > And my vulnerability.eml has these lines: > > > > > > SKIPIFVIRUSNAMEDOESNOTHAVE Vulnerability > > > From: [EMAIL PROTECTED] > > > To: %ALLRECIPS% > > > Subject: We blocked an E-mail sent to you! > > > > > > NOTE: This is an AUTOMATIC message. > > > > > > We caught an E-mail addressed to you that explores a > > vulnerability and > > > have quarantined it for your protection. > > > > > > Following is the information about the E-mail: > > > > > > From: %MAILFROM% > > > To: %ALLRECIPS% > > > Subject: %SUBJECT% > > > Vulnerability: %VIRUSNAME% > > > Attachment: %VIRUSFILE% > > > Date: %DATE% @ %TIME% > > > Spool name: %QUEUENAME% > > > > > > If you recognize the above information as a valid E-mail > > that you want > > > or should have received, request it's automatic unblocking > > by clicking > > > in the > > > following link: http://www.mydomain.com/requeue.asp?id=%QUEUENAME% > > > > > > If the unblocking isn't requested the E-mail will be > > deleted after 3 > > > days. > > > > > > Headers Follow: > > > > > > %HEADERS% > > > > > > Adolfo Justiniano > > > Santa Cruz BBS > > > e-mail: [EMAIL PROTECTED] > > > http://www.scbbs.net > > > > > > --- > > > [This E-mail was scanned for viruses by the Santa Cruz BBS > > anti-virus > > system] > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.Virus mailing list. To > > unsubscribe, > > > just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.Virus".The archives can be found > > > at http://www.mail-archive.com. > > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be > > found at http://www.mail-archive.com. > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] f-prot
https://secure.f-prot.com/cgi-bin/buy The DOS version is the one with the command line scanner if that isn't obvious. If you buy the Windows version, you get the DOS version as well. Darin. - Original Message - From: "Aaron J. Caviglia" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, May 17, 2004 11:56 PM Subject: Re: [Declude.JunkMail] f-prot Where can we purchase the command line scanner? Thanks, Aaron Caviglia On May 17, 2004, at 8:23 PM, Goran Jovanovic wrote: >> For the latter there is an outstanding request to Scott to >> kill additional scanning once a scanner detects a virus.. > > So right now if you use multiple scanners when you scan with ScannerA > and it finds a virus Declude will still call ScannerB and have it scan > as well? > > Scott pointed out that his McAfee was only $11.00 for the year so the > price barrier is "non-existant" and I see from your and Scott's > responses that there are indeed reasons to have more than one scanner. > > Thank you all > > Goran Jovanovic > The LAN Shoppe > > >> -Original Message- >> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- >> [EMAIL PROTECTED] On Behalf Of Nick Hayer >> Sent: Monday, May 17, 2004 10:03 AM >> To: [EMAIL PROTECTED] >> Subject: RE: [Declude.JunkMail] f-prot >> >> On 17 May 2004 at 9:13, Goran Jovanovic wrote: >> >>> For the folks using multiple scanners, do you have any stats on how >>> often the secondary scanner found a virus that the first one missed? >> Hi Goran, >> >> Here are my latest stats: >> Virus Totals: >> 441 F-Prot >> 412 AVG >> 446 McAfee >> - >> Vunerabilities: >> 349 >> - >> >> I update the defs for all every 4 hrs on a staggered schedule. >> Because of possible false positives I have found it hard to rank one >> particular scanner over another. For me the advantage to have more >> than one is one [varies] company will always come out with protection >> for a new outbreak before another. The downside is cost and cpu >> overhead. For the latter there is an outstanding request to Scott to >> kill additional scanning once a scanner detects a virus.. >> >> -Nick Hayer >> >> >> >> >>> >>> I realize that the cost of F-Prot (which I am using) is quite low > and >>> others might be as well, so it is not a cost issue but rather a "Do > I >>> really need it?". >>> >>> Thanx >>> >>> >>> Goran Jovanovic >>> The LAN Shoppe >>> >>> >>> -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott Fisher Sent: Monday, May 17, 2004 12:49 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] f-prot I find the Mcafee is the best at detecting viruses within > encrupted >>> zips. Otherwise they are pretty even. I'd recommend using F-Prot and Mcafee. Mcafee for the DOS command line scanner is dirt cheap. I'll see if > I >>> can find my price tomorrow. <<< [EMAIL PROTECTED] 5/15 12:29p >>> Can anyone tell me how f-prot compares to mcafee or symantec when > it >>> comes to keeping their database up with new viruses? That just seems pretty cheap but hey that's exactly what I'm looking for as long > as it works well >>> :) thanks, Larry Craddock --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses > by Declude Virus] >>> >>> >>> --- >>> [This E-mail was scanned for viruses by Declude Virus >>> (http://www.declude.com)] >>> >>> --- >>> This E-mail came from the Declude.JunkMail mailing list. To >>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >>> type "unsubscribe Declude.JunkMail". The archives can be found >>> at http://www.mail-archive.com. >>> >> >> >> --- >> [This E-mail was scanned for viruses by Declude Virus >> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >> type "unsubscribe Declude.JunkMail". The archives can be found >> at http://www.mail-archive.com. >> --- >> [This E-mail scanned for viruses by Declude Virus] > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just
RE: [Declude.JunkMail] SPEWS problem
De-listing has been successful on occasion (we had to get Covad involved last year to get an 8IP range de-listed after the full class C was listed by Spews) - it is not easy but can be done.. Sincerely, Randy Armbrecht Global Web SolutionsR, Inc. 804-346-5300 ext. 1 877-800-GLOBAL (4562) ext. 1 http://globalweb.net Richmond's Internet Source since 1996! WEB HOSTING including EMAIL beginning at $29/month! Non-Profits - receive a 25% discount! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darrell ([EMAIL PROTECTED]) Sent: Tuesday, May 18, 2004 8:54 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] SPEWS problem While in general its impossible. Some folks have been removed before, but I think that is only "lengend". They will (spews) want you to post your delist request to NANAE where everyone will flame/rip you for days.. SPEWS loves to list adjacent netblocks to spammers in an effort to force the isp to do something about the spammer.. If anyone uses SPEWS they stand to block a lot of legit mail. Darrell - Check out http://www.invariantsystems.com for utilities for Declude and Imail. Quoting Goran Jovanovic <[EMAIL PROTECTED]>: > Anyone have any experience with SPEWS.ORG? It seems that the IP > address of our server we are using is listed in SPEWS. Has anyone ever > got themselves de-listed? > > > > Goran Jovanovic > The LAN Shoppe > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] f-prot
Darin Cox wrote: >The DOS version is the one with the command line scanner if that isn't >obvious. If you buy the Windows version, you get the DOS version as well. I'm pretty sure the Windows version of that command-line scanner is 32-bit and the DOS version is only 16, so there's a big reason to not use the DOS version. Also the Windows version easier to keep upated since you can set the scheduler for hourly updates or whatever. Don't think you can do that in the DOS version but I could be wrong. Matt Robertson [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hotmail not accept inbound mail?
I get the same "Page cannot..." with IE 6... Looks like it might be down... -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Maze Sent: Tuesday, May 18, 2004 6:15 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail? When clicking the link below, I get a "unable to connect to server" (using Opera 7.5).. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Sent: Tuesday, May 18, 2004 9:05 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? dnsreprots.com hasn't worked for two day for me. the link doesn't work either? I keep getting different pages that want to see me free web space. Is it just me? Robert - Original Message - From: David Lewis-Waller <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 18, 2004 5:52 AM Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail? > This looks like it's an ongoing, long term issue. DNReports MX > connection problems. > > http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Rick > > Davidson > > Sent: 11 May 2004 20:29 > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? > > > > Yep hotmail is not accepting from us either, I am seeing connection > > resets from them > > > > Rick Davidson > > National Systems Manager > > North American Title Group > > - > > - Original Message - > > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Tuesday, May 11, 2004 2:44 PM > > Subject: [Declude.JunkMail] Hotmail not accept inbound mail? > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Surfside Internet] --- [This E-mail scanned for viruses by Surfside Internet] --- [This E-mail scanned for viruses by Surfside Internet] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hotmail not accept inbound mail?
We've been experiencing intermittent mail problems with ALL the big guys (MSN, YAHOO, HOTMAIL) over the past two months. It would appear that when you get big enough you don't need to follow any rules. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jeff Maze Sent: Tuesday, May 18, 2004 6:15 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail? When clicking the link below, I get a "unable to connect to server" (using Opera 7.5).. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Sent: Tuesday, May 18, 2004 9:05 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? dnsreprots.com hasn't worked for two day for me. the link doesn't work either? I keep getting different pages that want to see me free web space. Is it just me? Robert - Original Message - From: David Lewis-Waller <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 18, 2004 5:52 AM Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail? > This looks like it's an ongoing, long term issue. DNReports MX > connection problems. > > http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Rick > > Davidson > > Sent: 11 May 2004 20:29 > > To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? > > > > Yep hotmail is not accepting from us either, I am seeing connection > > resets from them > > > > Rick Davidson > > National Systems Manager > > North American Title Group > > - > > - Original Message - > > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Tuesday, May 11, 2004 2:44 PM > > Subject: [Declude.JunkMail] Hotmail not accept inbound mail? > > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Surfside Internet] --- [This E-mail scanned for viruses by Surfside Internet] --- [This E-mail scanned for viruses by Surfside Internet] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] f-prot
Gotcha...didn't realize there was a difference. We have the Windows version and use the command line scanner that comes with it. As far as update scheduling goes, there are several links on the Declude Tools page and in this archive to schedule periodic updates of the signature files. We take the simplest approach and FTP and unzip the signature files hourly. Darin. - Original Message - From: "Matt Robertson" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 18, 2004 10:27 AM Subject: RE: [Declude.JunkMail] f-prot Darin Cox wrote: >The DOS version is the one with the command line scanner if that isn't >obvious. If you buy the Windows version, you get the DOS version as well. I'm pretty sure the Windows version of that command-line scanner is 32-bit and the DOS version is only 16, so there's a big reason to not use the DOS version. Also the Windows version easier to keep upated since you can set the scheduler for hourly updates or whatever. Don't think you can do that in the DOS version but I could be wrong. Matt Robertson [EMAIL PROTECTED] MSB Designs, Inc. http://mysecretbase.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] f-prot
On 17 May 2004 at 20:56, Aaron J. Caviglia wrote: > Where can we purchase the command line scanner? Aaron - If you are referring to the Mcafee one for $11 - Scott mentioned "My 1 year McAfee VirusScan Command Line license was $11 through CDW." We paid the same thing off of State contract from Insight. -Nick Hayer > > Thanks, > > Aaron Caviglia > > On May 17, 2004, at 8:23 PM, Goran Jovanovic wrote: > > >> For the latter there is an outstanding request to Scott to > >> kill additional scanning once a scanner detects a virus.. > > > > So right now if you use multiple scanners when you scan with > > ScannerA and it finds a virus Declude will still call ScannerB and > > have it scan as well? > > > > Scott pointed out that his McAfee was only $11.00 for the year so > > the price barrier is "non-existant" and I see from your and Scott's > > responses that there are indeed reasons to have more than one > > scanner. > > > > Thank you all > > > > Goran Jovanovic > > The LAN Shoppe > > > > > >> -Original Message- > >> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > >> [EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, May 17, > >> 2004 10:03 AM To: [EMAIL PROTECTED] Subject: RE: > >> [Declude.JunkMail] f-prot > >> > >> On 17 May 2004 at 9:13, Goran Jovanovic wrote: > >> > >>> For the folks using multiple scanners, do you have any stats on > >>> how often the secondary scanner found a virus that the first one > >>> missed? > >> Hi Goran, > >> > >> Here are my latest stats: > >> Virus Totals: > >> 441F-Prot > >> 412AVG > >> 446McAfee > >> - > >> Vunerabilities: > >> 349 > >> - > >> > >> I update the defs for all every 4 hrs on a staggered schedule. > >> Because of possible false positives I have found it hard to rank > >> one particular scanner over another. For me the advantage to have > >> more than one is one [varies] company will always come out with > >> protection for a new outbreak before another. The downside is cost > >> and cpu overhead. For the latter there is an outstanding request to > >> Scott to kill additional scanning once a scanner detects a virus.. > >> > >> -Nick Hayer > >> > >> > >> > >> > >>> > >>> I realize that the cost of F-Prot (which I am using) is quite low > > and > >>> others might be as well, so it is not a cost issue but rather a > >>> "Do > > I > >>> really need it?". > >>> > >>> Thanx > >>> > >>> > >>> Goran Jovanovic > >>> The LAN Shoppe > >>> > >>> > >>> > -Original Message- > From: [EMAIL PROTECTED] > [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott > Fisher Sent: Monday, May 17, 2004 12:49 AM To: > [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] > f-prot > > I find the Mcafee is the best at detecting viruses within > > encrupted > >>> zips. > Otherwise they are pretty even. > > I'd recommend using F-Prot and Mcafee. > Mcafee for the DOS command line scanner is dirt cheap. I'll see > if > > I > >>> can > find my price tomorrow. > > <<< [EMAIL PROTECTED] 5/15 12:29p >>> > Can anyone tell me how f-prot compares to mcafee or symantec when > > it > >>> comes > to keeping their database up with new viruses? That just seems > pretty cheap but hey that's exactly what I'm looking for as long > > as > it works well > >>> :) > > thanks, > > Larry Craddock > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail scanned for > viruses > > by > Declude Virus] > >>> > >>> > >>> --- > >>> [This E-mail was scanned for viruses by Declude Virus > >>> (http://www.declude.com)] > >>> > >>> --- > >>> This E-mail came from the Declude.JunkMail mailing list. To > >>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > >>> "unsubscribe Declude.JunkMail". The archives can be found at > >>> http://www.mail-archive.com. > >>> > >> > >> > >> --- > >> [This E-mail was scanned for viruses by Declude Virus > >> (http://www.declude.com)] > >> > >> --- > >> This E-mail came from the Declude.JunkMail mailing list. To > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >> type "unsubscribe Declude.JunkMail". The archives can be found at > >> http://www.mail-archive.com. --- [This E-mail scanned for viruses > >> by Declude Virus] > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declu
RE: [Declude.JunkMail] SPEWS problem
Goran: Do not waste your time. Spews is an example of a bad blacklist and people should not use it. They have a terrorist mentality towards Spam fighting - collateral damage is okay because their cause is just. If you want to try to get delisted you will need to post to a news group where the bottomfeeders of the world will flame you for weeks. Go To google groups -news.admin.net-abuse.email and do a search for spews - you will see the treatment of those who request removal. Chuck Schick Warp 8, Inc. 303-421-5140 www.warp8.com > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Goran Jovanovic > Sent: Monday, May 17, 2004 10:10 PM > To: [EMAIL PROTECTED] > Subject: [Declude.JunkMail] SPEWS problem > > > Anyone have any experience with SPEWS.ORG? It seems that the IP address > of our server we are using is listed in SPEWS. Has anyone ever got > themselves de-listed? > > > > Goran Jovanovic > The LAN Shoppe > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Hotmail not accept inbound mail?
substitute 'backup' for the 'www' in the url. Tuesday, May 18, 2004, 8:14:36 AM, Jeff Maze <[EMAIL PROTECTED]> wrote: JM> When clicking the link below, I get a "unable to connect to server" (using JM> Opera 7.5).. JM> -Original Message- JM> From: [EMAIL PROTECTED] JM> [mailto:[EMAIL PROTECTED] On Behalf Of Robert JM> Sent: Tuesday, May 18, 2004 9:05 AM JM> To: [EMAIL PROTECTED] JM> Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? JM> dnsreprots.com hasn't worked for two day for me. JM> the link doesn't work either? JM> I keep getting different pages that want to see me free web space. JM> Is it just me? JM> Robert JM> - Original Message - JM> From: David Lewis-Waller <[EMAIL PROTECTED]> JM> To: <[EMAIL PROTECTED]> JM> Sent: Tuesday, May 18, 2004 5:52 AM JM> Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail? >> This looks like it's an ongoing, long term issue. DNReports MX >> connection problems. >> >> http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com >> >> >> > -Original Message- >> > From: [EMAIL PROTECTED] >> > [mailto:[EMAIL PROTECTED] On Behalf Of Rick >> > Davidson >> > Sent: 11 May 2004 20:29 >> > To: [EMAIL PROTECTED] >> > Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? >> > >> > Yep hotmail is not accepting from us either, I am seeing connection >> > resets from them >> > >> > Rick Davidson >> > National Systems Manager >> > North American Title Group >> > - >> > - Original Message - >> > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> >> > To: <[EMAIL PROTECTED]> >> > Sent: Tuesday, May 11, 2004 2:44 PM >> > Subject: [Declude.JunkMail] Hotmail not accept inbound mail? >> > >> >> --- >> [This E-mail was scanned for viruses by Declude Virus JM> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >> "unsubscribe Declude.JunkMail". The archives can be found at >> http://www.mail-archive.com. >> JM> --- JM> [This E-mail was scanned for viruses by Declude Virus JM> (http://www.declude.com)] JM> --- JM> This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, JM> just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe JM> Declude.JunkMail". The archives can be found at JM> http://www.mail-archive.com. JM> --- JM> [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] JM> --- JM> This E-mail came from the Declude.JunkMail mailing list. To JM> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and JM> type "unsubscribe Declude.JunkMail". The archives can be found JM> at http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] f-prot
On 17 May 2004 at 23:23, Goran Jovanovic wrote: > So right now if you use multiple scanners when you scan with ScannerA > and it finds a virus Declude will still call ScannerB and have it scan > as well? Correct. Scott has said this is on his todo list.. -Nick Hayer > > Scott pointed out that his McAfee was only $11.00 for the year so the > price barrier is "non-existant" and I see from your and Scott's > responses that there are indeed reasons to have more than one scanner. > > Thank you all > > Goran Jovanovic > The LAN Shoppe > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, May 17, > > 2004 10:03 AM To: [EMAIL PROTECTED] Subject: RE: > > [Declude.JunkMail] f-prot > > > > On 17 May 2004 at 9:13, Goran Jovanovic wrote: > > > > > For the folks using multiple scanners, do you have any stats on > > > how often the secondary scanner found a virus that the first one > > > missed? > > Hi Goran, > > > > Here are my latest stats: > > Virus Totals: > > 441 F-Prot > > 412 AVG > > 446 McAfee > > - > > Vunerabilities: > > 349 > > - > > > > I update the defs for all every 4 hrs on a staggered schedule. > > Because of possible false positives I have found it hard to rank one > > particular scanner over another. For me the advantage to have more > > than one is one [varies] company will always come out with > > protection for a new outbreak before another. The downside is cost > > and cpu overhead. For the latter there is an outstanding request to > > Scott to kill additional scanning once a scanner detects a virus.. > > > > -Nick Hayer > > > > > > > > > > > > > > I realize that the cost of F-Prot (which I am using) is quite low > and > > > others might be as well, so it is not a cost issue but rather a > > > "Do > I > > > really need it?". > > > > > > Thanx > > > > > > > > > Goran Jovanovic > > > The LAN Shoppe > > > > > > > > > > > > > -Original Message- > > > > From: [EMAIL PROTECTED] > > > > [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott > > > > Fisher Sent: Monday, May 17, 2004 12:49 AM To: > > > > [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] > > > > f-prot > > > > > > > > I find the Mcafee is the best at detecting viruses within > encrupted > > > zips. > > > > Otherwise they are pretty even. > > > > > > > > I'd recommend using F-Prot and Mcafee. > > > > Mcafee for the DOS command line scanner is dirt cheap. I'll see > > > > if > I > > > can > > > > find my price tomorrow. > > > > > > > > <<< [EMAIL PROTECTED] 5/15 12:29p >>> > > > > Can anyone tell me how f-prot compares to mcafee or symantec > > > > when > it > > > comes > > > > to keeping their database up with new viruses? That just seems > > > > pretty cheap but hey that's exactly what I'm looking for as long > as > > > > it works well > > > :) > > > > > > > > thanks, > > > > > > > > Larry Craddock > > > > > > > > > > > > --- > > > > [This E-mail was scanned for viruses by Declude Virus > > > > (http://www.declude.com)] > > > > > > > > --- > > > > This E-mail came from the Declude.JunkMail mailing list. To > > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > > at http://www.mail-archive.com. --- [This E-mail scanned for > > > > viruses > by > > > > Declude Virus] > > > > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > > > "unsubscribe Declude.JunkMail". The archives can be found at > > > http://www.mail-archive.com. > > > > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. --- [This E-mail scanned for viruses by > > Declude Virus] > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hotmail not accept inbound mail?
Hmmm.. Still didn't work.. There's always http://www.checkdns.net This is what checkdns says about dnsreport.com: http://www.checkdns.net/quickcheck.aspx?domain=www.dnsreport.com&detailed=1 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Don Brown Sent: Tuesday, May 18, 2004 10:56 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? substitute 'backup' for the 'www' in the url. Tuesday, May 18, 2004, 8:14:36 AM, Jeff Maze <[EMAIL PROTECTED]> wrote: JM> When clicking the link below, I get a "unable to connect to server" JM> (using Opera 7.5).. JM> -Original Message- JM> From: [EMAIL PROTECTED] JM> [mailto:[EMAIL PROTECTED] On Behalf Of Robert JM> Sent: Tuesday, May 18, 2004 9:05 AM JM> To: [EMAIL PROTECTED] JM> Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? JM> dnsreprots.com hasn't worked for two day for me. JM> the link doesn't work either? JM> I keep getting different pages that want to see me free web space. JM> Is it just me? JM> Robert JM> - Original Message - JM> From: David Lewis-Waller <[EMAIL PROTECTED]> JM> To: <[EMAIL PROTECTED]> JM> Sent: Tuesday, May 18, 2004 5:52 AM JM> Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail? >> This looks like it's an ongoing, long term issue. DNReports MX >> connection problems. >> >> http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com >> >> >> > -Original Message- >> > From: [EMAIL PROTECTED] >> > [mailto:[EMAIL PROTECTED] On Behalf Of Rick >> > Davidson >> > Sent: 11 May 2004 20:29 >> > To: [EMAIL PROTECTED] >> > Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? >> > >> > Yep hotmail is not accepting from us either, I am seeing connection >> > resets from them >> > >> > Rick Davidson >> > National Systems Manager >> > North American Title Group >> > - >> > - Original Message - >> > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> >> > To: <[EMAIL PROTECTED]> >> > Sent: Tuesday, May 11, 2004 2:44 PM >> > Subject: [Declude.JunkMail] Hotmail not accept inbound mail? >> > >> >> --- >> [This E-mail was scanned for viruses by Declude Virus JM> (http://www.declude.com)] >> >> --- >> This E-mail came from the Declude.JunkMail mailing list. To >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type >> "unsubscribe Declude.JunkMail". The archives can be found at >> http://www.mail-archive.com. >> JM> --- JM> [This E-mail was scanned for viruses by Declude Virus JM> (http://www.declude.com)] JM> --- JM> This E-mail came from the Declude.JunkMail mailing list. To JM> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type JM> "unsubscribe Declude.JunkMail". The archives can be found at JM> http://www.mail-archive.com. JM> --- JM> [This E-mail was scanned for viruses by Declude Virus JM> (http://www.declude.com)] JM> --- JM> This E-mail came from the Declude.JunkMail mailing list. To JM> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type JM> "unsubscribe Declude.JunkMail". The archives can be found at JM> http://www.mail-archive.com. Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net (972) 788-2364Fax: (972) 788-5049 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] f-prot
This is a big issue for me because my second scanner is so wasteful in comparison to my first, and during larger virus outbreaks, there's a very clear spike in average utilization. I don't believe that this is being prioritized, so I suggest that you hold your request and repost it when Scott gets back...that is if it causes you any issues. I've given some consideration to writing a handler script myself that would do the same thing, but I haven't gotten around to it yet :) It certainly can be done though. Matt Nick Hayer wrote: On 17 May 2004 at 23:23, Goran Jovanovic wrote: So right now if you use multiple scanners when you scan with ScannerA and it finds a virus Declude will still call ScannerB and have it scan as well? Correct. Scott has said this is on his todo list.. -Nick Hayer Scott pointed out that his McAfee was only $11.00 for the year so the price barrier is "non-existant" and I see from your and Scott's responses that there are indeed reasons to have more than one scanner. Thank you all Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Nick Hayer Sent: Monday, May 17, 2004 10:03 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] f-prot On 17 May 2004 at 9:13, Goran Jovanovic wrote: For the folks using multiple scanners, do you have any stats on how often the secondary scanner found a virus that the first one missed? Hi Goran, Here are my latest stats: Virus Totals: 441 F-Prot 412 AVG 446 McAfee - Vunerabilities: 349 - I update the defs for all every 4 hrs on a staggered schedule. Because of possible false positives I have found it hard to rank one particular scanner over another. For me the advantage to have more than one is one [varies] company will always come out with protection for a new outbreak before another. The downside is cost and cpu overhead. For the latter there is an outstanding request to Scott to kill additional scanning once a scanner detects a virus.. -Nick Hayer I realize that the cost of F-Prot (which I am using) is quite low and others might be as well, so it is not a cost issue but rather a "Do I really need it?". Thanx Goran Jovanovic The LAN Shoppe -Original Message- From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- [EMAIL PROTECTED]] On Behalf Of Scott Fisher Sent: Monday, May 17, 2004 12:49 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] f-prot I find the Mcafee is the best at detecting viruses within encrupted zips. Otherwise they are pretty even. I'd recommend using F-Prot and Mcafee. Mcafee for the DOS command line scanner is dirt cheap. I'll see if I can find my price tomorrow. <<< [EMAIL PROTECTED] 5/15 12:29p >>> Can anyone tell me how f-prot compares to mcafee or symantec when it comes to keeping their database up with new viruses? That just seems pretty cheap but hey that's exactly what I'm looking for as long as it works well :) thanks, Larry Craddock --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkM
Re: [Declude.JunkMail] Hotmail not accept inbound mail?
You may want to use this link instead I can't seem to get the main server to come up. http://backup.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com Steve David Lewis-Waller wrote: This looks like it's an ongoing, long term issue. DNReports MX connection problems. http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Rick Davidson Sent: 11 May 2004 20:29 To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? Yep hotmail is not accepting from us either, I am seeing connection resets from them Rick Davidson National Systems Manager North American Title Group - - Original Message - From: "Colbeck, Andrew" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 11, 2004 2:44 PM Subject: [Declude.JunkMail] Hotmail not accept inbound mail? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses as a service to Keeling Inc. Customers]
RE: [Declude.JunkMail] Hotmail not accept inbound mail?
You know what's weird.. If I put just backup.dnsreport.com in the address bar, it comes up to DNSstuff.com.. Whoa.. From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steve :-)Sent: Tuesday, May 18, 2004 11:41 AMTo: [EMAIL PROTECTED]Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? You may want to use this link instead I can't seem to get the main server to come up.http://backup.dnsreport.com/tools/dnsreport.ch?domain=hotmail.comSteveDavid Lewis-Waller wrote: This looks like it's an ongoing, long term issue. DNReports MX connection problems. http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Rick Davidson Sent: 11 May 2004 20:29 To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? Yep hotmail is not accepting from us either, I am seeing connection resets from them Rick Davidson National Systems Manager North American Title Group - - Original Message - From: "Colbeck, Andrew" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 11, 2004 2:44 PM Subject: [Declude.JunkMail] Hotmail not accept inbound mail? --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses as a service to Keeling Inc. Customers]
[Declude.JunkMail] Tips for handling dictionary attacks
I'm having a new experience with our mail server. Suddenly I'm getting numerous dictionary attacks from different IP addresses. At first I blocked the IP addresses in IMail SMTP Security, but after adding a dozen I got tired. I'd rather detect the pattern and automatically stop it that way. Any tips? Keith Purtell, Web/Network Administrator VantageMed Corporation (Kansas City office) Voice: (816) 801-5200 Fax: (816) 880-4776 (800) 525-1101 CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Tips for handling dictionary attacks
Keith, I've been seeing a sharp uptick in this sort of activity as well. Typically they include about 200 generic E-mail addresses, but some are now throwing thousands of addresses for a fuller attack. If the E-mail is going to a locally hosted domain, the best defense is to remove the nobody alias as this will stop the attempts dead at the envelope and save lots of processing power. If this is gatewayed E-mail, a solution becomes much more involved as you will need to install a different product that can do address verification for non-IMail addresses and reject at the envelope (and maintain a database of such addresses). Regarding blocking the IP's, while I'm sure you could parse them out of your logs, they tend to attack from zombies, and typically use many at the same time. Each attack seems to use different sets of zombies as well. My feeling is to just simply let it go on because I don't want to waste too much time blocking IP's at the router or SMTP envelope that change constantly. Matt Keith Purtell wrote: I'm having a new experience with our mail server. Suddenly I'm getting numerous dictionary attacks from different IP addresses. At first I blocked the IP addresses in IMail SMTP Security, but after adding a dozen I got tired. I'd rather detect the pattern and automatically stop it that way. Any tips? Keith Purtell, Web/Network Administrator VantageMed Corporation (Kansas City office) Voice: (816) 801-5200 Fax: (816) 880-4776 (800) 525-1101 CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Bounce Messages for blocked attachments
Samantha, If this is related to Declude Virus, you need the download the BANNotify.eml file from the following location: http://www.declude.com/version/release/BANnotify.txt Customize the file for your own information (if you desire) and then place this file in your Declude directory. This will generate a bounce message for all messages that fail Declude Virus on a banned extension, but don't test positive for a known virus. Matt Bridges, Samantha wrote: Hello all - I need to create a bounce message for all messages not received because they contained an attachment that was currently being blocked such as .zip..etc. Any direction on this would be greatly appreciated. Or point me in the right direction as to where I can obtain this information. Thanks. Samantha Bridges --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Tips for handling dictionary attacks
One other thing. Unless you have a ton of traffic (~100,000/day) or have people doing BCC blasts from your server to hundreds of addresses, there is a setting in IMail 8.x that can slow down the dictionary attack so that it doesn't threaten your server's ability to process E-mail. On the SMTP > Advanced tab, there is a setting for "Delay between recipients", typically 0 by default. This is a time in milliseconds and it can be increased without obvious effect for normal operation to a value of 500 or even 1000. If your server can handle about 3 messages a second over a prolonged period outside of Declude, you might set the value at 500 (allowing for a little extra processing power to handle legitimate E-mail). This would mean that any local or external sender that tried to To, CC or BCC a message to say 100 addresses on your server, would take 50 seconds just to have your server respond to all of the RCPT TO commands. I had mine set to 1000 for the longest time without any reports of problems except for one person that mailed out messages to just under 100 addresses (which would take almost 2 minutes for his E-mail program to report that the message was delivered). I dropped it down a little while ago, but I'm going to pump it back up to 500 again. Matt Matt wrote: Keith, I've been seeing a sharp uptick in this sort of activity as well. Typically they include about 200 generic E-mail addresses, but some are now throwing thousands of addresses for a fuller attack. If the E-mail is going to a locally hosted domain, the best defense is to remove the nobody alias as this will stop the attempts dead at the envelope and save lots of processing power. If this is gatewayed E-mail, a solution becomes much more involved as you will need to install a different product that can do address verification for non-IMail addresses and reject at the envelope (and maintain a database of such addresses). Regarding blocking the IP's, while I'm sure you could parse them out of your logs, they tend to attack from zombies, and typically use many at the same time. Each attack seems to use different sets of zombies as well. My feeling is to just simply let it go on because I don't want to waste too much time blocking IP's at the router or SMTP envelope that change constantly. Matt Keith Purtell wrote: I'm having a new experience with our mail server. Suddenly I'm getting numerous dictionary attacks from different IP addresses. At first I blocked the IP addresses in IMail SMTP Security, but after adding a dozen I got tired. I'd rather detect the pattern and automatically stop it that way. Any tips? Keith Purtell, Web/Network Administrator VantageMed Corporation (Kansas City office) Voice: (816) 801-5200 Fax: (816) 880-4776 (800) 525-1101 CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] Hotmail not accept inbound mail?
I'm seeing 2 things: My default Imail queuing numbers gave too much emphasis on retry threads and frequency. I've lowered them. The same 1/4 of the Hotmail MX hosts are still down this week. I stuffed the responsive ones into my cacheing DNS server in a hotmail.com zone and that alleviated the queue. The next day I checked my Imail log, because I wanted to get rid of that hotmail.com workaround before it bit me, and I found that the remaining 3/4 of the servers still regularly told my server to come back later, refused connection, or dropped the connection. Andrew 8) -Original Message- From: David Lewis-Waller [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 18, 2004 2:52 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] Hotmail not accept inbound mail? This looks like it's an ongoing, long term issue. DNReports MX connection problems. http://www.dnsreport.com/tools/dnsreport.ch?domain=hotmail.com > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Rick Davidson > Sent: 11 May 2004 20:29 > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] Hotmail not accept inbound mail? > > Yep hotmail is not accepting from us either, I am seeing > connection resets from them > > Rick Davidson > National Systems Manager > North American Title Group > - > - Original Message - > From: "Colbeck, Andrew" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, May 11, 2004 2:44 PM > Subject: [Declude.JunkMail] Hotmail not accept inbound mail? > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] DLA Test Downloaded
There have been many downloads today of my hold analyzer. A thank you to the doanloaders who filled out the form shame on you to the ones who placed dummy information in the form. A small price for a great free product that save me many hours a day shifting through the hold queue. I say le the users do it. Please subscribe to the list and ask questions there. I will monitor it and answer any questions you may have. Also I would like to see feature requests and comments/criticisms. Subscribe at [EMAIL PROTECTED] Place In body Subscribe HoldAnalyzer Your Name --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DLA Test Downloaded
http://www.ssc-isp.net/dlabeta/ > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Aaron > Moreau-Cook > Sent: Tuesday, May 18, 2004 11:06 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > > Where can we get this program to try it out? > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee > Sent: Tuesday, May 18, 2004 10.59 > To: JunkMail Declude > Subject: [Declude.JunkMail] DLA Test Downloaded > > There have been many downloads today of my hold analyzer. A thank > you to the > doanloaders who filled out the form shame on you to the ones who placed > dummy information in the form. A small price for a great free product that > save me many hours a day shifting through the hold queue. I say > le the users > do it. > > Please subscribe to the list and ask questions there. I will > monitor it and > answer any questions you may have. Also I would like to see > feature requests > and comments/criticisms. > > Subscribe at > [EMAIL PROTECTED] > > > Place In body > Subscribe HoldAnalyzer Your Name > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DLA Test Downloaded
Where can we get this program to try it out? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee Sent: Tuesday, May 18, 2004 10.59 To: JunkMail Declude Subject: [Declude.JunkMail] DLA Test Downloaded There have been many downloads today of my hold analyzer. A thank you to the doanloaders who filled out the form shame on you to the ones who placed dummy information in the form. A small price for a great free product that save me many hours a day shifting through the hold queue. I say le the users do it. Please subscribe to the list and ask questions there. I will monitor it and answer any questions you may have. Also I would like to see feature requests and comments/criticisms. Subscribe at [EMAIL PROTECTED] Place In body Subscribe HoldAnalyzer Your Name --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DLA Test Downloaded
If you do not sullpy a valid email address when downloading you will not receive the email with your download link. Every download will get a different link. For thoes that dowanloaded the origional package there is an update at http://www.ssc-isp.net/blabeta/DLAApp.zip It fixes a few bugs. Kevin Bilbee > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Aaron > Moreau-Cook > Sent: Tuesday, May 18, 2004 11:06 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > > Where can we get this program to try it out? > > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee > Sent: Tuesday, May 18, 2004 10.59 > To: JunkMail Declude > Subject: [Declude.JunkMail] DLA Test Downloaded > > There have been many downloads today of my hold analyzer. A thank > you to the > doanloaders who filled out the form shame on you to the ones who placed > dummy information in the form. A small price for a great free product that > save me many hours a day shifting through the hold queue. I say > le the users > do it. > > Please subscribe to the list and ask questions there. I will > monitor it and > answer any questions you may have. Also I would like to see > feature requests > and comments/criticisms. > > Subscribe at > [EMAIL PROTECTED] > > > Place In body > Subscribe HoldAnalyzer Your Name > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Tips for handling dictionary attacks
On 18 May 2004 at 12:45, Matt wrote: Very slick Matt great idea! -Nick Hayer > One other thing. Unless you have a ton of traffic (~100,000/day) or > have people doing BCC blasts from your server to hundreds of > addresses, there is a setting in IMail 8.x that can slow down the > dictionary attack so that it doesn't threaten your server's ability to > process E-mail. > > On the SMTP > Advanced tab, there is a setting for "Delay between > recipients", typically 0 by default. This is a time in milliseconds > and it can be increased without obvious effect for normal operation to > a value of 500 or even 1000. If your server can handle about 3 > messages a second over a prolonged period outside of Declude, you > might set the value at 500 (allowing for a little extra processing > power to handle legitimate E-mail). This would mean that any local or > external sender that tried to To, CC or BCC a message to say 100 > addresses on your server, would take 50 seconds just to have your > server respond to all of the RCPT TO commands. I had mine set to 1000 > for the longest time without any reports of problems except for one > person that mailed out messages to just under 100 addresses (which > would take almost 2 minutes for his E-mail program to report that the > message was delivered). I dropped it down a little while ago, but I'm > going to pump it back up to 500 again. > > Matt > > > Matt wrote: > > > Keith, > > > > I've been seeing a sharp uptick in this sort of activity as well. > > Typically they include about 200 generic E-mail addresses, but some > > are now throwing thousands of addresses for a fuller attack. If the > > E-mail is going to a locally hosted domain, the best defense is to > > remove the nobody alias as this will stop the attempts dead at the > > envelope and save lots of processing power. If this is gatewayed > > E-mail, a solution becomes much more involved as you will need to > > install a different product that can do address verification for > > non-IMail addresses and reject at the envelope (and maintain a > > database of such addresses). > > > > Regarding blocking the IP's, while I'm sure you could parse them out > > of your logs, they tend to attack from zombies, and typically use > > many at the same time. Each attack seems to use different sets of > > zombies as well. My feeling is to just simply let it go on because > > I don't want to waste too much time blocking IP's at the router or > > SMTP envelope that change constantly. > > > > Matt > > > > > > > > Keith Purtell wrote: > > > >> I'm having a new experience with our mail server. Suddenly I'm > >> getting numerous dictionary attacks from different IP addresses. At > >> first I blocked the IP addresses in IMail SMTP Security, but after > >> adding a dozen I got tired. I'd rather detect the pattern and > >> automatically stop it that way. Any tips? > >> > >> Keith Purtell, Web/Network Administrator > >> VantageMed Corporation (Kansas City office) > >> Voice: (816) 801-5200 > >> Fax: (816) 880-4776 > >> (800) 525-1101 > >> > >> CONFIDENTIALITY NOTICE: This email message, including any > >> attachments, is > >> for the sole use of the intended recipient(s) and may contain > >> confidential and privileged information. Any unauthorized review, > >> use, disclosure or distribution is prohibited. If you are not the > >> intended recipient, please contact the sender by reply email and > >> destroy all copies of the original message. > >> > >> > >> --- > >> [This E-mail was scanned for viruses by Declude Virus > >> (http://www.declude.com)] > >> > >> --- > >> This E-mail came from the Declude.JunkMail mailing list. To > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >> type "unsubscribe Declude.JunkMail". The archives can be found at > >> http://www.mail-archive.com. > >> > >> > >> > >> > > > > -- > = > MailPure custom filters for Declude JunkMail Pro. > http://www.mailpure.com/software/ > = > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DLA Test Downloaded
Kevin, I tried the link below and was unable to get there??? Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Kevin Bilbee > Sent: Tuesday, May 18, 2004 2:20 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > If you do not sullpy a valid email address when downloading you will not > receive the email with your download link. Every download will get a > different link. > > > For thoes that dowanloaded the origional package there is an update at > > http://www.ssc-isp.net/blabeta/DLAApp.zip > > It fixes a few bugs. > > > > Kevin Bilbee > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of Aaron > > Moreau-Cook > > Sent: Tuesday, May 18, 2004 11:06 AM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > > > > > Where can we get this program to try it out? > > > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bilbee > > Sent: Tuesday, May 18, 2004 10.59 > > To: JunkMail Declude > > Subject: [Declude.JunkMail] DLA Test Downloaded > > > > There have been many downloads today of my hold analyzer. A thank > > you to the > > doanloaders who filled out the form shame on you to the ones who placed > > dummy information in the form. A small price for a great free product > that > > save me many hours a day shifting through the hold queue. I say > > le the users > > do it. > > > > Please subscribe to the list and ask questions there. I will > > monitor it and > > answer any questions you may have. Also I would like to see > > feature requests > > and comments/criticisms. > > > > Subscribe at > > [EMAIL PROTECTED] > > > > > > Place In body > > Subscribe HoldAnalyzer Your Name > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, > > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > > Declude.JunkMail". The archives can be found at > > http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DLA Test Downloaded
That would be because I am having typing challenges. Try this one ( I tested it this time ) > > http://www.ssc-isp.net/dlabeta/DLAApp.zip Kevin > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of Goran Jovanovic > Sent: Tuesday, May 18, 2004 11:29 AM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > > Kevin, > > I tried the link below and was unable to get there??? > > > > Goran Jovanovic > The LAN Shoppe > > > > > -Original Message- > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > [EMAIL PROTECTED] On Behalf Of Kevin Bilbee > > Sent: Tuesday, May 18, 2004 2:20 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > > > If you do not sullpy a valid email address when downloading you will > not > > receive the email with your download link. Every download will get a > > different link. > > > > > > For thoes that dowanloaded the origional package there is an update at > > > > http://www.ssc-isp.net/blabeta/DLAApp.zip > > > > It fixes a few bugs. > > > > > > > > Kevin Bilbee > > > > > -Original Message- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] Behalf Of Aaron > > > Moreau-Cook > > > Sent: Tuesday, May 18, 2004 11:06 AM > > > To: [EMAIL PROTECTED] > > > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > > > > > > > > Where can we get this program to try it out? > > > > > > > > > -Original Message- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] On Behalf Of Kevin > Bilbee > > > Sent: Tuesday, May 18, 2004 10.59 > > > To: JunkMail Declude > > > Subject: [Declude.JunkMail] DLA Test Downloaded > > > > > > There have been many downloads today of my hold analyzer. A thank > > > you to the > > > doanloaders who filled out the form shame on you to the ones who > placed > > > dummy information in the form. A small price for a great free > product > > that > > > save me many hours a day shifting through the hold queue. I say > > > le the users > > > do it. > > > > > > Please subscribe to the list and ask questions there. I will > > > monitor it and > > > answer any questions you may have. Also I would like to see > > > feature requests > > > and comments/criticisms. > > > > > > Subscribe at > > > [EMAIL PROTECTED] > > > > > > > > > Place In body > > > Subscribe HoldAnalyzer Your Name > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, > > > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > > > Declude.JunkMail". The archives can be found at > > > http://www.mail-archive.com. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. > > --- > > [This E-mail scanned for viruses by Declude Virus] > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DLA Test Downloaded
At 01:28 PM 5/18/2004, Goran Jovanovic wrote: Kevin, I tried the link below and was unable to get there??? Change the b in blabeta to a d -Russ at > > http://www.ssc-isp.net/blabeta/DLAApp.zip > > It fixes a few bugs. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] DLA Test Downloaded
Uh I should have seen that but I am trying to do too many things at the same time. Thanx Goran Jovanovic The LAN Shoppe > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > [EMAIL PROTECTED] On Behalf Of Kevin Bilbee > Sent: Tuesday, May 18, 2004 2:39 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > That would be because I am having typing challenges. Try this one ( I > tested > it this time ) > > > > http://www.ssc-isp.net/dlabeta/DLAApp.zip > > > Kevin > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of Goran Jovanovic > > Sent: Tuesday, May 18, 2004 11:29 AM > > To: [EMAIL PROTECTED] > > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > > > > > Kevin, > > > > I tried the link below and was unable to get there??? > > > > > > > > Goran Jovanovic > > The LAN Shoppe > > > > > > > > > -Original Message- > > > From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > > [EMAIL PROTECTED] On Behalf Of Kevin Bilbee > > > Sent: Tuesday, May 18, 2004 2:20 PM > > > To: [EMAIL PROTECTED] > > > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > > > > > If you do not sullpy a valid email address when downloading you will > > not > > > receive the email with your download link. Every download will get a > > > different link. > > > > > > > > > For thoes that dowanloaded the origional package there is an update at > > > > > > http://www.ssc-isp.net/blabeta/DLAApp.zip > > > > > > It fixes a few bugs. > > > > > > > > > > > > Kevin Bilbee > > > > > > > -Original Message- > > > > From: [EMAIL PROTECTED] > > > > [mailto:[EMAIL PROTECTED] Behalf Of Aaron > > > > Moreau-Cook > > > > Sent: Tuesday, May 18, 2004 11:06 AM > > > > To: [EMAIL PROTECTED] > > > > Subject: RE: [Declude.JunkMail] DLA Test Downloaded > > > > > > > > > > > > Where can we get this program to try it out? > > > > > > > > > > > > -Original Message- > > > > From: [EMAIL PROTECTED] > > > > [mailto:[EMAIL PROTECTED] On Behalf Of Kevin > > Bilbee > > > > Sent: Tuesday, May 18, 2004 10.59 > > > > To: JunkMail Declude > > > > Subject: [Declude.JunkMail] DLA Test Downloaded > > > > > > > > There have been many downloads today of my hold analyzer. A thank > > > > you to the > > > > doanloaders who filled out the form shame on you to the ones who > > placed > > > > dummy information in the form. A small price for a great free > > product > > > that > > > > save me many hours a day shifting through the hold queue. I say > > > > le the users > > > > do it. > > > > > > > > Please subscribe to the list and ask questions there. I will > > > > monitor it and > > > > answer any questions you may have. Also I would like to see > > > > feature requests > > > > and comments/criticisms. > > > > > > > > Subscribe at > > > > [EMAIL PROTECTED] > > > > > > > > > > > > Place In body > > > > Subscribe HoldAnalyzer Your Name > > > > > > > > --- > > > > [This E-mail was scanned for viruses by Declude Virus > > > > (http://www.declude.com)] > > > > > > > > --- > > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, > > > > just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe > > > > Declude.JunkMail". The archives can be found at > > > > http://www.mail-archive.com. > > > > > > > > --- > > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > > > > --- > > > [This E-mail was scanned for viruses by Declude Virus > > > (http://www.declude.com)] > > > > > > --- > > > This E-mail came from the Declude.JunkMail mailing list. To > > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > > type "unsubscribe Declude.JunkMail". The archives can be found > > > at http://www.mail-archive.com. > > > --- > > > [This E-mail scanned for viruses by Declude Virus] > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came f
[Declude.JunkMail] Program to extract users and aliases from IMail
Does anyone know of a program with will extract both the user accounts and the aliases from IMail and put them in a text file? I thought that I had heard of a program like this to be used with IMGate, but everything that I have found only supports user accounts and not aliases. Thanks, Matt -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Dnsstuff down / alternate test site
For those who may need an email tester while the main DNSStuff.com site is down (backup.dnsstuff.com doesn't have the email tester), try using www.network-tools.com - we use this as a backup whenever dnsstuff is having problems... Sincerely, Randy Armbrecht Global Web SolutionsR, Inc. 804-346-5300 ext. 1 877-800-GLOBAL (4562) ext. 1 http://globalweb.net Richmond's Internet Source since 1996! WEB HOSTING including EMAIL beginning at $29/month! Non-Profits - receive a 25% discount! --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] f-prot
Do you have a CDW product number on this? Called and they took forever to come back with $20+ Thanks, John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Tuesday, May 18, 2004 9:55 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] f-prot On 17 May 2004 at 20:56, Aaron J. Caviglia wrote: > Where can we purchase the command line scanner? Aaron - If you are referring to the Mcafee one for $11 - Scott mentioned "My 1 year McAfee VirusScan Command Line license was $11 through CDW." We paid the same thing off of State contract from Insight. -Nick Hayer > > Thanks, > > Aaron Caviglia > > On May 17, 2004, at 8:23 PM, Goran Jovanovic wrote: > > >> For the latter there is an outstanding request to Scott to > >> kill additional scanning once a scanner detects a virus.. > > > > So right now if you use multiple scanners when you scan with > > ScannerA and it finds a virus Declude will still call ScannerB and > > have it scan as well? > > > > Scott pointed out that his McAfee was only $11.00 for the year so > > the price barrier is "non-existant" and I see from your and Scott's > > responses that there are indeed reasons to have more than one > > scanner. > > > > Thank you all > > > > Goran Jovanovic > > The LAN Shoppe > > > > > >> -Original Message- > >> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > >> [EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, May 17, > >> 2004 10:03 AM To: [EMAIL PROTECTED] Subject: RE: > >> [Declude.JunkMail] f-prot > >> > >> On 17 May 2004 at 9:13, Goran Jovanovic wrote: > >> > >>> For the folks using multiple scanners, do you have any stats on > >>> how often the secondary scanner found a virus that the first one > >>> missed? > >> Hi Goran, > >> > >> Here are my latest stats: > >> Virus Totals: > >> 441F-Prot > >> 412AVG > >> 446McAfee > >> - > >> Vunerabilities: > >> 349 > >> - > >> > >> I update the defs for all every 4 hrs on a staggered schedule. > >> Because of possible false positives I have found it hard to rank > >> one particular scanner over another. For me the advantage to have > >> more than one is one [varies] company will always come out with > >> protection for a new outbreak before another. The downside is cost > >> and cpu overhead. For the latter there is an outstanding request to > >> Scott to kill additional scanning once a scanner detects a virus.. > >> > >> -Nick Hayer > >> > >> > >> > >> > >>> > >>> I realize that the cost of F-Prot (which I am using) is quite low > > and > >>> others might be as well, so it is not a cost issue but rather a > >>> "Do > > I > >>> really need it?". > >>> > >>> Thanx > >>> > >>> > >>> Goran Jovanovic > >>> The LAN Shoppe > >>> > >>> > >>> > -Original Message- > From: [EMAIL PROTECTED] > [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott > Fisher Sent: Monday, May 17, 2004 12:49 AM To: > [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] > f-prot > > I find the Mcafee is the best at detecting viruses within > > encrupted > >>> zips. > Otherwise they are pretty even. > > I'd recommend using F-Prot and Mcafee. > Mcafee for the DOS command line scanner is dirt cheap. I'll see > if > > I > >>> can > find my price tomorrow. > > <<< [EMAIL PROTECTED] 5/15 12:29p >>> > Can anyone tell me how f-prot compares to mcafee or symantec when > > it > >>> comes > to keeping their database up with new viruses? That just seems > pretty cheap but hey that's exactly what I'm looking for as long > > as > it works well > >>> :) > > thanks, > > Larry Craddock > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail scanned for > viruses > > by > Declude Virus] > >>> > >>> > >>> --- > >>> [This E-mail was scanned for viruses by Declude Virus > >>> (http://www.declude.com)] > >>> > >>> --- > >>> This E-mail came from the Declude.JunkMail mailing list. To > >>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > >>> "unsubscribe Declude.JunkMail". The archives can be found at > >>> http://www.mail-archive.com. > >>> > >> > >> > >> --- > >> [This E-mail was scanned for viruses by Declude Virus > >> (http://www.declude.com)] > >> > >> --- > >> This E-mail came from the Declude.JunkMail mailing list. To > >> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > >> type "unsubscribe Declude.JunkMail". The archives can be found at > >> http://www.mail-archive.com. --- [This E-mail scanne
Re: [Declude.JunkMail] Program to extract users and aliases from IMail
http://www.smartbusiness.net/imail/ -- Original Message -- From: Matt <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Tue, 18 May 2004 15:49:57 -0400 >Does anyone know of a program with will extract both the user accounts >and the aliases from IMail and put them in a text file? I thought that >I had heard of a program like this to be used with IMGate, but >everything that I have found only supports user accounts and not aliases. > >Thanks, > >Matt > >-- >= >MailPure custom filters for Declude JunkMail Pro. >http://www.mailpure.com/software/ >= > > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.JunkMail mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.JunkMail". The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] f-prot
John, Just use Froogle, http://froogle.google.com/. There are plenty of stores listed on there which have the product in that price range. Dan Geiser [EMAIL PROTECTED] - Original Message - From: "John Carter" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 18, 2004 3:56 PM Subject: RE: [Declude.JunkMail] f-prot > Do you have a CDW product number on this? Called and they took forever > to come back with $20+ > > Thanks, > John > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer > Sent: Tuesday, May 18, 2004 9:55 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] f-prot > > On 17 May 2004 at 20:56, Aaron J. Caviglia wrote: > > > Where can we purchase the command line scanner? > Aaron - > > If you are referring to the Mcafee one for $11 - Scott mentioned > "My 1 year McAfee VirusScan Command Line license was $11 through > CDW." > > We paid the same thing off of State contract from Insight. > > -Nick Hayer > > > > Thanks, > > > > Aaron Caviglia > > > > On May 17, 2004, at 8:23 PM, Goran Jovanovic wrote: > > > > >> For the latter there is an outstanding request to Scott to > > >> kill additional scanning once a scanner detects a virus.. > > > > > > So right now if you use multiple scanners when you scan with > > > ScannerA and it finds a virus Declude will still call ScannerB and > > > have it scan as well? > > > > > > Scott pointed out that his McAfee was only $11.00 for the year so > > > the price barrier is "non-existant" and I see from your and Scott's > > > responses that there are indeed reasons to have more than one > > > scanner. > > > > > > Thank you all > > > > > > Goran Jovanovic > > > The LAN Shoppe > > > > > > > > >> -Original Message- > > >> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > >> [EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, May 17, > > >> 2004 10:03 AM To: [EMAIL PROTECTED] Subject: RE: > > >> [Declude.JunkMail] f-prot > > >> > > >> On 17 May 2004 at 9:13, Goran Jovanovic wrote: > > >> > > >>> For the folks using multiple scanners, do you have any stats on > > >>> how often the secondary scanner found a virus that the first one > > >>> missed? > > >> Hi Goran, > > >> > > >> Here are my latest stats: > > >> Virus Totals: > > >> 441 F-Prot > > >> 412 AVG > > >> 446 McAfee > > >> - > > >> Vunerabilities: > > >> 349 > > >> - > > >> > > >> I update the defs for all every 4 hrs on a staggered schedule. > > >> Because of possible false positives I have found it hard to rank > > >> one particular scanner over another. For me the advantage to have > > >> more than one is one [varies] company will always come out with > > >> protection for a new outbreak before another. The downside is cost > > >> and cpu overhead. For the latter there is an outstanding request to > > >> Scott to kill additional scanning once a scanner detects a virus.. > > >> > > >> -Nick Hayer > > >> > > >> > > >> > > >> > > >>> > > >>> I realize that the cost of F-Prot (which I am using) is quite low > > > and > > >>> others might be as well, so it is not a cost issue but rather a > > >>> "Do > > > I > > >>> really need it?". > > >>> > > >>> Thanx > > >>> > > >>> > > >>> Goran Jovanovic > > >>> The LAN Shoppe > > >>> > > >>> > > >>> > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott > > Fisher Sent: Monday, May 17, 2004 12:49 AM To: > > [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] > > f-prot > > > > I find the Mcafee is the best at detecting viruses within > > > encrupted > > >>> zips. > > Otherwise they are pretty even. > > > > I'd recommend using F-Prot and Mcafee. > > Mcafee for the DOS command line scanner is dirt cheap. I'll see > > if > > > I > > >>> can > > find my price tomorrow. > > > > <<< [EMAIL PROTECTED] 5/15 12:29p >>> > > Can anyone tell me how f-prot compares to mcafee or symantec when > > > it > > >>> comes > > to keeping their database up with new viruses? That just seems > > pretty cheap but hey that's exactly what I'm looking for as long > > > as > > it works well > > >>> :) > > > > thanks, > > > > Larry Craddock > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. --- [This E-mail scanned for > > viruses > > > by > > Declude Virus] > > >>> > > >>> > > >>> --- > > >>> [This E-mail was scanned for viruses by Declude Virus > > >>> (http://www.declude.com)] > > >>> > > >>> ---
[Declude.JunkMail] SPF Question
I thought I had a handle on SPF and I got my domain setup with it back when it first came out. Now I am doing some testing using the Email Header test at http://spftools.infinitepenguins.net/headercheck.php and its saying that mail sent from my server should be suspect for failing SPF. SPF Records: For cousinssubs.com v=spf1 a mx ptr ip4:216.43.194.19 -all For mail.cousinssubs.com v=spf1 a -all Here's a snippet of a header that it says fails: Received: from mail.cousinssubs.com ([216.43.194.27]) by stella.2020its.com with Microsoft SMTPSVC(6.0.3790.0); Tue, 18 May 2004 13:20:27 -0600 Received: from CSCHUBERT [216.43.194.19] by mail.cousinssubs.com with ESMTP (SMTPD32-8.05) id A2CE46001C0; Tue, 18 May 2004 14:23:58 -0500 From: "Christin Schubert" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Does anyone see where I went wrong? Andy Ognenoff Online Systems Administrator Direct: (262)250-2860 [EMAIL PROTECTED] - Cousins Submarines, Inc. http://www.cousinssubs.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Program to extract users and aliases from IMail
Thanks :) Matt Daniel Grotjan wrote: http://www.smartbusiness.net/imail/ -- Original Message -- From: Matt <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Tue, 18 May 2004 15:49:57 -0400 Does anyone know of a program with will extract both the user accounts and the aliases from IMail and put them in a text file? I thought that I had heard of a program like this to be used with IMGate, but everything that I have found only supports user accounts and not aliases. Thanks, Matt -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
Re: [Declude.JunkMail] f-prot
I'd like to second this question. I remember seeing a couple of discussions here where people couldn't agree on which McAfee product to use as the command line scanner with Declude. And, of course, the online stores always emphasize the Windows-based products. So exactly which product is it that's needed? Thanks, Ben - Original Message - From: "John Carter" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 18, 2004 12:56 PM Subject: RE: [Declude.JunkMail] f-prot > Do you have a CDW product number on this? Called and they took forever > to come back with $20+ > > Thanks, > John > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer > Sent: Tuesday, May 18, 2004 9:55 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.JunkMail] f-prot > > On 17 May 2004 at 20:56, Aaron J. Caviglia wrote: > > > Where can we purchase the command line scanner? > Aaron - > > If you are referring to the Mcafee one for $11 - Scott mentioned > "My 1 year McAfee VirusScan Command Line license was $11 through > CDW." > > We paid the same thing off of State contract from Insight. > > -Nick Hayer > > > > Thanks, > > > > Aaron Caviglia > > > > On May 17, 2004, at 8:23 PM, Goran Jovanovic wrote: > > > > >> For the latter there is an outstanding request to Scott to > > >> kill additional scanning once a scanner detects a virus.. > > > > > > So right now if you use multiple scanners when you scan with > > > ScannerA and it finds a virus Declude will still call ScannerB and > > > have it scan as well? > > > > > > Scott pointed out that his McAfee was only $11.00 for the year so > > > the price barrier is "non-existant" and I see from your and Scott's > > > responses that there are indeed reasons to have more than one > > > scanner. > > > > > > Thank you all > > > > > > Goran Jovanovic > > > The LAN Shoppe > > > > > > > > >> -Original Message- > > >> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > > >> [EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, May 17, > > >> 2004 10:03 AM To: [EMAIL PROTECTED] Subject: RE: > > >> [Declude.JunkMail] f-prot > > >> > > >> On 17 May 2004 at 9:13, Goran Jovanovic wrote: > > >> > > >>> For the folks using multiple scanners, do you have any stats on > > >>> how often the secondary scanner found a virus that the first one > > >>> missed? > > >> Hi Goran, > > >> > > >> Here are my latest stats: > > >> Virus Totals: > > >> 441 F-Prot > > >> 412 AVG > > >> 446 McAfee > > >> - > > >> Vunerabilities: > > >> 349 > > >> - > > >> > > >> I update the defs for all every 4 hrs on a staggered schedule. > > >> Because of possible false positives I have found it hard to rank > > >> one particular scanner over another. For me the advantage to have > > >> more than one is one [varies] company will always come out with > > >> protection for a new outbreak before another. The downside is cost > > >> and cpu overhead. For the latter there is an outstanding request to > > >> Scott to kill additional scanning once a scanner detects a virus.. > > >> > > >> -Nick Hayer > > >> > > >> > > >> > > >> > > >>> > > >>> I realize that the cost of F-Prot (which I am using) is quite low > > > and > > >>> others might be as well, so it is not a cost issue but rather a > > >>> "Do > > > I > > >>> really need it?". > > >>> > > >>> Thanx > > >>> > > >>> > > >>> Goran Jovanovic > > >>> The LAN Shoppe > > >>> > > >>> > > >>> > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott > > Fisher Sent: Monday, May 17, 2004 12:49 AM To: > > [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] > > f-prot > > > > I find the Mcafee is the best at detecting viruses within > > > encrupted > > >>> zips. > > Otherwise they are pretty even. > > > > I'd recommend using F-Prot and Mcafee. > > Mcafee for the DOS command line scanner is dirt cheap. I'll see > > if > > > I > > >>> can > > find my price tomorrow. > > > > <<< [EMAIL PROTECTED] 5/15 12:29p >>> > > Can anyone tell me how f-prot compares to mcafee or symantec when > > > it > > >>> comes > > to keeping their database up with new viruses? That just seems > > pretty cheap but hey that's exactly what I'm looking for as long > > > as > > it works well > > >>> :) > > > > thanks, > > > > Larry Craddock > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > > (http://www.declude.com)] > > > > --- > > This E-mail came from the Declude.JunkMail mailing list. To > > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > > type "unsubscribe Declude.JunkMail". The archives can be found > > at http://www.mail-archive.com. --- [This E-mail scanned for > > viruses > > > by > > Dec
[Declude.JunkMail] Permutation Table Generator
For those building TESTSFAILED multi test combination configurations, here's a web site for constructing custom permutation lists with any designators you specify: http://www.subterrane.com/permgen.shtml Dan --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] f-prot
On March 18, McAfee VirusScan for DOS was CDW part number 458401, and it was $11.00 Of course no one wants to jump through any hoops for $11 (It probably costs more for CDW to process the license paperwork than $11 Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 05/18/04 02:56PM >>> Do you have a CDW product number on this? Called and they took forever to come back with $20+ Thanks, John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Tuesday, May 18, 2004 9:55 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] f-prot On 17 May 2004 at 20:56, Aaron J. Caviglia wrote: > Where can we purchase the command line scanner? Aaron - If you are referring to the Mcafee one for $11 - Scott mentioned "My 1 year McAfee VirusScan Command Line license was $11 through CDW." We paid the same thing off of State contract from Insight. -Nick Hayer > > Thanks, > > Aaron Caviglia > > On May 17, 2004, at 8:23 PM, Goran Jovanovic wrote: > > >> For the latter there is an outstanding request to Scott to > >> kill additional scanning once a scanner detects a virus.. > > > > So right now if you use multiple scanners when you scan with > > ScannerA and it finds a virus Declude will still call ScannerB and > > have it scan as well? > > > > Scott pointed out that his McAfee was only $11.00 for the year so > > the price barrier is "non-existant" and I see from your and Scott's > > responses that there are indeed reasons to have more than one > > scanner. > > > > Thank you all > > > > Goran Jovanovic > > The LAN Shoppe > > > > > >> -Original Message- > >> From: [EMAIL PROTECTED] [mailto:Declude.JunkMail- > >> [EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Monday, May 17, > >> 2004 10:03 AM To: [EMAIL PROTECTED] Subject: RE: > >> [Declude.JunkMail] f-prot > >> > >> On 17 May 2004 at 9:13, Goran Jovanovic wrote: > >> > >>> For the folks using multiple scanners, do you have any stats on > >>> how often the secondary scanner found a virus that the first one > >>> missed? > >> Hi Goran, > >> > >> Here are my latest stats: > >> Virus Totals: > >> 441F-Prot > >> 412AVG > >> 446McAfee > >> - > >> Vunerabilities: > >> 349 > >> - > >> > >> I update the defs for all every 4 hrs on a staggered schedule. > >> Because of possible false positives I have found it hard to rank > >> one particular scanner over another. For me the advantage to have > >> more than one is one [varies] company will always come out with > >> protection for a new outbreak before another. The downside is cost > >> and cpu overhead. For the latter there is an outstanding request to > >> Scott to kill additional scanning once a scanner detects a virus.. > >> > >> -Nick Hayer > >> > >> > >> > >> > >>> > >>> I realize that the cost of F-Prot (which I am using) is quite low > > and > >>> others might be as well, so it is not a cost issue but rather a > >>> "Do > > I > >>> really need it?". > >>> > >>> Thanx > >>> > >>> > >>> Goran Jovanovic > >>> The LAN Shoppe > >>> > >>> > >>> > -Original Message- > From: [EMAIL PROTECTED] > [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Scott > Fisher Sent: Monday, May 17, 2004 12:49 AM To: > [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] > f-prot > > I find the Mcafee is the best at detecting viruses within > > encrupted > >>> zips. > Otherwise they are pretty even. > > I'd recommend using F-Prot and Mcafee. > Mcafee for the DOS command line scanner is dirt cheap. I'll see > if > > I > >>> can > find my price tomorrow. > > <<< [EMAIL PROTECTED] 5/15 12:29p >>> > Can anyone tell me how f-prot compares to mcafee or symantec when > > it > >>> comes > to keeping their database up with new viruses? That just seems > pretty cheap but hey that's exactly what I'm looking for as long > > as > it works well > >>> :) > > thanks, > > Larry Craddock > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. --- [This E-mail scanned for > viruses > > by > Declude Virus] > >>> > >>> > >>> --- > >>> [This E-mail was scanned for viruses by Declude Virus > >>> (http://www.declude.com)] > >>> > >>> --- > >>> This E-mail came from the Declude.JunkMail mailing list. To > >>> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > >>> "unsubscribe Declude.JunkMail". The archives can be found at > >>> http://www.mail-archive.com. > >>> > >> > >> > >> --- > >> [This E-mail was scanned for viruses by
Re: [Declude.JunkMail] f-prot
On 18 May 2004 at 13:56, Imail Admin wrote: > I'd like to second this question. I remember seeing a couple of > discussions here where people couldn't agree on which McAfee product > to use as the command line scanner with Declude. And, of course, the > online stores always emphasize the Windows-based products. So exactly > which product is it that's needed? scan.exe - Mcafee's commandline scanner. Here is a link that I just found that has what appears to be a free copy: http://vil.nai.com/vil/virus-4d.asp DAILYSCAN.ZIP contains the scan.exe file. ] [We purchased ours but now maybe its a freebe..] -Nick Hayer > Thanks, > > Ben > > - Original Message - > From: "John Carter" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, May 18, 2004 12:56 PM > Subject: RE: [Declude.JunkMail] f-prot > > > > Do you have a CDW product number on this? Called and they took > > forever to come back with $20+ > > > > Thanks, > > John > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer > > Sent: Tuesday, May 18, 2004 9:55 AM To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] f-prot > > > > On 17 May 2004 at 20:56, Aaron J. Caviglia wrote: > > > > > Where can we purchase the command line scanner? > > Aaron - > > > > If you are referring to the Mcafee one for $11 - Scott mentioned "My > > 1 year McAfee VirusScan Command Line license was $11 through CDW." > > > > We paid the same thing off of State contract from Insight. > > > > -Nick Hayer > > > > > > Thanks, > > > > > > Aaron Caviglia > > > > > > On May 17, 2004, at 8:23 PM, Goran Jovanovic wrote: > > > > > > >> For the latter there is an outstanding request to Scott to kill > > > >> additional scanning once a scanner detects a virus.. > > > > > > > > So right now if you use multiple scanners when you scan with > > > > ScannerA and it finds a virus Declude will still call ScannerB > > > > and have it scan as well? > > > > > > > > Scott pointed out that his McAfee was only $11.00 for the year > > > > so the price barrier is "non-existant" and I see from your and > > > > Scott's responses that there are indeed reasons to have more > > > > than one scanner. > > > > > > > > Thank you all > > > > > > > > Goran Jovanovic > > > > The LAN Shoppe > > > > > > > > > > > >> -Original Message- > > > >> From: [EMAIL PROTECTED] > > > >> [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Nick > > > >> Hayer Sent: Monday, May 17, 2004 10:03 AM To: > > > >> [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] > > > >> f-prot > > > >> > > > >> On 17 May 2004 at 9:13, Goran Jovanovic wrote: > > > >> > > > >>> For the folks using multiple scanners, do you have any stats > > > >>> on how often the secondary scanner found a virus that the > > > >>> first one missed? > > > >> Hi Goran, > > > >> > > > >> Here are my latest stats: > > > >> Virus Totals: > > > >> 441 F-Prot > > > >> 412 AVG > > > >> 446 McAfee > > > >> - > > > >> Vunerabilities: > > > >> 349 > > > >> - > > > >> > > > >> I update the defs for all every 4 hrs on a staggered schedule. > > > >> Because of possible false positives I have found it hard to > > > >> rank one particular scanner over another. For me the advantage > > > >> to have more than one is one [varies] company will always come > > > >> out with protection for a new outbreak before another. The > > > >> downside is cost and cpu overhead. For the latter there is an > > > >> outstanding request to Scott to kill additional scanning once a > > > >> scanner detects a virus.. > > > >> > > > >> -Nick Hayer > > > >> > > > >> > > > >> > > > >> > > > >>> > > > >>> I realize that the cost of F-Prot (which I am using) is quite > > > >>> low > > > > and > > > >>> others might be as well, so it is not a cost issue but rather > > > >>> a "Do > > > > I > > > >>> really need it?". > > > >>> > > > >>> Thanx > > > >>> > > > >>> > > > >>> Goran Jovanovic > > > >>> The LAN Shoppe > > > >>> > > > >>> > > > >>> > > > -Original Message- > > > From: [EMAIL PROTECTED] > > > [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of > > > Scott Fisher Sent: Monday, May 17, 2004 12:49 AM To: > > > [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] > > > f-prot > > > > > > I find the Mcafee is the best at detecting viruses within > > > > encrupted > > > >>> zips. > > > Otherwise they are pretty even. > > > > > > I'd recommend using F-Prot and Mcafee. > > > Mcafee for the DOS command line scanner is dirt cheap. I'll > > > see if > > > > I > > > >>> can > > > find my price tomorrow. > > > > > > <<< [EMAIL PROTECTED] 5/15 12:29p >>> > > > Can anyone tell me how f-prot compares to mcafee or symantec > > > when > > > > it > > > >>> comes > > > to keeping their database up with new viruses? That just > > > seems pretty cheap bu
Re: [Declude.JunkMail] f-prot
Even at 20 bucks its not bad Whats the current part number John? Thanks, Aaron Caviglia On May 18, 2004, at 2:16 PM, Scott Fisher wrote: On March 18, McAfee VirusScan for DOS was CDW part number 458401, and it was $11.00 Of course no one wants to jump through any hoops for $11 (It probably costs more for CDW to process the license paperwork than $11 Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/18/04 02:56PM >>> Do you have a CDW product number on this? Called and they took forever to come back with $20+ Thanks, John --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] f-prot
My McAfee License Grant calls the product Mcfe ViruScan Command Line Std 1 node It is actually a 2 year license, with one year of Prime Support. Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 05/18/04 04:26PM >>> On 18 May 2004 at 13:56, Imail Admin wrote: > I'd like to second this question. I remember seeing a couple of > discussions here where people couldn't agree on which McAfee product > to use as the command line scanner with Declude. And, of course, the > online stores always emphasize the Windows-based products. So exactly > which product is it that's needed? scan.exe - Mcafee's commandline scanner. Here is a link that I just found that has what appears to be a free copy: http://vil.nai.com/vil/virus-4d.asp DAILYSCAN.ZIP contains the scan.exe file. ] [We purchased ours but now maybe its a freebe..] -Nick Hayer > Thanks, > > Ben > > - Original Message - > From: "John Carter" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Tuesday, May 18, 2004 12:56 PM > Subject: RE: [Declude.JunkMail] f-prot > > > > Do you have a CDW product number on this? Called and they took > > forever to come back with $20+ > > > > Thanks, > > John > > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer > > Sent: Tuesday, May 18, 2004 9:55 AM To: [EMAIL PROTECTED] > > Subject: Re: [Declude.JunkMail] f-prot > > > > On 17 May 2004 at 20:56, Aaron J. Caviglia wrote: > > > > > Where can we purchase the command line scanner? > > Aaron - > > > > If you are referring to the Mcafee one for $11 - Scott mentioned "My > > 1 year McAfee VirusScan Command Line license was $11 through CDW." > > > > We paid the same thing off of State contract from Insight. > > > > -Nick Hayer > > > > > > Thanks, > > > > > > Aaron Caviglia > > > > > > On May 17, 2004, at 8:23 PM, Goran Jovanovic wrote: > > > > > > >> For the latter there is an outstanding request to Scott to kill > > > >> additional scanning once a scanner detects a virus.. > > > > > > > > So right now if you use multiple scanners when you scan with > > > > ScannerA and it finds a virus Declude will still call ScannerB > > > > and have it scan as well? > > > > > > > > Scott pointed out that his McAfee was only $11.00 for the year > > > > so the price barrier is "non-existant" and I see from your and > > > > Scott's responses that there are indeed reasons to have more > > > > than one scanner. > > > > > > > > Thank you all > > > > > > > > Goran Jovanovic > > > > The LAN Shoppe > > > > > > > > > > > >> -Original Message- > > > >> From: [EMAIL PROTECTED] > > > >> [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Nick > > > >> Hayer Sent: Monday, May 17, 2004 10:03 AM To: > > > >> [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] > > > >> f-prot > > > >> > > > >> On 17 May 2004 at 9:13, Goran Jovanovic wrote: > > > >> > > > >>> For the folks using multiple scanners, do you have any stats > > > >>> on how often the secondary scanner found a virus that the > > > >>> first one missed? > > > >> Hi Goran, > > > >> > > > >> Here are my latest stats: > > > >> Virus Totals: > > > >> 441 F-Prot > > > >> 412 AVG > > > >> 446 McAfee > > > >> - > > > >> Vunerabilities: > > > >> 349 > > > >> - > > > >> > > > >> I update the defs for all every 4 hrs on a staggered schedule. > > > >> Because of possible false positives I have found it hard to > > > >> rank one particular scanner over another. For me the advantage > > > >> to have more than one is one [varies] company will always come > > > >> out with protection for a new outbreak before another. The > > > >> downside is cost and cpu overhead. For the latter there is an > > > >> outstanding request to Scott to kill additional scanning once a > > > >> scanner detects a virus.. > > > >> > > > >> -Nick Hayer > > > >> > > > >> > > > >> > > > >> > > > >>> > > > >>> I realize that the cost of F-Prot (which I am using) is quite > > > >>> low > > > > and > > > >>> others might be as well, so it is not a cost issue but rather > > > >>> a "Do > > > > I > > > >>> really need it?". > > > >>> > > > >>> Thanx > > > >>> > > > >>> > > > >>> Goran Jovanovic > > > >>> The LAN Shoppe > > > >>> > > > >>> > > > >>> > > > -Original Message- > > > From: [EMAIL PROTECTED] > > > [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of > > > Scott Fisher Sent: Monday, May 17, 2004 12:49 AM To: > > > [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] > > > f-prot > > > > > > I find the Mcafee is the best at detecting viruses within > > > > encrupted > > > >>> zips. > > > Otherwise they are pretty even. > > > > > > I'd recommend using F-Prot and Mcafee. > > > Mcafee for the DOS command line scanner is dirt cheap. I'll > > > see if > > > > I > > > >>> can > > > find my price tomorrow. > > > > > > <<<
RE: [Declude.JunkMail] f-prot
I believe you can also download a trial version for f-prot for Windows, test it out a bit and see how you like it. At least cheap enough to see If you want to spend more :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Carter Sent: Tuesday, May 18, 2004 6:08 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] f-prot I has given CDW 458481 for license and then you download the program. Yea, $20 isn't not bad, but I am so cheap, it hurts. Also regards another post about DOS scanner. This command line scanner is for DOS and Win 2000 & XP. I checked to make sure it had 32 bit mode. See 2nd paragraph of http://www.networkassociates.com/us/_tier2/products/_media/mcafee/ds_com mand_line_and_unix.pdf John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron J. Caviglia Sent: Tuesday, May 18, 2004 4:34 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] f-prot Even at 20 bucks its not bad Whats the current part number John? Thanks, Aaron Caviglia On May 18, 2004, at 2:16 PM, Scott Fisher wrote: > On March 18, McAfee VirusScan for DOS was CDW part number 458401, and > it was $11.00 > Of course no one wants to jump through any hoops for $11 (It probably > costs more for CDW to process the license paperwork than $11 > > Scott Fisher > Director of IT > Farm Progress Companies > [EMAIL PROTECTED] 05/18/04 02:56PM >>> > Do you have a CDW product number on this? Called and they took forever > to come back with $20+ > > Thanks, > John > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
[Declude.JunkMail] Question for Matt... COMBO-DUL test
I tripped across an e-mail from February where you put together a combo test for the DULs. Of course, I can't find that message again. I considering one for PROXY-COMBO with a maxweight so I can avoid the piling on too many points from multiple databases, yet I can still score the -DYNA and -ALL for small scores that may be false positives. Can you expound on your COMBO-DUL test again? Scott Fisher Director of IT Farm Progress Companies --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] f-prot
I has given CDW 458481 for license and then you download the program. Yea, $20 isn't not bad, but I am so cheap, it hurts. Also regards another post about DOS scanner. This command line scanner is for DOS and Win 2000 & XP. I checked to make sure it had 32 bit mode. See 2nd paragraph of http://www.networkassociates.com/us/_tier2/products/_media/mcafee/ds_com mand_line_and_unix.pdf John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Aaron J. Caviglia Sent: Tuesday, May 18, 2004 4:34 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] f-prot Even at 20 bucks its not bad Whats the current part number John? Thanks, Aaron Caviglia On May 18, 2004, at 2:16 PM, Scott Fisher wrote: > On March 18, McAfee VirusScan for DOS was CDW part number 458401, and > it was $11.00 > Of course no one wants to jump through any hoops for $11 (It probably > costs more for CDW to process the license paperwork than $11 > > Scott Fisher > Director of IT > Farm Progress Companies > [EMAIL PROTECTED] 05/18/04 02:56PM >>> > Do you have a CDW product number on this? Called and they took forever > to come back with $20+ > > Thanks, > John > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] Question for Matt... COMBO-DUL test
Scott, The idea behind DUL-COMBO is that a dynamic/residential IP is a dynamic/residential IP, so it doesn't make sense to variably score the IP based on how many DUL tests it hits. What I did was test something like 9 different DUL tests and I excluded the ones that had false positives, primarily for listing business DSL space. I was left with 4 DUL lists that never false positive according to the IP (as far as I can tell), but of course sometimes people do set up servers on DUL space and they get caught with this test. I score the tests with zero points in Global.cfg, but then use a custom filter that will give any and all DUL hits a total score of 8 on my system (mostly hold on 13, sometimes 10). This has worked beautifully. If you wanted to do a PROXY-COMBO test, I'm afraid that this might not be nearly as effective/useful. Take note that I weeded out DUL lists that had any wrong space listed in them, but with open relay lists, there are false positives everywhere, primarily because the zone administrators don't properly retest, expire, or take any action whatsoever to remove old nominations. ORDB is the best known open relay list, and their delisting process is ridiculously convoluted, and even impossible for some depending on their mail server. In a sense, you benefit from multiple hits on open relay-type tests, because the more lists that an IP appears in, the more likely that it is an active open relay, but if you combo-ed it, you would be making the test only as reliable as the most out of date test, and that would change from IP to IP. While I would discourage this, I would encourage combo-ing the FIVETEN open relay tests because they will often hit in doubles or triples, and they will false positive under those circumstances as well (it's a very poor design on their part). If you are looking for opportunity, look for killer patterns such as the combination of an open relay with a hit on SpamCop, or an XBL hit plus SpamCop, and there are dozens of killer combinations that have an extremely minute chance of throwing a false positive. Matt Scott Fisher wrote: I tripped across an e-mail from February where you put together a combo test for the DULs. Of course, I can't find that message again. I considering one for PROXY-COMBO with a maxweight so I can avoid the piling on too many points from multiple databases, yet I can still score the -DYNA and -ALL for small scores that may be false positives. Can you expound on your COMBO-DUL test again? Scott Fisher Director of IT Farm Progress Companies --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ = --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] f-prot
See this post from a little while ago on the Virus list: http://www.mail-archive.com/[EMAIL PROTECTED]/msg09001.html The only changes that I am aware of is that Clam-AV can approach F-Prot's efficiency if you run the daemon and AVG became a tiny bit slower after adding extra support for detecting encrypted archived viruses (they call it "conservative" detection). Everything else pales in comparison to F-Prot when it comes to speed. Since I'm blocking encrypted archives that contain a banned extension, detecting a few extra ones as viruses isn't that big of a deal (especially if I could turn off the bounce). If you're not using F-Prot already as one of two or more scanners, you really have only one choice IMO. Matt Mike Hyslip wrote: I believe you can also download a trial version for f-prot for Windows, test it out a bit and see how you like it. At least cheap enough to see If you want to spend more :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of John Carter Sent: Tuesday, May 18, 2004 6:08 PM To: [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] f-prot I has given CDW 458481 for license and then you download the program. Yea, $20 isn't not bad, but I am so cheap, it hurts. Also regards another post about DOS scanner. This command line scanner is for DOS and Win 2000 & XP. I checked to make sure it had 32 bit mode. See 2nd paragraph of http://www.networkassociates.com/us/_tier2/products/_media/mcafee/ds_com mand_line_and_unix.pdf John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Aaron J. Caviglia Sent: Tuesday, May 18, 2004 4:34 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] f-prot Even at 20 bucks its not bad Whats the current part number John? Thanks, Aaron Caviglia On May 18, 2004, at 2:16 PM, Scott Fisher wrote: On March 18, McAfee VirusScan for DOS was CDW part number 458401, and it was $11.00 Of course no one wants to jump through any hoops for $11 (It probably costs more for CDW to process the license paperwork than $11 Scott Fisher Director of IT Farm Progress Companies [EMAIL PROTECTED] 05/18/04 02:56PM >>> Do you have a CDW product number on this? Called and they took forever to come back with $20+ Thanks, John --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. -- = MailPure custom filters for Declude JunkMail Pro. http://www.mailpure.com/software/ =
Re: [Declude.JunkMail] f-prot
Sure looks like a freebie to me. http://vil.nai.com/vil/virus-4d.asp Is scan.exe a 32 bit app? How do you update the pattern files? Thanks! - Original Message - From: "Nick Hayer" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, May 18, 2004 4:26 PM Subject: Re: [Declude.JunkMail] f-prot > On 18 May 2004 at 13:56, Imail Admin wrote: > > > I'd like to second this question. I remember seeing a couple of > > discussions here where people couldn't agree on which McAfee product > > to use as the command line scanner with Declude. And, of course, the > > online stores always emphasize the Windows-based products. So exactly > > which product is it that's needed? > scan.exe - Mcafee's commandline scanner. > Here is a link that I just found that has what appears to be a free > copy: > http://vil.nai.com/vil/virus-4d.asp > DAILYSCAN.ZIP contains the scan.exe file. > ] > [We purchased ours but now maybe its a freebe..] > > -Nick Hayer > > > > Thanks, > > > > Ben > > > > - Original Message - > > From: "John Carter" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Tuesday, May 18, 2004 12:56 PM > > Subject: RE: [Declude.JunkMail] f-prot > > > > > > > Do you have a CDW product number on this? Called and they took > > > forever to come back with $20+ > > > > > > Thanks, > > > John > > > > > > -Original Message- > > > From: [EMAIL PROTECTED] > > > [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer > > > Sent: Tuesday, May 18, 2004 9:55 AM To: [EMAIL PROTECTED] > > > Subject: Re: [Declude.JunkMail] f-prot > > > > > > On 17 May 2004 at 20:56, Aaron J. Caviglia wrote: > > > > > > > Where can we purchase the command line scanner? > > > Aaron - > > > > > > If you are referring to the Mcafee one for $11 - Scott mentioned "My > > > 1 year McAfee VirusScan Command Line license was $11 through CDW." > > > > > > We paid the same thing off of State contract from Insight. > > > > > > -Nick Hayer > > > > > > > > Thanks, > > > > > > > > Aaron Caviglia > > > > > > > > On May 17, 2004, at 8:23 PM, Goran Jovanovic wrote: > > > > > > > > >> For the latter there is an outstanding request to Scott to kill > > > > >> additional scanning once a scanner detects a virus.. > > > > > > > > > > So right now if you use multiple scanners when you scan with > > > > > ScannerA and it finds a virus Declude will still call ScannerB > > > > > and have it scan as well? > > > > > > > > > > Scott pointed out that his McAfee was only $11.00 for the year > > > > > so the price barrier is "non-existant" and I see from your and > > > > > Scott's responses that there are indeed reasons to have more > > > > > than one scanner. > > > > > > > > > > Thank you all > > > > > > > > > > Goran Jovanovic > > > > > The LAN Shoppe > > > > > > > > > > > > > > >> -Original Message- > > > > >> From: [EMAIL PROTECTED] > > > > >> [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of Nick > > > > >> Hayer Sent: Monday, May 17, 2004 10:03 AM To: > > > > >> [EMAIL PROTECTED] Subject: RE: [Declude.JunkMail] > > > > >> f-prot > > > > >> > > > > >> On 17 May 2004 at 9:13, Goran Jovanovic wrote: > > > > >> > > > > >>> For the folks using multiple scanners, do you have any stats > > > > >>> on how often the secondary scanner found a virus that the > > > > >>> first one missed? > > > > >> Hi Goran, > > > > >> > > > > >> Here are my latest stats: > > > > >> Virus Totals: > > > > >> 441 F-Prot > > > > >> 412 AVG > > > > >> 446 McAfee > > > > >> - > > > > >> Vunerabilities: > > > > >> 349 > > > > >> - > > > > >> > > > > >> I update the defs for all every 4 hrs on a staggered schedule. > > > > >> Because of possible false positives I have found it hard to > > > > >> rank one particular scanner over another. For me the advantage > > > > >> to have more than one is one [varies] company will always come > > > > >> out with protection for a new outbreak before another. The > > > > >> downside is cost and cpu overhead. For the latter there is an > > > > >> outstanding request to Scott to kill additional scanning once a > > > > >> scanner detects a virus.. > > > > >> > > > > >> -Nick Hayer > > > > >> > > > > >> > > > > >> > > > > >> > > > > >>> > > > > >>> I realize that the cost of F-Prot (which I am using) is quite > > > > >>> low > > > > > and > > > > >>> others might be as well, so it is not a cost issue but rather > > > > >>> a "Do > > > > > I > > > > >>> really need it?". > > > > >>> > > > > >>> Thanx > > > > >>> > > > > >>> > > > > >>> Goran Jovanovic > > > > >>> The LAN Shoppe > > > > >>> > > > > >>> > > > > >>> > > > > -Original Message- > > > > From: [EMAIL PROTECTED] > > > > [mailto:Declude.JunkMail- [EMAIL PROTECTED] On Behalf Of > > > > Scott Fisher Sent: Monday, May 17, 2004 12:49 AM To: > > > > [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] > > > > f-prot > > > > > > > > I find the Mcafee is the best at de
RE: [Declude.JunkMail] f-prot
I don't know if it's 32 bit but the .dat files are on the same page and the heading they're under is "VirusScan Version 4.x (or higher) Daily Updates." So it looks like you can get the updated pattern files at the same place. Larry Craddock -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joe Wolf Sent: Tuesday, May 18, 2004 6:40 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.JunkMail] f-prot Sure looks like a freebie to me. http://vil.nai.com/vil/virus-4d.asp Is scan.exe a 32 bit app? How do you update the pattern files? Thanks! --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] "SPAMHEADERS"?
Kevin and Dan- Thanks! -Dave - Original Message - From: "Kevin Bilbee" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, May 17, 2004 2:36 PM Subject: RE: [Declude.JunkMail] "SPAMHEADERS"? > You can use the tool Scott has setup to look up the reason a message has > failed. > > http://www.declude.com/tools/header.php?code=420e > > > Here is the link to your error code. > > > Kevin Bilbee > > > -Original Message- > > From: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Behalf Of Dave Doherty > > Sent: Monday, May 17, 2004 11:26 AM > > To: [EMAIL PROTECTED] > > Subject: [Declude.JunkMail] "SPAMHEADERS"? > > > > > > Hi, > > > > Can anyone tell me why this one failed the SPAMHEADERS test? > > > > -Dave Doherty > > Skywaves, Inc. > > > > > > > > Received: from IlanXP [68.236.177.124] by inettec.com with ESMTP > > (SMTPD32-8.05) id A69B29201E4; Mon, 17 May 2004 13:30:03 -0400 > > From: "Ilan Cyzner" <[EMAIL PROTECTED]> > > To: "'Dave Doherty'" <[EMAIL PROTECTED]> > > Subject: [11] whitelist > > Date: Mon, 17 May 2004 13:32:41 -0400 > > MIME-Version: 1.0 > > Content-Type: multipart/alternative; > > boundary="=_NextPart_000_0066_01C43C13.6E051AD0" > > X-Mailer: Microsoft Office Outlook, Build 11.0.5510 > > Thread-Index: AcQ8NPSd4vuOexbQSj+TGJ7Rqs6ypw== > > X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1409 > > Message-Id: <[EMAIL PROTECTED]> > > X-RBL-Warning: SPAMHEADERS: This E-mail has headers consistent with spam > > [420e]. > > X-RBL-Warning: MAILPOLICE-DYNA-REVDNS: This E-mail came from a potential > > spam source listed in MAILPOLICE-DYNA-REVDNS. > > X-Spam-Tests-Failed: SPAMHEADERS [3], MAILPOLICE-DYNA-REVDNS [8] > > X-Spam-Total-Weight: [11] > > X-Declude-Sender: [EMAIL PROTECTED] [68.236.177.124] > > X-Declude-Spoolname: Df69b029201e40c72.SMD > > X-Note: This E-mail was sent from > > dpvc-68-236-177-124.ny325.east.verizon.net > > ([68.236.177.124]). > > X-RCPT-TO: <[EMAIL PROTECTED]> > > Status: U > > X-UIDL: 343954817 > > > > > > --- > > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.JunkMail". The archives can be found > at http://www.mail-archive.com. > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
