[Declude.Virus] Possible?

2004-04-14 Thread Doug Anderson



I've been looking through the "per user" settings for declude 
virus. Is it possible to have a default config file with a footer and selected 
users not have the footer? We still want them to scan for viruses, just not have 
a footer.



Re: [Declude.Virus] Possible?

2004-04-14 Thread R. Scott Perry

I've been looking through the per user settings for declude virus. Is it 
possible to have a default config file with a footer and selected users 
not have the footer? We still want them to scan for viruses, just not have 
a footer.
That is not currently possible.  The per-user settings only allow you to 
turn scanning on/off for specific users.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Possible?

2004-04-14 Thread Doug Anderson
Can I put it in for a future request

Request : Any configuration possible in virus.cfg can be modified for
specific users and/or domain.
This would include footers, banext, skipext, incoming, and outgoing.


- Original Message - 
From: R. Scott Perry [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, April 14, 2004 11:15 AM
Subject: Re: [Declude.Virus] Possible?



 I've been looking through the per user settings for declude virus. Is
it
 possible to have a default config file with a footer and selected users
 not have the footer? We still want them to scan for viruses, just not
have
 a footer.

 That is not currently possible.  The per-user settings only allow you to
 turn scanning on/off for specific users.

 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail mailservers
 since 2000.
 Declude Virus: Ultra reliable virus detection and the leader in mailserver
 vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.
 ---
 [This E-mail scanned for viruses by Declude Virus]



---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Possible?

2004-04-14 Thread R. Scott Perry

Can I put it in for a future request
It's already there.  :)

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] Scott, what do you use to generate this report

2004-04-14 Thread Bill Landry
- Original Message - 
From: Bill [EMAIL PROTECTED]

 The very last line shows the total message count including messages that
 did not fail any tests.  My program, as it is now, does not look at any
 of the declude actions, just the tests failed.  I primarily use it is to
 determine if any of the tests that I am using have quit working or how
 effective a new test or filter file is.

 Why don't you send me a .txt file of what you think that the output
 should be and I will consider it.

Rather than total message counts, I was just looking for a total count of
messages that immediately got delivered, not including messages that were
held or deleted.  It not a big deal, I simply added a line to my config
files that adds a log entry for messages that get delivered:

Global.cfg:
WEIGHT-OK  weightrange  x   x   -50  15

$default$.junkmail:
WEIGHT-OK   LOG

This accomplishes the same thing, and give me an output (sample) like the
following:

 WEIGHT-OK  1685  21  1967  20
   WEIGHT-HOLD  189  2  204  2
 WEIGHT-DELETE  5663  73  7030  74
 Message Count  7752   9436

But thanks for considering my request.

Regards,

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.JunkMail] [Declude.Virus] Scott, what do you use to generate this report

2004-04-14 Thread Bill

I have been using this program for months with no problem but you guys
managed to break it in a matter of hours. :)

I guess that I should have called it a BETA release!  Anyway, that's
what I call it now (v1.4B).  I have fixed the problems that you have
pointed out to me and have added the following:

1) The output file (wamlog.txt) goes in the same folder as the log file.
2) There is a progress counter so you know it is working.

If you find any more problems PLEASE let me know.

Thanks,
Bill

The new version is as of 11:40 am CDT 4/14/04.

www.wamusa.com/wamtools

 
 Hi,
 
 I have a utility to do a quick analysis of my decMMDD.log 
 file to discover test effectiveness.  If anyone would like to 
 use it, I have it
 available for free from my website:  http://www.wamusa.com/wamtools   
 
 The program is designed for LOGLEVEL MID but it may work for 
 other levels.  My system analyzed this 120Mb decMMDD.log in 
 less than one minute.  This is a sample output:
 
 
 Message Recipient
 Test Name Fail Count %Fail Count %
 
  WEIGHT10  116362   96 169684   96
  SNIFFER2  114790   94 167322   95
  WEIGHT15  112700   93 165299   94
  WEIGHT20  108443   89 159758   91
 WEIGHTDEL  108443   89 159758   91
   SPAMCOP   84740   70 129602   73
   SBL   52552   43  53879   30
  AHBL   48506   40  57094   32
   CBL   46445   38  89827   51
  DSBL   39527   32  77743   44
SORBS-DUHL   29673   24  58427   33
REVDNS   28996   23  41544   23
BADHEADERS   27493   22  34922   19
SORBS-SPAM   25119   20  27995   15
  NOPOSTMASTER   22488   18  46530   26
   NOABUSE   21746   17  42732   24
   SPAMHEADERS   19613   16  20587   11
  SPAM-DOMAINS   15263   12  33776   19
   ROUTING   120419  25060   14
   FOREIGN   100988  163309
 GIBBERISH90727   99325
   DSN84847  137557
SORBS-HTTP65845  124597
   SORBS-SOCKS65085  126977
   SPFFAIL49544   65273
BLITZEDALL33502   59913
BASE6422521   29561
  MAILFROM16841   28411
  COMMENTS13281   20561
  MYFILTERFAIL11590   17230
  WAMO 58506090
  MYFILTERPASS 5120   12390
SORBS-MISC 50409230
SORBS-SMTP 4450   11320
   OBFUSCATION 36004570
  ORDB 31606540
 SORBS-WEB 31605140
  SORBS-ZOMBIE 28002800
   SPFPASS 20802340
  BONDEDSENDER  620 620
   @LINKED  100 140
HABEAS   40  40
  WAMCHECK   10  20
 
 Message Count  120934  175163

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.