RE: [Declude.Virus] Couldn't open headers datafile

2004-05-19 Thread John Tolmachoff \(Lists\)
What is your configure line for calling the AV scanner?

Have you run the Declude diagnostic? Go to a command prompt, change to the
Imail directory, and type in declude -diag without the quotes. Any errors
regarding virus?

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 On Behalf Of Doug Rompasky
 Sent: Tuesday, May 18, 2004 8:21 PM
 To: [EMAIL PROTECTED]
 Subject: [Declude.Virus] Couldn't open headers datafile
 
 Hello,
 
 We are currently trying to use imail v8.11, declude(virus) 1.75, and
netshield 4.5 all
 on Windows 2000 Server.  We first started with imail 7.07 which worked
fine and then
 we did an in place upgrade of imail to said v8.11 at this point we keep
recieving this
 error messages
 05/18/2004 13:55:07 Qa25b0134ecbc Couldn't open headers datafile
 05/18/2004 13:55:07 Qa25b0134ecbc Error opening mime file
 C:\IMail\spool\Da25b0134ecbc.GSC
 05/18/2004 13:55:07 Qa25b0134ecbc Scanned: Error starting scanner
 
 I've reinstalled everything twice to make sure I didn't do something
wrong, i've
 disabled the on-access scan on netshield and put c:\imail and
c:\winnt\temp in the
 exclude list for netshield as well.  But none of this seems to help.  Any
help would be
 greatly appreciated.
 
 Douglas
 [AUTOMATED NOTE: Your mail server [207.41.72.15] is missing a reverse DNS
entry.
 All Internet hosts are required to have a reverse DNS entry. The missing
reverse DNS
 entry will cause your mail to be treated as spam on some servers, such as
AOL.]
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] TOT TCP/IP Protocol driver service

2004-05-19 Thread Lyndon Eaton
This is totally off topic but hope you can help!

Client has W2K server, with modem  ADSL. The ADSL connection has been
down for a few days so I was going to setup the modem for internet
access. 

Before doing so I installed Norton Internet Security so that the modem
connection would be protected.

After the restart the machine sits on 'Preparing Network Connections'
screen. I booted in safe mode so that I may un-install Norton Internet
Security, but because the Windows Installer service does not run in Safe
mode I can not uninstall the software. The event viewer also shows a lot
of services failing to start because the TCP/IP protocol driver has
failed to start.

I presume some network driver file has been overwritten or a registry
entry changed. Does anybody know what I can do to revive the TCP/IP
protocol driver?

Many thanks!!!
Lyndon.

 



Email checked by UKsubnet anti-virus service
To prevent email abuse  block spam
contact [EMAIL PROTECTED]
Tel: +44(0)8712360301 Web: www.uksubnet.net
Fax: +44(0)8712360300

Powered by UKsubnet Internet Service Provider
Business to Business Internet (ISP)


---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] TOT TCP/IP Protocol driver service

2004-05-19 Thread John Tolmachoff \(Lists\)
While in safe mode, you can disable services and view the event log.

John Tolmachoff
Engineer/Consultant/Owner
eServices For You

 -Original Message-
 From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
 On Behalf Of Lyndon Eaton
 Sent: Wednesday, May 19, 2004 5:17 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Declude.Virus] TOT TCP/IP Protocol driver service
 
 This is totally off topic but hope you can help!
 
 Client has W2K server, with modem  ADSL. The ADSL connection has been
 down for a few days so I was going to setup the modem for internet
 access.
 
 Before doing so I installed Norton Internet Security so that the modem
 connection would be protected.
 
 After the restart the machine sits on 'Preparing Network Connections'
 screen. I booted in safe mode so that I may un-install Norton Internet
 Security, but because the Windows Installer service does not run in Safe
 mode I can not uninstall the software. The event viewer also shows a lot
 of services failing to start because the TCP/IP protocol driver has
 failed to start.
 
 I presume some network driver file has been overwritten or a registry
 entry changed. Does anybody know what I can do to revive the TCP/IP
 protocol driver?
 
 Many thanks!!!
 Lyndon.
 
 
 
 
 
 Email checked by UKsubnet anti-virus service
 To prevent email abuse  block spam
 contact [EMAIL PROTECTED]
 Tel: +44(0)8712360301 Web: www.uksubnet.net
 Fax: +44(0)8712360300
 
 Powered by UKsubnet Internet Service Provider
 Business to Business Internet (ISP)
 
 
 ---
 [This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
 
 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Correct me if I am wrong

2004-05-19 Thread Goran Jovanovic








I believe this is correct.



If a virus in an attachment is detected
then the whole message will be held and the recip.eml notification will be sent
out.



Is there a way to allow the e-mail to go
through to the user with a notification that the attachment was stripped? 









Goran Jovanovic

 The LAN Shoppe








image001.gif

RE: [Declude.Virus] Correct me if I am wrong

2004-05-19 Thread John Tolmachoff \(Lists\)








99.99% of virus infected e-mails are
bogus anyways, so why would you want to let it through?



Oh, the answer to your question is no.





John Tolmachoff

Engineer/Consultant/Owner

eServices For You







-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Goran Jovanovic
Sent: Wednesday, May
 19, 2004 2:58 PM
To: [EMAIL PROTECTED]
Subject: [Declude.Virus] Correct
me if I am wrong



I believe this is correct.



If a virus in an attachment is detected
then the whole message will be held and the recip.eml notification will be sent
out.



Is there a way to allow the e-mail to go
through to the user with a notification that the attachment was stripped? 









Goran Jovanovic

 The LAN Shoppe










image001.gif

[Declude.Virus] ANN: Availability of exchange2aliases 0.5.00, useful script for Exchange users

2004-05-19 Thread Sanford Whiteman
All,

I've  posted  exchange2aliases,  a  VBScript  that  helps automate the
cumbersome  task  of  rejecting  unknown users for remote domains. The
script  is  designed specifically for those running IMail MXs, with or
without Declude, in front of Exchange mailbox servers.

In  order to use the script, you first change your remote domains from
classical  store-and-forward  domains  with  no local presence (save a
HOSTS entry) to IMail virtual hosts with no users, a simple change.

You'd   then   create   a  new  recipient  policy  for  your  Exchange
organization  that  allows  users  to  receive  mail  at, for example,
exchange.example.com   in   addition   to  their  primary  address  at
example.com  (many Exchange setups already have such a policy in place
because they use a .local AD domain). Make sure that IMail sees the MX
for  exchange.example.com  as  the  Exchange  server's internal IP, or
hard-code the mailroute in HOSTS if you want.

When  you  then  run  Exchange2aliases, either scheduled or ad hoc, it
will  scan  all  of the Exchange addresses for AD and SMTP domains you
specify and create corresponding IMail aliases for each--thus allowing
for  envelope rejection on the IMail box. By default, exchange2aliases
clears  and replaces the entire _aliases table in IMail every time you
run  it,  which  would  typically  be the preferred behavior, but this
behavior may be disabled using a command-line switch.

The  exchange2aliases  command-line  options  are  visible  by running
'cscript   exchange2aliases.vbs'  after  your  download.  Please  post
support  questions  as [OT] to the IMail or Declude forums to create a
public archive.

Regards,

Sandy

P.S.  Also  please  note  a  URL  change  for  SPAMC32  as shown in my
signature.



Sanford Whiteman, Chief Technologist
Broadleaf Systems, a division of
Cypress Integrated Systems, Inc.
e-mail: [EMAIL PROTECTED]

SpamAssassin plugs into Declude!
  http://www.mailmage.com/products/software/freeutils/SPAMC32/download/release/

Defuse Dictionary Attacks: Turn Exchange Addresses into IMail Aliases!
  
http://www.mailmage.com/products/software/freeutils/exchange2aliases/download/release/

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.