RE: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread Tim Collins \(Home\)
So why put them in the virus folder?
There is no way (that I know of) to requeue these messages?  ... Or fix
the vulnerability... True?
What is Horizon's best practices theory on how to deal with messages
that land in the virus folder?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Tuesday, October 19, 2004 5:29 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] DELETEVIRUSES Not working.



It seems that DELETEVIRUSES ON isn't working in Declude Virus 1.81

I have it set to:

DELETEVIRUSES   ON

In my virus.cfg but they're staying in my E:\IMail\spool\virus folder.

That is by design. Viruses are getting deleted, other E-mails 
(vulnerabilities and banned file extensions) are not, as they usually do

not contain viruses or other dangerous code.


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in
mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread R. Scott Perry

So why put them in the virus folder?
There is no way (that I know of) to requeue these messages?
Requeueing them is easy; copy the D*.SMD file and matching Q*.SMD file from 
the \IMail\spool\virus directory to the \IMail\spool directory.

 ... Or fix the vulnerability...
You probably could do that, but the effort involved would likely outweigh 
the benefits.

What is Horizon's best practices theory on how to deal with messages
that land in the virus folder?
It's kind of like having a best practices on dealing with spam -- there 
isn't a one size fits all approach.

Just as some organizations are fine deleting all viruses and 
vulnerabilities, others need to archive them just to be safe.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread John Carter
Is there any chance of getting a DELETEVULNERABILITIES or a separate
directory for them?

John

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Tuesday, October 19, 2004 6:29 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] DELETEVIRUSES Not working.


It seems that DELETEVIRUSES ON isn't working in Declude Virus 1.81

I have it set to:

DELETEVIRUSES   ON

In my virus.cfg but they're staying in my E:\IMail\spool\virus folder.

That is by design. Viruses are getting deleted, other E-mails 
(vulnerabilities and banned file extensions) are not, as they usually do 
not contain viruses or other dangerous code.


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread Nick
On 19 Oct 2004 at 19:29, R. Scott Perry wrote:

Can 'by design'  mean a switch be addeded to allow deletion?  I would 
like to be able to make that decision - not declude.
Thanks

-Nick


It seems that DELETEVIRUSES ON isn't working in Declude Virus
1.81

I have it set to:

DELETEVIRUSES   ON

In my virus.cfg but they're staying in my E:\IMail\spool\virus
folder.

That is by design. Viruses are getting deleted, other E-mails 
(vulnerabilities and banned file extensions) are not, as they usually
do not contain viruses or other dangerous code.


   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail
mailservers since 2000. Declude Virus: Ultra reliable virus detection
and the leader in mailserver vulnerability detection. Find out what
you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread Darin Cox
If you're looking for what others have done as well... we delete viruses,
for banned files notify the recipient with a link in the notification to a
web script that will requeue the file if they want to receive it, and review
vulnerabilities, deleting or requeueing as needed.

Darin.


- Original Message - 
From: Tim Collins (Home) [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, October 20, 2004 6:57 AM
Subject: RE: [Declude.Virus] DELETEVIRUSES Not working.


So why put them in the virus folder?
There is no way (that I know of) to requeue these messages?  ... Or fix
the vulnerability... True?
What is Horizon's best practices theory on how to deal with messages
that land in the virus folder?

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
Sent: Tuesday, October 19, 2004 5:29 PM
To: [EMAIL PROTECTED]
Subject: Re: [Declude.Virus] DELETEVIRUSES Not working.



It seems that DELETEVIRUSES ON isn't working in Declude Virus 1.81

I have it set to:

DELETEVIRUSES   ON

In my virus.cfg but they're staying in my E:\IMail\spool\virus folder.

That is by design. Viruses are getting deleted, other E-mails
(vulnerabilities and banned file extensions) are not, as they usually do

not contain viruses or other dangerous code.


-Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in
mailserver
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To unsubscribe,
just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus
(http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-20 Thread Brad Morgan
 
 Can 'by design'  mean a switch be addeded to allow deletion?  I would 
 like to be able to make that decision - not declude.
 Thanks
 
 -Nick
 
 
 It seems that DELETEVIRUSES ON isn't working in Declude Virus
 1.81
 
 I have it set to:
 
 DELETEVIRUSES   ON
 
 In my virus.cfg but they're staying in my E:\IMail\spool\virus
 folder.
 
 That is by design. Viruses are getting deleted, other E-mails 
 (vulnerabilities and banned file extensions) are not, as they usually
 do not contain viruses or other dangerous code.
 

I use a Perl script to delete all the vulnerabilities and keep only
one copy of each virus.  I run it manually because once in a blue moon
there's a vulnerability that's not spam.  I've created separate .eml
files for vulnerabilities and viruses (and banned extensions) so I
can sort through them easily.

Having a quarantined copy of each virus allows me to test changes or
additions to my configuration.

I think there's enough variations on what people want to do with these
files that Scott can't program enough switches to satisfy everyone.

Scheduling a batch job isn't that difficult and there's plenty of
examples here if you don't want to write your own.

Regards,

Brad
---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


[Declude.Virus] DELETEVIRUSES Not working.

2004-10-19 Thread Mark Smith
It seems that DELETEVIRUSES ON isn't working in Declude Virus 1.81

I have it set to:

DELETEVIRUSES   ON

In my virus.cfg but they're staying in my E:\IMail\spool\virus folder.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-19 Thread R. Scott Perry

It seems that DELETEVIRUSES ON isn't working in Declude Virus 1.81
I have it set to:
DELETEVIRUSES   ON
In my virus.cfg but they're staying in my E:\IMail\spool\virus folder.
That is by design. Viruses are getting deleted, other E-mails 
(vulnerabilities and banned file extensions) are not, as they usually do 
not contain viruses or other dangerous code.

   -Scott
---
Declude JunkMail: The advanced anti-spam solution for IMail mailservers 
since 2000.
Declude Virus: Ultra reliable virus detection and the leader in mailserver 
vulnerability detection.
Find out what you've been missing: Ask for a free 30-day evaluation.

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


RE: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-19 Thread Mark Smith
Any way to purge 'em all without writing a script?
We're running about 200k messages per day across 4 servers and don't bother
to check them all.

Thanks!

Mark

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry
 Sent: Tuesday, October 19, 2004 7:29 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [Declude.Virus] DELETEVIRUSES Not working.


 It seems that DELETEVIRUSES ON isn't working in Declude
 Virus 1.81
 
 I have it set to:
 
 DELETEVIRUSES   ON
 
 In my virus.cfg but they're staying in my
 E:\IMail\spool\virus folder.

 That is by design. Viruses are getting deleted, other E-mails
 (vulnerabilities and banned file extensions) are not, as they
 usually do not contain viruses or other dangerous code.


 -Scott
 ---
 Declude JunkMail: The advanced anti-spam solution for IMail
 mailservers since 2000.
 Declude Virus: Ultra reliable virus detection and the leader
 in mailserver vulnerability detection.
 Find out what you've been missing: Ask for a free 30-day evaluation.

 ---
 [This E-mail was scanned for viruses by Declude Virus
 (http://www.declude.com)]

 ---
 This E-mail came from the Declude.Virus mailing list.  To
 unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
 type unsubscribe Declude.Virus.The archives can be found
 at http://www.mail-archive.com.



---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.


Re: [Declude.Virus] DELETEVIRUSES Not working.

2004-10-19 Thread Bill Landry
- Original Message - 
From: Mark Smith [EMAIL PROTECTED]


 Any way to purge 'em all without writing a script?
 We're running about 200k messages per day across 4 servers and don't
bother
 to check them all.

Come on, you're talking about a 10 second script:

del c:\imail\spool\virus\*.smd

Bill

---
[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]

---
This E-mail came from the Declude.Virus mailing list.  To
unsubscribe, just send an E-mail to [EMAIL PROTECTED], and
type unsubscribe Declude.Virus.The archives can be found
at http://www.mail-archive.com.