Re: [Declude.Virus] [Declude.JunkMail] Declude v1.35 virus not banning files
I have updated to Declude 1.35 and my virus.cfg file contains the following lines: BANEXT scr BANEXT pif BANEXT com BANEXT exe BANEXT vbs However, when I send a message (from an outside account) containing a .exe attachment. The attachment is scanned, then sent to me normally. Why is it not banned? It should be banned. If you use the debug mode (change the LOGLEVEL LOW line in \IMail\Declude\virus.cfg to LOGLEVEL DEBUG), and then send an .exe file through, and then set it back to LOGLEVEL LOW, I can take a look at the log file to see what is happening. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus] Kudos from Customers!!
No. That is not what it means. We notify the intended recipient (and include the headers) whenever we catch a virus or quarantine an e-mail and attachment. Both the email and the attachment are quarantined. Wednesday, January 30, 2002, 1:38:26 PM, gf [EMAIL PROTECTED] wrote: g Do you mean that is it possible to quarantine just the attachments and let g the message to be delivered? g If yes how can I apply this function? g Thank you g Giuseppe g - Original Message - g From: Don Brown [EMAIL PROTECTED] g To: [EMAIL PROTECTED] g Sent: Wednesday, January 30, 2002 8:14 PM g Subject: [Declude.Virus] Kudos from Customers!! I just thought I would share this with the group. It is little things like this that can really make my day. Below is one, of many, unsolicited kudos from customers, which is a direct result of running Declude. This one is particular to quarantining attachments, which helped us block the new party virus until the virus companies had identified it and incorporated its signature into the definition file. Not 2 or 3 hours ago Mark and I talked about how we appreciated the g service you provide in helping guard against viruses. You do what you think is best. Thanks again Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus g (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . = [This message has been scanned for viruses and it is virus-free] [Questo messaggio e' stato analizzato ed e' esente da virus] g = g [This message has been scanned for viruses and it is virus-free] g [Questo messaggio e' stato analizzato ed e' esente da virus] g --- g [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] g This E-mail came from the Declude.Virus mailing list. To g unsubscribe, just send an E-mail to [EMAIL PROTECTED], and g type unsubscribe Declude.Virus. You can E-mail g [EMAIL PROTECTED] for assistance. You can visit our web g site at http://www.declude.com . Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus] Declude v1.35released
I copied the v.1.35 executable into my Declude directory and sent myself a test virus from the Declude website and it is still noting version 1.34. I then went ahead and executed the declude.exe and stopped and started the SMTP service. Any suggestions as to why it is not stating that I am running v1.35. Example: Headers: Received: from www.declude.com [207.174.233.121] by lib.naperville.il.us (SMTPD32-7.05) id AE5A4D01DA; Wed, 30 Jan 2002 14:58:02 -0600 X-Web-Originating-IP: 207.32.153.133 Message-Id: 4.3.2.7.0.20001102202253.00adb610@localhost X-Mailer: QUALCOMM Windows Eudora Version 4.3.2 Date: Thu, 02 Nov 2000 20:23:17 -0500 From: WebMaster [EMAIL PROTECTED] To: User [EMAIL PROTECTED] Subject: Test eicar.com file [eicarnoquote] Mime-Version: 1.0 Content-Type: multipart/mixed; BounDary==_307115168==_ Number of recipients: 1 Declude version: 1.34 Emily Gossett -- Original Message -- From: R. Scott Perry [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Wed, 30 Jan 2002 10:53:17 -0500 Where do we obtain the new release, Declude v1.35. Do you just run the executable to update? You can always find the latest version at http://www.declude.com/virus/manual.htm . All you need to do is replace the .exe file; you don't even need to run it. However, note that there is an issue that has been reported with v1.35 where certain features may not work (ones that will not be in the new Lite version, such as BANCLSID). We should have a new release out later today to take care of that. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re[2]: MISSING_REVERSE_DNS:Re: [Declude.Virus] Decludev1.35released
Hi Emily, make sure you are deleting it out of the \IMAIL\ folder (not the \IMAIL\DECLUDE\ folder... AND then make sure you put the NEW 1.35 version into your \IMAIL\ folder (NOT the \imail\declude\ folder). Maybe you are doing this but from what you say below kind of makes me think you are doing this out of your \imail\declude\ folder. Also, Scott said to do this a few e-mails ago... see below. -jason - - - - - - - - - - - - - - - - - - Wednesday, January 30, 2002, 3:18:46 PM, you wrote: EG Am I missing the bus here? I deleted declude.exe from my EG Declude folder, I copied the declude.exe from the link in this EG email and it is still coming up saying that I am running v1.34. EG Again, I tried executing it and stopping and starting the SMTP EG service. - - - - - - - - - - - - - - - - - - Wednesday, January 30, 2002, 3:06:30 PM, you wrote: RSP Then, download the Declude.exe file (from RSP http://www.declude.com/virus/manual.htm ), and place it in the \IMail\ RSP directory. Then, you will be running 1.35. RSP -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Problem with FreeMail
Why did these get a Freemail weight of 4? 01/30/2002 15:24:40 Q6475032 BADHEADERS:4 SPAMHEADERS:4 nFREEMAIL:4 . Total weight = 12 01/30/2002 15:24:40 Q6475032 Msg failed WEIGHT10 (Weight of 12 exceeds the limit of 10.). 01/30/2002 15:24:40 Q6475032 Subject: omain Transfer Request for xxx 01/30/2002 15:24:40 Q6475032 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 01/30/2002 15:24:40 Q6475032 Message FAILED: Deleting message! 01/30/2002 15:24:41 Q6475148 BADHEADERS:4 SPAMHEADERS:4 nFREEMAIL:4 . Total weight = 12 01/30/2002 15:24:41 Q6475148 Msg failed WEIGHT10 (Weight of 12 exceeds the limit of 10.). 01/30/2002 15:24:41 Q6475148 Subject: omain Transfer Request for xxx 01/30/2002 15:24:41 Q6475148 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] 01/30/2002 15:24:41 Q6475148 Message FAILED: Deleting message! Global Config: FREEMAILfromfilex:\imail\declude\freemail.lst x x 4 0 FreeMail.lst: @yahoo.com @hotmail.com @excite.com Running Version 1.35 Thanks, Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED] http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
Re: MISSING_REVERSE_DNS:Re: [Declude.Virus]Decludev1.35released
Shouldn't declude.exe be in the Imail folder instead of the declude folder? Yes -- that is the problem. Good catch. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type unsubscribe Declude.Virus. You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
