RE: [Declude.Virus] Current Version 3.05.11??

2005-10-27 Thread Marcel Sangers
We have the same problem. 3.05.9 seems to be lots faster than
3.05.11/12. We had a problem with the mailserver so Declude had to
process about 2000 msgs at once. With 3.05.12 that takes way too much
time, we did a rollback to 3.05.9 and the email flows very fast.

How is this possible?

We use Declude Spam+Virus 

THREADS   15

F+Prot+AVG
Sniffer




-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Namens Harry Vanderzand
Verzonden: vrijdag 21 oktober 2005 22:49
Aan: Declude.Virus@declude.com
Onderwerp: RE: [Declude.Virus] Current Version 3.05.11??

Changing from 305.9 to 3.05.11 changed the behaviour of processing

Processing slowed down

With 3.05.09 my proc directory stays virtually empty whereas with 11 it
did
not get emptied as entries arrived.

Went back to .9

My declude.cfg is:
threads 20
waitformail 500
waitforthreads 1500
waitbetweenthreads 100

Harry Vanderzand 
inTown Internet & Computer Services 
11 Belmont Ave. W., Kitchener, ON,N2M 1L2
519-741-1222

 

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of Robert 
> Grosshandler
> Sent: Friday, October 21, 2005 4:23 PM
> To: Declude.Virus@declude.com
> Subject: [Declude.Virus] Current Version 3.05.11??
> 
>  
> Hi
> 
> Are there any release notes for this?  It went from .09 this 
> morning to .11 about five minutes ago.
> 
> What's up?
> 
> Thanks,
> 
> Rob
> 
> ---
> [This E-mail scanned for viruses by Declude Virus]
> 
> ---
> This E-mail came from the Declude.Virus mailing list.  To 
> unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
> type "unsubscribe Declude.Virus".The archives can be found
> at http://www.mail-archive.com.
> 
> 


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] .vir directories in spool\proc

2005-09-26 Thread Marcel Sangers
Title: .vir directories in spool\proc






Hi all,

I use Declude (beta) JM and AV with F-Prot and AVG. Daily I find multiple .vir directories in my \spool\proc directory. Why is this?

Regards,

Marcel




[Declude.Virus] AVAFTERJM ?

2005-09-22 Thread Marcel Sangers
Title: AVAFTERJM ?






Hello all,

We make use of the latest Declude version (spam+virus) Pro. What does the AVAFTERJM option do? Antivirus scanning after Junkmail I suppose? What is the default? First scanning viruses followed by scanning for spam?

Due to the large amounts of spam I would suggest first filtering out spam followed by possible viruses? Is that correct?

Regards,

Marcel




Re: [Declude.Virus] Imail 8.21 with Declude Virus & Spam, Sniffer, AVG and F-Prot

2005-09-15 Thread Marcel Sangers
For your information, this is about the networking errors of 1(!) day...

Occurrences / Description
955 10054=20
382 net read error 10038=20
354 net read error 10053=20
58 net read error 10054=20
34 10053



- Original Message - 
From: "Marcel Sangers" <[EMAIL PROTECTED]>
To: 
Sent: Thursday, September 15, 2005 5:22 PM
Subject: Imail 8.21 with Declude Virus & Spam, Sniffer, AVG and F-Prot


> Hi all,
>
> We've got a Imail installation on a co-located Dell Poweredge PIII 1000
MHz
> server with 1Gb of memory, win2k server.
>
> Last night we've upgraded to Imail 8.21 from 8.05. Works fine, but still
> have some other problems which I also had with 8.05. I hoped that the
> upgrade was the solution.
>
> Some problems / issues / questions:
>
> * Processor load: sometimes for minutes a processor load of 100% (lots of
> declude.exe, avgscan.exe and like l08w987.exe (from sniffer) processes)
AND
> a System process that fills up to 100%. In those periods there is no
System
> Idle processor time.
>
> * Recv.blocking call cancelled: it seems that to particular domains we get
a
> recv.blocing call cancelled after a few minutes or MX connect failed. What
> could be the problem? When I do a speedtest(.nl) from this server the
> (upload) speed is very low compared to other servers, in the same network
> segment at the same backbone, behind the same firewall.
>
> * Need to upgrade declude? Current version in use is 1.79
>
> * Need to upgrade AVG or F-Prot (7.0.344 and F-Prot 3.15)
>
> * Advise to use other virusscanners in combination with Imail & Declude
> Virus?
>
> * Sniffer (Sortmonster) uses lots of processor load? Also at your place?
>
> Maybe you could help me out on this stuff?
>
> Best regards,
> Marcel Sangers
>
>

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Imail 8.21 with Declude Virus & Spam, Sniffer, AVG and F-Prot

2005-09-15 Thread Marcel Sangers
Hi all,

We've got a Imail installation on a co-located Dell Poweredge PIII 1000 MHz
server with 1Gb of memory, win2k server.

Last night we've upgraded to Imail 8.21 from 8.05. Works fine, but still
have some other problems which I also had with 8.05. I hoped that the
upgrade was the solution.

Some problems / issues / questions:

* Processor load: sometimes for minutes a processor load of 100% (lots of
declude.exe, avgscan.exe and like l08w987.exe (from sniffer) processes) AND
a System process that fills up to 100%. In those periods there is no System
Idle processor time.

* Recv.blocking call cancelled: it seems that to particular domains we get a
recv.blocing call cancelled after a few minutes or MX connect failed. What
could be the problem? When I do a speedtest(.nl) from this server the
(upload) speed is very low compared to other servers, in the same network
segment at the same backbone, behind the same firewall.

* Need to upgrade declude? Current version in use is 1.79

* Need to upgrade AVG or F-Prot (7.0.344 and F-Prot 3.15)

* Advise to use other virusscanners in combination with Imail & Declude
Virus?

* Sniffer (Sortmonster) uses lots of processor load? Also at your place?

Maybe you could help me out on this stuff?

Best regards,
Marcel Sangers


---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] .xls files blocked bij .exe filter

2004-08-24 Thread Marcel Sangers
My client is using Outlook Express and the probleem seems to appear after a
(recent) windows update:

outlook express  6.00.2800.1123
windows 98 4.10.a  (second edition)

Excel 2000, build 9.0.2812






-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] R. Scott Perry
Verzonden: dinsdag 24 augustus 2004 17:42
Aan: [EMAIL PROTECTED]
Onderwerp: Re: [Declude.Virus] .xls files blocked bij .exe filter



>OK Which mail clients are problematic with this issue? At least knowing
>this will allow me to pass along this info to clients and encourage them
>to use the correct email client.

I'm not aware of any mail clients that have that problem.  Your user is
probably running a beta program (or one written in house).

-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] .xls files blocked bij .exe filter

2004-08-23 Thread Marcel Sangers
Hi all,

At regulary basis I have some .xls files blocked by my Declude spam filter.
I would like to ban only .exe executables, but for some reason sometimes
.xls files are also blocked.

08/23/2004 17:07:54 Q0844219200e6886e MIME file:
[text/html][quoted-printable; Length=290 Checksum=23608]
08/23/2004 17:07:54 Q0844219200e6886e Found file with mismatched extensions
[tm 2003 B.I.C..xls-  "tm2003B.I.C..xls"]; assuming .exe
08/23/2004 17:07:54 Q0844219200e6886e MIME file: mismatched.exe [base64;
Length=70144 Checksum=2709498]
08/23/2004 17:07:54 Q0844219200e6886e Banning file with exe extension
[application/vnd.ms-excel].
08/23/2004 17:07:55 Q0844219200e6886e Scanned: Banned file extension. [MIME:
3 70672]
08/23/2004 17:07:55 Q0844219200e6886e From: [EMAIL PROTECTED] To:
[EMAIL PROTECTED]
08/23/2004 17:07:55 Q0844219200e6886e Subject:

Could someone please help me? Is there something wrong with those xls files?

Regards,
Marcel

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] Error in virus scanner AVG report.txt

2004-08-11 Thread Marcel Sangers
okay, seems to help a little, but I sill also have the following error:

08/11/2004 11:11:28 Qe2af63ca00b859b7 Could not find report file
D:\IMAIL\spool\De2af63ca00b859b7.vir\report.txt.
08/11/2004 11:11:28 Qe2af63ca00b859b7 Error 2 in virus scanner 1.

What does the report.txt option? Do I have to delete this option?


-Oorspronkelijk bericht-
Van: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Matt
Verzonden: dinsdag 10 augustus 2004 20:45
Aan: [EMAIL PROTECTED]
Onderwerp: Re: [Declude.Virus] Error in virus scanner AVG report.txt


Take out the /NOEXPORT switch and then check your logs after it runs for
a bit.  There are also problems with /ARCW and /RTW that were causing it
to fail with an error 8 only on zip files, but they were supposed to fix
that soon in a new version of AVG.  If that isn't fixed, AVG won't be
protecting you from viruses in zip files, though this might not be a big
deal if you have 2 scanners configured.

Matt



Marcel Sangers wrote:

>In my logfiles I find someting like:
>
>08/10/2004 19:26:59 Q055786ca007cc13b Could not find report file
>D:\IMAIL\spool\D055786ca007cc13b.vir\report.txt.
>08/10/2004 19:26:59 Q055786ca007cc13b Error 2 in virus scanner 1.
>08/10/2004 19:27:00 Q055786ca007cc13b Scanned: Error in virus scanner.
>[MIME: 1 664]
>
>This is the important piece of my virus.cfg file:
>
>SCANFILE1  C:\Progra~1\Grisoft\AVG7\avgscan.exe /NOMEM /NOBOOT /NOHIMEM
>/NOEXPORT /NOSELF /ARC /RT /ARCW /RTW /MACROW /REPORT=report.txt
>VIRUSCODE1 6
>REPORT1identified
>
>
>This is AVG 7.0 information:
>
>Program:
>File version: 7.0.0.232
>
>Version:
>Program version 7.0.262
>Virus base: 264.5.0
>Release date: 8/9/2004
>
>Could someone please help me out?
>
>
>Met vriendelijke groet,
>
>Marcel Sangers
>Project Management
>Traction Information Technologies B.V.
>Bedrijvenweg 6a
>1424 PX De Kwakel
>The Netherlands
>
>tel. +31 (0)297 386850
>fax. +31 (0)297 386851
>
>http://www.traction-it.nl
>
>---
>The information transmitted is intended only for the person or entity to
>which it is adressed and may contain confidential and/or privileged
>information. Any review, retransmission, dissemination or other use of, or
>taking of any action in reliance upon this information by persons or
>entities other than the intended recipient - without the explicit
permission
>by Traction IT B.V. - is prohibited. Traction IT B.V. is neither liable for
>the
>proper transmission of this communication nor for any delay in its receipt.
>---
>
>---
>[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]
>
>---
>This E-mail came from the Declude.Virus mailing list.  To
>unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
>type "unsubscribe Declude.Virus".The archives can be found
>at http://www.mail-archive.com.
>
>
>
>

--
=
MailPure custom filters for Declude JunkMail Pro.
http://www.mailpure.com/software/
=


---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] Error in virus scanner AVG report.txt

2004-08-10 Thread Marcel Sangers
In my logfiles I find someting like:

08/10/2004 19:26:59 Q055786ca007cc13b Could not find report file
D:\IMAIL\spool\D055786ca007cc13b.vir\report.txt.
08/10/2004 19:26:59 Q055786ca007cc13b Error 2 in virus scanner 1.
08/10/2004 19:27:00 Q055786ca007cc13b Scanned: Error in virus scanner.
[MIME: 1 664]

This is the important piece of my virus.cfg file:

SCANFILE1  C:\Progra~1\Grisoft\AVG7\avgscan.exe /NOMEM /NOBOOT /NOHIMEM
/NOEXPORT /NOSELF /ARC /RT /ARCW /RTW /MACROW /REPORT=report.txt
VIRUSCODE1 6
REPORT1identified


This is AVG 7.0 information:

Program:
File version: 7.0.0.232

Version:
Program version 7.0.262
Virus base: 264.5.0
Release date: 8/9/2004

Could someone please help me out?


Met vriendelijke groet,

Marcel Sangers
Project Management
Traction Information Technologies B.V.
Bedrijvenweg 6a
1424 PX De Kwakel
The Netherlands

tel. +31 (0)297 386850
fax. +31 (0)297 386851

http://www.traction-it.nl

---
The information transmitted is intended only for the person or entity to
which it is adressed and may contain confidential and/or privileged
information. Any review, retransmission, dissemination or other use of, or
taking of any action in reliance upon this information by persons or
entities other than the intended recipient - without the explicit permission
by Traction IT B.V. - is prohibited. Traction IT B.V. is neither liable for
the
proper transmission of this communication nor for any delay in its receipt.
---

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".The archives can be found
at http://www.mail-archive.com.


MISSING_REVERSE_DNS:Re: [Declude.Virus] Re well i still can't seem to get it right

2002-01-31 Thread Marcel Sangers

I think it's because there is an ENTER (/n,newline) in the virus command
line!?

--- Marcel ---


- Original Message -
From: "Paul Ingram" <[EMAIL PROTECTED]>
To: "Declude. Virus" <[EMAIL PROTECTED]>
Sent: Thursday, January 31, 2002 10:36 PM
Subject: [Declude.Virus] Re well i still can't seem to get it right


> I changed the lines as you had in the email and still test virus comes
> through. So I take out the line and works fine.
> So here is a copy of the config again and the log with both scanners when
it
> is not catching and a log with the original setup that works
>
> Paul Ingram
> CI Travel, IT Systems Analyst
> 888.461.0022 ext.826
> mailto:[EMAIL PROTECTED]
>
>
>
>

---
[This E-mail scanned for viruses by Declude Virus]

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type "unsubscribe Declude.Virus".  You can E-mail
[EMAIL PROTECTED] for assistance.  You can visit our web
site at http://www.declude.com .