RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
Kami, Thanks for the info, but this is a separate issue as these have no HTML in them. There is also nothing in the Declude logs for these messages. I am not positive it is Declude, but I have not had an issue since I disabled Declude Virus on Friday afternoon, so it is looking more and more like it could be. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kami Razvan Sent: Monday, March 20, 2006 6:45 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Hi Grant.. The problem is an issue we faced with as well. If you are sending HTML with fancy tags your emails are getting tagged as: -Virus: Possibly a new variant of JS/ -In: [HTML segment] We had all of our web messaging emails get caught as that virus. I changed the program to simply send an HTML without any tags other than for line break and it worked fine. We use ASPemail for 1 application and the problem started happening almost 2 or so weeks ago. All is fine now. Hope this helps. Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Monday, March 20, 2006 10:36 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server I will get a support ticket open with Declude, but just as an FYI, I disabled Declude Virus last Friday and have not seen this issue again since. Therefore it appears Declude Virus might be taking the message and then timing out for some reason. I am still watching all the emails coming from my web server, but the past 20+ have went thru fine since disabling Declude Virus. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 17, 2006 1:39 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI> Well, here is the ASPMail log for an email that did not go out and GGI> then below it is the Imail logs showing it timing out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The "250" and "221" messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI> GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI> HELO mail.ei8htlegs.net GGI> 250 hello ei8htlegs.net GGI> MAIL FROM:<[EMAIL PROTECTED]> GGI> 250 ok GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> DATA GGI> 354 Please start mail input. GGI> Message body suppressed. GGI> . GGI> 250 Mail queued for delivery. GGI> QUIT GGI> 221 Closing connection. Good bye. GGI> GGI> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.60] connect GGI> 64.184.24.36 port GGI> 2919 GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] HELO GGI> mail.ei8htlegs.net GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI> FROM:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI> TO:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI> TO:<[EMAIL PROTECTED]> GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI> GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Grant GGI> Griffith - IMail GGI> Sent: Tuesday, March 14, 2006 10:49 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: RE: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server
RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
Hi Grant.. The problem is an issue we faced with as well. If you are sending HTML with fancy tags your emails are getting tagged as: -Virus: Possibly a new variant of JS/ -In: [HTML segment] We had all of our web messaging emails get caught as that virus. I changed the program to simply send an HTML without any tags other than for line break and it worked fine. We use ASPemail for 1 application and the problem started happening almost 2 or so weeks ago. All is fine now. Hope this helps. Kami -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Monday, March 20, 2006 10:36 AM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server I will get a support ticket open with Declude, but just as an FYI, I disabled Declude Virus last Friday and have not seen this issue again since. Therefore it appears Declude Virus might be taking the message and then timing out for some reason. I am still watching all the emails coming from my web server, but the past 20+ have went thru fine since disabling Declude Virus. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 17, 2006 1:39 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI> Well, here is the ASPMail log for an email that did not go out and GGI> then below it is the Imail logs showing it timing out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The "250" and "221" messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI> GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI> HELO mail.ei8htlegs.net GGI> 250 hello ei8htlegs.net GGI> MAIL FROM:<[EMAIL PROTECTED]> GGI> 250 ok GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> DATA GGI> 354 Please start mail input. GGI> Message body suppressed. GGI> . GGI> 250 Mail queued for delivery. GGI> QUIT GGI> 221 Closing connection. Good bye. GGI> GGI> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.60] connect GGI> 64.184.24.36 port GGI> 2919 GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] HELO GGI> mail.ei8htlegs.net GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI> FROM:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI> TO:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI> TO:<[EMAIL PROTECTED]> GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI> GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Grant GGI> Griffith - IMail GGI> Sent: Tuesday, March 14, 2006 10:49 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: RE: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server GGI> OK, I have logging turned on now for the ASPMail side of things. GGI> Just have GGI> to watch for it to occur again and then look at what both sides said. GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Eric GGI> Shanbrom GGI> Sent: Tuesday, March 14, 2006 10:41 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: Re: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server GGI> You are loo
RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
I will get a support ticket open with Declude, but just as an FYI, I disabled Declude Virus last Friday and have not seen this issue again since. Therefore it appears Declude Virus might be taking the message and then timing out for some reason. I am still watching all the emails coming from my web server, but the past 20+ have went thru fine since disabling Declude Virus. Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Grant Griffith Sent: Friday, March 17, 2006 1:39 PM To: Declude.Virus@declude.com Subject: RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI> Well, here is the ASPMail log for an email that did not go out and then GGI> below it is the Imail logs showing it timing GGI> out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The "250" and "221" messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI> GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI> HELO mail.ei8htlegs.net GGI> 250 hello ei8htlegs.net GGI> MAIL FROM:<[EMAIL PROTECTED]> GGI> 250 ok GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> DATA GGI> 354 Please start mail input. GGI> Message body suppressed. GGI> . GGI> 250 Mail queued for delivery. GGI> QUIT GGI> 221 Closing connection. Good bye. GGI> GGI> GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.60] connect 64.184.24.36 port GGI> 2919 GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.36] HELO mail.ei8htlegs.net GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI> FROM:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.36] RCPT TO:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI> TO:<[EMAIL PROTECTED]> GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI> GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On GGI> Behalf Of Grant Griffith - GGI> IMail GGI> Sent: Tuesday, March 14, 2006 10:49 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: RE: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server GGI> OK, I have logging turned on now for the ASPMail GGI> side of things. Just have GGI> to watch for it to occur again and then look at what both sides said. GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Eric Shanbrom GGI> Sent: Tuesday, March 14, 2006 10:41 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: Re: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server GGI> You are looking in the wrong direction. This is a GGI> message coming into IMail GGI> not going out to somewhere else. Since it hasn't GGI> been accepted for delivery GGI> by IMail there is nothing to re-queue and try GGI> again.. the question here is GGI> why didn't the conversation continue after the GGI> final RCPT TO. Unfortunately, GGI> we only see one side of the communication, that GGI> being the commands coming GGI> in. At this time I do not know if the sending GGI> server got the final 250 OK GGI> and didn't send the DATA command or what. The GGI> connection timed out while GGI> IMail was waiting for a new command. A sniffer on the line can give more GGI> info and point you to the problem. GGI>
RE: [Declude.Virus] [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server
Well, I do have Declude running with F-Prot. I just checked those logs and there is nothing in there for that message which is really odd... Maybe this is a Declude Issue now?!?! Thanks, Grant Griffith Web Application Developer Enhanced Telecommunications Corp. (812)932-1000 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Matti Haack Sent: Friday, March 17, 2006 1:22 PM To: Grant Griffith - IMail Subject: Re: [IMail Forum] Issues Using IMail 8.22 To Send Messages From Web Server GGI> Well, here is the ASPMail log for an email that did not go out and then GGI> below it is the Imail logs showing it timing GGI> out... As the session in the ASP-Mail log is completed without problems - and the session in the Imail log is not, there must be some proxy (or Virusscanner, ASSP etc.) between the both. The "250" and "221" messages are created by the recieving SMTP-Server. I assume it is a virusscanner, which stops sending on the message during the scan... Just an Idea. Maybe I am wrong... Matti GGI> GGI> 220 ei8htlegs.net (IMail 8.22 95649-4) NT-ESMTP Server X1 GGI> HELO mail.ei8htlegs.net GGI> 250 hello ei8htlegs.net GGI> MAIL FROM:<[EMAIL PROTECTED]> GGI> 250 ok GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> RCPT TO:<[EMAIL PROTECTED]> GGI> 250 ok its for <[EMAIL PROTECTED]> GGI> DATA GGI> 354 Please start mail input. GGI> Message body suppressed. GGI> . GGI> 250 Mail queued for delivery. GGI> QUIT GGI> 221 Closing connection. Good bye. GGI> GGI> GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.60] connect 64.184.24.36 port GGI> 2919 GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.36] HELO mail.ei8htlegs.net GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] MAIL GGI> FROM:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) GGI> [64.184.24.36] RCPT TO:<[EMAIL PROTECTED]> GGI> 03:16 20:36 SMTPD(12ab015a43ee) [64.184.24.36] RCPT GGI> TO:<[EMAIL PROTECTED]> GGI> 03:16 20:41 SMTPD(12ab015a43ee) connection timed out GGI> GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On GGI> Behalf Of Grant Griffith - GGI> IMail GGI> Sent: Tuesday, March 14, 2006 10:49 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: RE: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server GGI> OK, I have logging turned on now for the ASPMail GGI> side of things. Just have GGI> to watch for it to occur again and then look at what both sides said. GGI> Thanks, GGI> Grant Griffith GGI> Web Application Developer GGI> Enhanced Telecommunications Corp. GGI> (812)932-1000 GGI> -Original Message- GGI> From: [EMAIL PROTECTED] GGI> [mailto:[EMAIL PROTECTED] On Behalf Of Eric Shanbrom GGI> Sent: Tuesday, March 14, 2006 10:41 AM GGI> To: Imail_Forum@list.ipswitch.com GGI> Subject: Re: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server GGI> You are looking in the wrong direction. This is a GGI> message coming into IMail GGI> not going out to somewhere else. Since it hasn't GGI> been accepted for delivery GGI> by IMail there is nothing to re-queue and try GGI> again.. the question here is GGI> why didn't the conversation continue after the GGI> final RCPT TO. Unfortunately, GGI> we only see one side of the communication, that GGI> being the commands coming GGI> in. At this time I do not know if the sending GGI> server got the final 250 OK GGI> and didn't send the DATA command or what. The GGI> connection timed out while GGI> IMail was waiting for a new command. A sniffer on the line can give more GGI> info and point you to the problem. GGI> Eric S GGI> - Original Message - GGI> From: "Adam Campbell" <[EMAIL PROTECTED]> GGI> To: GGI> Sent: Tuesday, March 14, 2006 10:26 AM GGI> Subject: Re: [IMail Forum] Issues Using IMail GGI> 8.22 To Send Messages From Web GGI> Server >> There's no DATA command. Maybe ASPMail didn't like SMTPD's response to >> the second RCPT TO and didn't give a DATA. >> >> Does ASPMail have a log? >> >> Would verbose logging of SMTPD help? >> >> adamc >> >> Grant Griffith - IMail wrote: >>> Well, we use ASP and ASP.NET and below are the logs I just tracked of one >>> email this morning. >>> >>> 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.60] connect 64.184.24.36 >>> port 1539 >>> >>> 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] HELO >>> mail.ei8htlegs.net >>> >>> 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] MAIL >>> FROM:<[EMAIL PROTECTED]> >>> >>> 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] RCPT >>> TO:<[EMAIL PROTECTED]> >>> >>> 03:14 08:19 SMTPD(c2c801ac0323) [64.184.24.36] RCPT >>> TO:
RE: [Declude.Virus] [IMail Forum] Realistic virus threat?
Hi Bill
Regarding the viruscodes 9 and 10 that was introduced
with f-prot 3.16 I will quote the relaese notes
Archive handling has been improved and is now more consistent.Version
3.16 also includes detection against so-called "archive
bombs", archives ... ... If the limit is exceeded then
it will exitwith a new exit code 10 (some files were not
scanned; in this casebecause maximum archive level was reached). The
OnDemand Scannerscans an infinite number of levels by default but this
behaviourcan be changed using the same command-line switch. The
RealTimeProtector scans to a depth of one level by default.Another
new exit code has been added to the OnDemand Scanner andthe Command-Line
Scanner, exit code 9. This exit code indicatesthat
some files were not scanned, e.g., encrypted files,
becauseof unsupported/unknown compression methods, because
ofunsupported/unknown file formats, corrupted or invalid files.Both
exit code 9 and 10 indicate that some files were not scannedand, therefore,
they can not be guaranteed to be clean. Thedifference between them is
that if exit code 10 occurs then somesettings can be changed (e.g., increase
the maximum allowedarchive depth) and the scanner might be able to scan the
file.If, however, exit code 9 occurs then the scanner is not able toscan
the file.A complete list of the exit codes can be found athttp://www.f-prot.com/support/windows/fpwin_faq/65.html
So exit code 10 seems ok for me but I'm not sure what
exit code 9 means in real world.
What "compressions methods" and "file formats" are
supported and what not?
If a legit message contains one little unsupported
or corrupt file with disabled notifications this will cause a false positive.
Right?
Someone has something against a feature request like
ONLYIFEXITCODEIS ?
So we could set up end user notifications for certain
"suspicious" exit codes.
Durring outbreaks while signatures are missing this
will block messages and show the end users that the virus filter is here and
working. After the signature update the exit code usualy should become 3 or
6.
Markus
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill
LandrySent: Thursday, February 02, 2006 11:31 PMTo:
Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail Forum]
Realistic virus threat?
Andrew, I already have PRESCAN set to off and use
the /server switch with F-Prot, so those were not the issue that was causing
this behavior for me. From my virus.cfg:
#
F-ProtSCANFILE1 C:\Progra~1\FSI\F-Prot\fpcmd.exe -AI -ARCHIVE=5 -DUMB
-NOBOOT -NOBREAK -NOMEM -PACKED -SAFEREMOVE -SERVER -SILENT
-REPORT=report.txtVIRUSCODE1 3VIRUSCODE1 6VIRUSCODE1 8VIRUSCODE1 9VIRUSCODE1 10REPORT1 Infection:
PRESCAN OFF
Bill
- Original Message -
From:
Colbeck,
Andrew
To: Declude.Virus@declude.com
Cc: [EMAIL PROTECTED]
Sent: Thursday, February 02, 2006 2:09
PM
Subject: RE: [Declude.Virus] [IMail
Forum] Realistic virus threat?
My raw speculation:
1) It is missed because the virus.cfg is using the
"PRESCAN ON" switch (the default, I believe) and the declude.exe
application does not decode the MIME or other coding as flexibly as a mail
client would, or makes an uninformed decision about what is an object worth
scanning.
ANSWER: use PRESCAN OFF instead. This will
incur more CPU time as the selected antivirus scanner(s) will be scanning
all objects.
2) For F-Prot specifically, the /server switch is
not being used and therefore F-Prot is not doing the message format
decoding. If Declude did a perfect job, this setting would be
irrelevant.
ANSWER: use the /server switch in your SCANFILE
definition. This would cause more CPU time on the few messages that
appear as nested message encoding; it is intended for scanning servers with
multiple mailbox formats and nested messages.
I follow my own advice on these two points and do
not have a problem with F-Prot under Declude EVA missing known
viruses.
Andrew 8)
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Bill
LandrySent: Thursday, February 02, 2006 1:47 PMTo:
Imail_Forum@list.ipswitch.com;
Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail
Forum] Realistic virus threat?
I reported this issue quite some time ago,
when Scott was still running the show, and never got a satisfactory
answer. You can scan the raw d*.smd file with f-prot and it will
detect the virus, but run it through Declude Virus, and the virus goes
though undetected. After pestering and prodding for several days, I
finally gave up on getting a response that ma
Re: [Declude.Virus] [IMail Forum] Realistic virus threat?
Scan timeouts were not the issue either, since my secondary Declude Virus scanner (TrendMicro) would catch the virus fine, and the logs would show the scanning to be taking a mere second or two. Bill - Original Message - From: Colbeck, Andrew To: Declude.Virus@declude.com Sent: Thursday, February 02, 2006 2:34 PM Subject: RE: [Declude.Virus] [IMail Forum] Realistic virus threat? 3) On a very busy server, Declude may be aborting the scan because it is taking too long. The default is 60 seconds. ANSWER: Use SCANNERTIMEOUT 90 in the virus.cfg or some other time value of your choosing. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, AndrewSent: Thursday, February 02, 2006 2:10 PMTo: Declude.Virus@declude.comCc: [EMAIL PROTECTED]Subject: RE: [Declude.Virus] [IMail Forum] Realistic virus threat? My raw speculation: 1) It is missed because the virus.cfg is using the "PRESCAN ON" switch (the default, I believe) and the declude.exe application does not decode the MIME or other coding as flexibly as a mail client would, or makes an uninformed decision about what is an object worth scanning. ANSWER: use PRESCAN OFF instead. This will incur more CPU time as the selected antivirus scanner(s) will be scanning all objects. 2) For F-Prot specifically, the /server switch is not being used and therefore F-Prot is not doing the message format decoding. If Declude did a perfect job, this setting would be irrelevant. ANSWER: use the /server switch in your SCANFILE definition. This would cause more CPU time on the few messages that appear as nested message encoding; it is intended for scanning servers with multiple mailbox formats and nested messages. I follow my own advice on these two points and do not have a problem with F-Prot under Declude EVA missing known viruses. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill LandrySent: Thursday, February 02, 2006 1:47 PMTo: Imail_Forum@list.ipswitch.com; Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail Forum] Realistic virus threat? I reported this issue quite some time ago, when Scott was still running the show, and never got a satisfactory answer. You can scan the raw d*.smd file with f-prot and it will detect the virus, but run it through Declude Virus, and the virus goes though undetected. After pestering and prodding for several days, I finally gave up on getting a response that made sense. But it must have something to do with the way Declude Virus is stripping off the mime encapsulation before calling f-prot to scan the message. I have copied this to the Declude Virus list, as well, since it really belongs there rather than on the IMail list. Bill - Original Message - From: Michael Graveen To: Imail_Forum@list.ipswitch.com Sent: Thursday, February 02, 2006 1:15 PM Subject: RE: [IMail Forum] Realistic virus threat? I've had F-Prot miss this virus on the mail server (being called from Declude). But it's caught coming to my desktop, with the same virus scanner. Is anyone else seeing this?MikeAt 02:25 PM 2/2/2006, you wrote: I believe F-Prot calls it W32/[EMAIL PROTECTED] From: Stephen Guluk [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 02, 2006 2:19 PM To: Imail_Forum@list.ipswitch.com Subject: [IMail Forum] Realistic virus threat? Off topic but still related to email... Had a couple clients that called concerned about this virus that is said to open and do it's damage tomorrow: [EMAIL PROTECTED] Win32.Nyxem.e I run F-prot on my mail server and their list of virus definitions shows nothing pertaining to this virus name. I wrote them but expect that they are sleeping since they are in Iceland. Anyone else running F-prot and know any more info on it this is a real threat? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
RE: [Declude.Virus] [IMail Forum] Realistic virus threat?
3) On a very busy server, Declude may be aborting the scan because it is taking too long. The default is 60 seconds. ANSWER: Use SCANNERTIMEOUT 90 in the virus.cfg or some other time value of your choosing. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Colbeck, AndrewSent: Thursday, February 02, 2006 2:10 PMTo: Declude.Virus@declude.comCc: [EMAIL PROTECTED]Subject: RE: [Declude.Virus] [IMail Forum] Realistic virus threat? My raw speculation: 1) It is missed because the virus.cfg is using the "PRESCAN ON" switch (the default, I believe) and the declude.exe application does not decode the MIME or other coding as flexibly as a mail client would, or makes an uninformed decision about what is an object worth scanning. ANSWER: use PRESCAN OFF instead. This will incur more CPU time as the selected antivirus scanner(s) will be scanning all objects. 2) For F-Prot specifically, the /server switch is not being used and therefore F-Prot is not doing the message format decoding. If Declude did a perfect job, this setting would be irrelevant. ANSWER: use the /server switch in your SCANFILE definition. This would cause more CPU time on the few messages that appear as nested message encoding; it is intended for scanning servers with multiple mailbox formats and nested messages. I follow my own advice on these two points and do not have a problem with F-Prot under Declude EVA missing known viruses. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill LandrySent: Thursday, February 02, 2006 1:47 PMTo: Imail_Forum@list.ipswitch.com; Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail Forum] Realistic virus threat? I reported this issue quite some time ago, when Scott was still running the show, and never got a satisfactory answer. You can scan the raw d*.smd file with f-prot and it will detect the virus, but run it through Declude Virus, and the virus goes though undetected. After pestering and prodding for several days, I finally gave up on getting a response that made sense. But it must have something to do with the way Declude Virus is stripping off the mime encapsulation before calling f-prot to scan the message. I have copied this to the Declude Virus list, as well, since it really belongs there rather than on the IMail list. Bill - Original Message - From: Michael Graveen To: Imail_Forum@list.ipswitch.com Sent: Thursday, February 02, 2006 1:15 PM Subject: RE: [IMail Forum] Realistic virus threat? I've had F-Prot miss this virus on the mail server (being called from Declude). But it's caught coming to my desktop, with the same virus scanner. Is anyone else seeing this?MikeAt 02:25 PM 2/2/2006, you wrote: I believe F-Prot calls it W32/[EMAIL PROTECTED] From: Stephen Guluk [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 02, 2006 2:19 PM To: Imail_Forum@list.ipswitch.com Subject: [IMail Forum] Realistic virus threat? Off topic but still related to email... Had a couple clients that called concerned about this virus that is said to open and do it's damage tomorrow: [EMAIL PROTECTED] Win32.Nyxem.e I run F-prot on my mail server and their list of virus definitions shows nothing pertaining to this virus name. I wrote them but expect that they are sleeping since they are in Iceland. Anyone else running F-prot and know any more info on it this is a real threat? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
Re: [Declude.Virus] [IMail Forum] Realistic virus threat?
Andrew, I already have PRESCAN set to off and use the /server switch with F-Prot, so those were not the issue that was causing this behavior for me. From my virus.cfg: # F-ProtSCANFILE1 C:\Progra~1\FSI\F-Prot\fpcmd.exe -AI -ARCHIVE=5 -DUMB -NOBOOT -NOBREAK -NOMEM -PACKED -SAFEREMOVE -SERVER -SILENT -REPORT=report.txtVIRUSCODE1 3VIRUSCODE1 6VIRUSCODE1 8VIRUSCODE1 9VIRUSCODE1 10REPORT1 Infection: PRESCAN OFF Bill - Original Message - From: Colbeck, Andrew To: Declude.Virus@declude.com Cc: [EMAIL PROTECTED] Sent: Thursday, February 02, 2006 2:09 PM Subject: RE: [Declude.Virus] [IMail Forum] Realistic virus threat? My raw speculation: 1) It is missed because the virus.cfg is using the "PRESCAN ON" switch (the default, I believe) and the declude.exe application does not decode the MIME or other coding as flexibly as a mail client would, or makes an uninformed decision about what is an object worth scanning. ANSWER: use PRESCAN OFF instead. This will incur more CPU time as the selected antivirus scanner(s) will be scanning all objects. 2) For F-Prot specifically, the /server switch is not being used and therefore F-Prot is not doing the message format decoding. If Declude did a perfect job, this setting would be irrelevant. ANSWER: use the /server switch in your SCANFILE definition. This would cause more CPU time on the few messages that appear as nested message encoding; it is intended for scanning servers with multiple mailbox formats and nested messages. I follow my own advice on these two points and do not have a problem with F-Prot under Declude EVA missing known viruses. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill LandrySent: Thursday, February 02, 2006 1:47 PMTo: Imail_Forum@list.ipswitch.com; Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail Forum] Realistic virus threat? I reported this issue quite some time ago, when Scott was still running the show, and never got a satisfactory answer. You can scan the raw d*.smd file with f-prot and it will detect the virus, but run it through Declude Virus, and the virus goes though undetected. After pestering and prodding for several days, I finally gave up on getting a response that made sense. But it must have something to do with the way Declude Virus is stripping off the mime encapsulation before calling f-prot to scan the message. I have copied this to the Declude Virus list, as well, since it really belongs there rather than on the IMail list. Bill - Original Message - From: Michael Graveen To: Imail_Forum@list.ipswitch.com Sent: Thursday, February 02, 2006 1:15 PM Subject: RE: [IMail Forum] Realistic virus threat? I've had F-Prot miss this virus on the mail server (being called from Declude). But it's caught coming to my desktop, with the same virus scanner. Is anyone else seeing this?MikeAt 02:25 PM 2/2/2006, you wrote: I believe F-Prot calls it W32/[EMAIL PROTECTED] From: Stephen Guluk [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 02, 2006 2:19 PM To: Imail_Forum@list.ipswitch.com Subject: [IMail Forum] Realistic virus threat? Off topic but still related to email... Had a couple clients that called concerned about this virus that is said to open and do it's damage tomorrow: [EMAIL PROTECTED] Win32.Nyxem.e I run F-prot on my mail server and their list of virus definitions shows nothing pertaining to this virus name. I wrote them but expect that they are sleeping since they are in Iceland. Anyone else running F-prot and know any more info on it this is a real threat? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
RE: [Declude.Virus] [IMail Forum] Realistic virus threat?
My raw speculation: 1) It is missed because the virus.cfg is using the "PRESCAN ON" switch (the default, I believe) and the declude.exe application does not decode the MIME or other coding as flexibly as a mail client would, or makes an uninformed decision about what is an object worth scanning. ANSWER: use PRESCAN OFF instead. This will incur more CPU time as the selected antivirus scanner(s) will be scanning all objects. 2) For F-Prot specifically, the /server switch is not being used and therefore F-Prot is not doing the message format decoding. If Declude did a perfect job, this setting would be irrelevant. ANSWER: use the /server switch in your SCANFILE definition. This would cause more CPU time on the few messages that appear as nested message encoding; it is intended for scanning servers with multiple mailbox formats and nested messages. I follow my own advice on these two points and do not have a problem with F-Prot under Declude EVA missing known viruses. Andrew 8) From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill LandrySent: Thursday, February 02, 2006 1:47 PMTo: Imail_Forum@list.ipswitch.com; Declude.Virus@declude.comSubject: Re: [Declude.Virus] [IMail Forum] Realistic virus threat? I reported this issue quite some time ago, when Scott was still running the show, and never got a satisfactory answer. You can scan the raw d*.smd file with f-prot and it will detect the virus, but run it through Declude Virus, and the virus goes though undetected. After pestering and prodding for several days, I finally gave up on getting a response that made sense. But it must have something to do with the way Declude Virus is stripping off the mime encapsulation before calling f-prot to scan the message. I have copied this to the Declude Virus list, as well, since it really belongs there rather than on the IMail list. Bill - Original Message - From: Michael Graveen To: Imail_Forum@list.ipswitch.com Sent: Thursday, February 02, 2006 1:15 PM Subject: RE: [IMail Forum] Realistic virus threat? I've had F-Prot miss this virus on the mail server (being called from Declude). But it's caught coming to my desktop, with the same virus scanner. Is anyone else seeing this?MikeAt 02:25 PM 2/2/2006, you wrote: I believe F-Prot calls it W32/[EMAIL PROTECTED] From: Stephen Guluk [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 02, 2006 2:19 PM To: Imail_Forum@list.ipswitch.com Subject: [IMail Forum] Realistic virus threat? Off topic but still related to email... Had a couple clients that called concerned about this virus that is said to open and do it's damage tomorrow: [EMAIL PROTECTED] Win32.Nyxem.e I run F-prot on my mail server and their list of virus definitions shows nothing pertaining to this virus name. I wrote them but expect that they are sleeping since they are in Iceland. Anyone else running F-prot and know any more info on it this is a real threat? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
Re: [Declude.Virus] [IMail Forum] Realistic virus threat?
I reported this issue quite some time ago, when Scott was still running the show, and never got a satisfactory answer. You can scan the raw d*.smd file with f-prot and it will detect the virus, but run it through Declude Virus, and the virus goes though undetected. After pestering and prodding for several days, I finally gave up on getting a response that made sense. But it must have something to do with the way Declude Virus is stripping off the mime encapsulation before calling f-prot to scan the message. I have copied this to the Declude Virus list, as well, since it really belongs there rather than on the IMail list. Bill - Original Message - From: Michael Graveen To: Imail_Forum@list.ipswitch.com Sent: Thursday, February 02, 2006 1:15 PM Subject: RE: [IMail Forum] Realistic virus threat? I've had F-Prot miss this virus on the mail server (being called from Declude). But it's caught coming to my desktop, with the same virus scanner. Is anyone else seeing this?MikeAt 02:25 PM 2/2/2006, you wrote: I believe F-Prot calls it W32/[EMAIL PROTECTED] From: Stephen Guluk [mailto:[EMAIL PROTECTED]] Sent: Thursday, February 02, 2006 2:19 PM To: Imail_Forum@list.ipswitch.com Subject: [IMail Forum] Realistic virus threat? Off topic but still related to email... Had a couple clients that called concerned about this virus that is said to open and do it's damage tomorrow: [EMAIL PROTECTED] Win32.Nyxem.e I run F-prot on my mail server and their list of virus definitions shows nothing pertaining to this virus name. I wrote them but expect that they are sleeping since they are in Iceland. Anyone else running F-prot and know any more info on it this is a real threat? Regards, Steve Guluk SGDesign (949) 661-9333 ICQ: 7230769
Re: [Declude.Virus] Imail 8.21 with Declude Virus & Spam, Sniffer, AVG and F-Prot
For your information, this is about the networking errors of 1(!) day... Occurrences / Description 955 10054=20 382 net read error 10038=20 354 net read error 10053=20 58 net read error 10054=20 34 10053 - Original Message - From: "Marcel Sangers" <[EMAIL PROTECTED]> To: Sent: Thursday, September 15, 2005 5:22 PM Subject: Imail 8.21 with Declude Virus & Spam, Sniffer, AVG and F-Prot > Hi all, > > We've got a Imail installation on a co-located Dell Poweredge PIII 1000 MHz > server with 1Gb of memory, win2k server. > > Last night we've upgraded to Imail 8.21 from 8.05. Works fine, but still > have some other problems which I also had with 8.05. I hoped that the > upgrade was the solution. > > Some problems / issues / questions: > > * Processor load: sometimes for minutes a processor load of 100% (lots of > declude.exe, avgscan.exe and like l08w987.exe (from sniffer) processes) AND > a System process that fills up to 100%. In those periods there is no System > Idle processor time. > > * Recv.blocking call cancelled: it seems that to particular domains we get a > recv.blocing call cancelled after a few minutes or MX connect failed. What > could be the problem? When I do a speedtest(.nl) from this server the > (upload) speed is very low compared to other servers, in the same network > segment at the same backbone, behind the same firewall. > > * Need to upgrade declude? Current version in use is 1.79 > > * Need to upgrade AVG or F-Prot (7.0.344 and F-Prot 3.15) > > * Advise to use other virusscanners in combination with Imail & Declude > Virus? > > * Sniffer (Sortmonster) uses lots of processor load? Also at your place? > > Maybe you could help me out on this stuff? > > Best regards, > Marcel Sangers > > --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.21 with Declude Virus & Spam, Sniffer, AVG and F-Prot
* Processor load: sometimes for minutes a processor load of 100% (lots of declude.exe, avgscan.exe and like l08w987.exe (from sniffer) processes) > >a System process that fills up to 100%. In those periods there is no System Idle processor time. Does not really indicate a probelm per say. In general some options you can look at is AVAFTERJM and run Virus checking after Spam Filtering I have seen this help some servers a lot that were running multiple scanners that were very cpu intensive. What is your mail volume? This is important since you only have a P3 1GHZ. * Recv.blocking call cancelled: it seems that to particular domains we get recv.blocing call cancelled after a few minutes or MX connect failed. What could be the problem? When I do a speedtest(.nl) from this server the (upload) speed is very low compared to other servers, in the same network segment at the same backbone, behind the same firewall. This can be a whole slew of things from NIC speed/duplex settings. If you are seeing poor performance on the speed tests I would check your settings on the card and switch to make sure you are not suffering from a mismatch. * Need to upgrade declude? Current version in use is 1.79 Yes - earlier versions of Declude have issues with 8.2x. Right now 3.0 for Declude is in beta and is suppose to fix the 8.2 incompatibilities. * Need to upgrade AVG or F-Prot (7.0.344 and F-Prot 3.15) Not sure on AVG, but their are newer versions of F-Prot. * Advise to use other virusscanners in combination with Imail & Declude Virus? The two you have are fine. * Sniffer (Sortmonster) uses lots of processor load? Also at your place? It uses about 20%, but for VERY SHORT periods. Nothing out of the ordinary. Also, look into using the persistent version of sniffer this really helps out in higher volume servers. Darrell Check out http://www.invariantsystems.com for utilities for Declude And Imail. IMail/Declude Overflow Queue Monitoring, SURBL/URI integration, MRTG Integration, and Log Parsers. --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail 8.21 with Declude Virus & Spam, Sniffer, AVG and F-Prot
Hi all, We've got a Imail installation on a co-located Dell Poweredge PIII 1000 MHz server with 1Gb of memory, win2k server. Last night we've upgraded to Imail 8.21 from 8.05. Works fine, but still have some other problems which I also had with 8.05. I hoped that the upgrade was the solution. Some problems / issues / questions: * Processor load: sometimes for minutes a processor load of 100% (lots of declude.exe, avgscan.exe and like l08w987.exe (from sniffer) processes) AND a System process that fills up to 100%. In those periods there is no System Idle processor time. * Recv.blocking call cancelled: it seems that to particular domains we get a recv.blocing call cancelled after a few minutes or MX connect failed. What could be the problem? When I do a speedtest(.nl) from this server the (upload) speed is very low compared to other servers, in the same network segment at the same backbone, behind the same firewall. * Need to upgrade declude? Current version in use is 1.79 * Need to upgrade AVG or F-Prot (7.0.344 and F-Prot 3.15) * Advise to use other virusscanners in combination with Imail & Declude Virus? * Sniffer (Sortmonster) uses lots of processor load? Also at your place? Maybe you could help me out on this stuff? Best regards, Marcel Sangers --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] [IMail Forum] OT: HIPPA Compliance
Kevin, check out https://secure-messaging.siemensmedical.com. If you want more info, let me know. Bill - Original Message - From: "Kevin Rogers" <[EMAIL PROTECTED]> To: ; Sent: Thursday, August 25, 2005 12:50 PM Subject: [IMail Forum] OT: HIPPA Compliance Has anyone been involved in HIPPA compliance? We are in the process of coming up with a strategy to encrypt PHI (Personal Health Information) emails and attachments. I suppose we could have each of our users install PGP or something like that, but does anyone know of a way to do it at the server? Not all emails need be encrypted, so there would have to be a way to designate whether an email should be encrypted or not. I'm worried about all our people having to manage their keys and whatnot, so a server-based system, that integrates with Imail or Declude (and Outlook?) would be nice. Any suggestions? Kevin --- [This E-mail was scanned for viruses.] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail to Smartermail
We are contemplating moving from Imail to Smartermail. Is this a smooth tansition with Declude products? Any other problems encountered to consider? We currently have Imail 7.02. Thanks
Re: [Declude.Virus] [IMail Forum] Declude vs Ipswitch AV
Hi Todd, It will take some time to train your Declude installation, but it's well worth it. Out of the box you can probably quickly get to 80% filtering. Tuned over a couple of months you can probably get 99% filtering. I highly recommend you add Message Sniffer (sortmonster.com) to the mix. It inexpensive ($30/month) and provides excellent content filtering. There are very few features that would make me go to Virus Pro...it's mainly for the ability to plug in multiple virus scanners. Junkmail Pro is a good plan, as it has a lot of support for custom content filtering, as well as per-user configurations. There are other important features, but those are some of the most used. With Declude you can also plug in a number of external filters to add to the detection. And there is quite a community around it constantly giving advice, sharing tools, etc. Support is great, too. For windows-based mail servers, I don't think there's a better suite for spam and virus. They'll be launching an MTA-independent version soon so it can be used as a gateway for any mail server. You might download the trial and lurk on the Declude lists to see what it's like. [EMAIL PROTECTED] and [EMAIL PROTECTED] are the support lists. Darin. - Original Message - From: "Todd Richards" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, December 10, 2004 12:06 PM Subject: RE: [IMail Forum] Declude vs Ipswitch AV Hi Darin - I'm emailing you off-list, as I think people tend to get cranky when a subject gets brought up often (as we all do!) Is it safe to assume you are a Declude user? What I'm thinking of for our Imail 8.14 server is to use Declude Virus Pro, Declude Junk Mail Pro, and running Fprot as the virus scanner. If you don't mind me asking - what do you think about that? Am I missing anything? Thanks for your time. Todd -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Darin Cox Sent: Tuesday, November 30, 2004 4:50 PM To: [EMAIL PROTECTED] Subject: Re: [IMail Forum] Declude vs Ipswitch AV Highly recommend using Declude Virus and F-Prot (or Declude Virus Pro and plugging in a couple of scanners) instead of IMail's stripped down version of Symantec AV. Darin. - Original Message - From: "Todd Richards" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, November 30, 2004 12:12 PM Subject: [IMail Forum] Declude vs Ipswitch AV Hey everyone - I tried to search the archives but wasn't getting what I wanted, so I'm posting this back here. I apologize for a repeat on the topics. We currently have Imail 8.13 with Ipswitch Imail AV, which I'm very very disappointed with. Am I correct that I can scrap that and go with Declude, which seemed to receive an overwhelming amount of support from you, not to mention a cost savings to us? I appreciate the feedback. Todd To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] imail
A robot just answered you.. funny. Not even try to change the headers or understand your question.. Luis > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of steve :-) > Sent: Thursday, October 28, 2004 9:46 AM > To: [EMAIL PROTECTED] > Subject: [Declude.Virus] imail > > Below is the responce i got from ipswitch sales. > Steve > > Good Morning Steve - > > Here are the plans set forth by Ipswitch regarding the New Collaboration > Suite. > > If you should have any questions, please let me know. > > Best Regards, > > Renee Breckenridge > Service Sales Representative > Email - [EMAIL PROTECTED] > www.ipswitch.com > > > We have released our New Ipswitch Collaboration Suite. > > http://www.ipswitch.com/Products/collaboration/index.html > > Ipswitch Collaboration Suite Provides: > > E-mail collaboration > Standards-based email > Discussion lists and e-mail groups > > Real-time collaboration > Secure instant messaging > > Workgroup collaboration with MS Outlook > Shared calendaring > Global address books > > Protection of the collaboration system > Anti-spam protection > Anti-virus subscriptions > > Backed by Ipswitch service and support > One year of support & updates included > > IMail's functionality has been incorporated into the Ipswitch > Collaboration > Suite and is no longer offered on an individual basis for new purchases or > for renewals. Imail is now only offered as a part of the Ipswitch > Collaboration Suite. > > Ipswitch is offering customers of Imail, a limited-time opportunity to > purchase Ipswitch Collaboration Suite at a deeply discounted price. > > To cross grade to the New ICS, please choose the Premium or Standard > edition > and what User Level you require. The User Levels are 25, 100, 250 and > Unlimited. > > ICS Standard Edition consists of: IMail Server, Instant Messaging, AV > Standard, Shared calendaring and Global address books and a one-year > Service > Agreement. > > ICS Premium Edition consists of: IMail Server, Instant Messaging, AV > Premium, Shared calendaring and Global address books and a one-year > Service > Agreement. > > ICS ISP/EDU Edition consists of: IMail Server, AV Premium, Killer WebMail > and a one-year Service Agreement > > The Premium Edition with Symantec Anti-Virus Protection: > > Symantec's Scan Server technology utilizes their Live Update > Technology which does not require an interruption of the services. > It also is designed to quickly scan for viruses and is ideal for > high traffic environments. > > The Standard Edition with Bit Defender Anti-Virus Protection: > > Bit Defender is more for low traffic environments and requires > that you interrupt the services when applying a Server update. > To apply Live Virus definition updates you would need to implement > Bit Defender's command line utility named "AVUpdate.exe" > > Ipswitch Collaboration Suite, Premium Edition with Symantec Anti-Virus > Protection > ***Special Pricing for Current Imail Customers > 25 Users $ 695 > 100 Users $ 1,495 > 250 Users $ 2,995 > Unlimited $ 5,995 > > Ipswitch Collaboration Suite, Standard Edition with Bit Defender Anti- > Virus > Protection > ***Special Pricing for Current Imail Customers > 25 Users $ 595 > 100 Users $ 1,295 > 250 Users $ 2,495 > Unlimited $ 4,995 > > Ipswitch Collaboration Suite, ISP Edition with Symantec Anti-Virus > Protection (Does not include shared calendars or instant messaging) > ***Special Pricing for Current Imail Customers > Unlimited $ 3,995 > > Purchasing Ipswitch Collaboration Suite at these special prices will allow > you to continue service on your IMail Server, and will deliver additional > capabilities such as shared calendars, secure instant messaging, anti- > spam, > and anti-virus protection. > > > > > > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 27, 2004 11:53 PM > To: [EMAIL PROTECTED] > Subject: #Ipswitch_Collaboration_Suite# Ipswitch Sales Inquiry fromSteve > > > > Sender : [EMAIL PROTECTED] > Tracking Number : > Pool: Contracts > Sent to : <[EMAIL PROTECTED]> > Date: 10/27/04 11:54 PM > --- > > Forwarded by: Traci Casparius > > (no comments entered) > --- > > #Ipswitch_Collaboration_Suite# Ipswitch Sales Inquiry from Steve Keeling > First Name: Steve > Last Name:Keeling
[Declude.Virus] imail
Below is the responce i got from ipswitch sales. Steve Good Morning Steve - Here are the plans set forth by Ipswitch regarding the New Collaboration Suite. If you should have any questions, please let me know. Best Regards, Renee Breckenridge Service Sales Representative Email - [EMAIL PROTECTED] www.ipswitch.com We have released our New Ipswitch Collaboration Suite. http://www.ipswitch.com/Products/collaboration/index.html Ipswitch Collaboration Suite Provides: E-mail collaboration Standards-based email Discussion lists and e-mail groups Real-time collaboration Secure instant messaging Workgroup collaboration with MS Outlook Shared calendaring Global address books Protection of the collaboration system Anti-spam protection Anti-virus subscriptions Backed by Ipswitch service and support One year of support & updates included IMail’s functionality has been incorporated into the Ipswitch Collaboration Suite and is no longer offered on an individual basis for new purchases or for renewals. Imail is now only offered as a part of the Ipswitch Collaboration Suite. Ipswitch is offering customers of Imail, a limited-time opportunity to purchase Ipswitch Collaboration Suite at a deeply discounted price. To cross grade to the New ICS, please choose the Premium or Standard edition and what User Level you require. The User Levels are 25, 100, 250 and Unlimited. ICS Standard Edition consists of: IMail Server, Instant Messaging, AV Standard, Shared calendaring and Global address books and a one-year Service Agreement. ICS Premium Edition consists of: IMail Server, Instant Messaging, AV Premium, Shared calendaring and Global address books and a one-year Service Agreement. ICS ISP/EDU Edition consists of: IMail Server, AV Premium, Killer WebMail and a one-year Service Agreement The Premium Edition with Symantec Anti-Virus Protection: Symantec's Scan Server technology utilizes their Live Update Technology which does not require an interruption of the services. It also is designed to quickly scan for viruses and is ideal for high traffic environments. The Standard Edition with Bit Defender Anti-Virus Protection: Bit Defender is more for low traffic environments and requires that you interrupt the services when applying a Server update. To apply Live Virus definition updates you would need to implement Bit Defender's command line utility named "AVUpdate.exe" Ipswitch Collaboration Suite, Premium Edition with Symantec Anti-Virus Protection ***Special Pricing for Current Imail Customers 25 Users$ 695 100 Users $ 1,495 250 Users $ 2,995 Unlimited $ 5,995 Ipswitch Collaboration Suite, Standard Edition with Bit Defender Anti-Virus Protection ***Special Pricing for Current Imail Customers 25 Users$ 595 100 Users $ 1,295 250 Users $ 2,495 Unlimited $ 4,995 Ipswitch Collaboration Suite, ISP Edition with Symantec Anti-Virus Protection (Does not include shared calendars or instant messaging) ***Special Pricing for Current Imail Customers Unlimited $ 3,995 Purchasing Ipswitch Collaboration Suite at these special prices will allow you to continue service on your IMail Server, and will deliver additional capabilities such as shared calendars, secure instant messaging, anti-spam, and anti-virus protection. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 27, 2004 11:53 PM To: [EMAIL PROTECTED] Subject: #Ipswitch_Collaboration_Suite# Ipswitch Sales Inquiry fromSteve Sender : [EMAIL PROTECTED] Tracking Number : Pool: Contracts Sent to : <[EMAIL PROTECTED]> Date: 10/27/04 11:54 PM --- Forwarded by: Traci Casparius (no comments entered) --- #Ipswitch_Collaboration_Suite# Ipswitch Sales Inquiry from Steve Keeling First Name: Steve Last Name: Keeling Company Name: Keeling Inc. Phone Number: Product:Ipswitch_Collaboration_Suite Cust Type: existing *** Email Message Follows *** I realy hope that your new combo colaboration is not the way of the future for Imail server. We have been a customer since 1998. We are a small ISP and the added cost would be a show stopper for us! And the features you are adding are things we have very little need of. I also do not see any support contracts for customers that don't want to move up to this new bundle?? I would be very intersted in hearing your plans, as we have always depended on Ipswitch to be there to support the product we have come to love! Steve Keeling --- [This E-mail was scanned for viruses as a service to Keeling Inc. Customers] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-
RE: [Declude.Virus] Imail 8 Purchase
Hi, >> All I want right now is 8.1 and any bug fixes to it for the next 12 months. And they can have my $500 for that. << Well - you could try: http://www.cdw.com/shop/products/default.aspx?EDC=494317 Here they even show 27 "in-stock": http://www.provantage.com/buy-7ipsw23j-imail-professional-license-service-ag reement-ipswitch-me-7200-0800-shopping.htm You may be lucky and buy "stocked" items from a reseller that Ipswitch will have to honor. Best Regards Andy Schmidt H&M Systems Software, Inc. 600 East Crescent Avenue, Suite 203 Upper Saddle River, NJ 07458-1846 Phone: +1 201 934-3414 x20 (Business) Fax:+1 201 934-9206 http://www.HM-Software.com/ --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] IMail?
Don't you ever sleep? Good night. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of Sanford Whiteman > Sent: Tuesday, September 21, 2004 12:34 AM > To: Hirthe, Alexander > Subject: Re: [Declude.Virus] IMail? > > > where can I buy IMail? (not at Ipswitch.com, cheaper :) > > Google and Froogle are your friends. > > --Sandy > > > > Sanford Whiteman, Chief Technologist > Broadleaf Systems, a division of > Cypress Integrated Systems, Inc. > e-mail: [EMAIL PROTECTED] > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] IMail?
CDW John Tolmachoff Engineer/Consultant/Owner eServices For You -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hirthe, Alexander Sent: Tuesday, September 21, 2004 12:27 AM To: [EMAIL PROTECTED] Subject: [Declude.Virus] IMail? Hello, where can I buy IMail? (not at Ipswitch.com, cheaper :) Alex
Re: [Declude.Virus] IMail?
> where can I buy IMail? (not at Ipswitch.com, cheaper :) Google and Froogle are your friends. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] IMail?
Hello, where can I buy IMail? (not at Ipswitch.com, cheaper :) Alex
RE: [Declude.Virus] Imail Version 8.1
I installed them repeatedly to try and solve the problem. I finally deleted all the .exe and .dll files in Imail and reloaded it from the download, re-applied the HF2 and now I'm not getting the mailbox unavailable (yet), but I am getting reboots due to a bug check. I never did get LDAP to work right. Gene Head ACCRAM Inc. MCP,Net+,A+,CCNA,CCDA [EMAIL PROTECTED] [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Friday, April 23, 2004 5:48 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail Version 8.1 > We have been using 8.1 for a few weeks now. We have had numerous > problems with mailboxes being locked or unavailable. You may want to > wait for 8.11 due out in about 3 weeks. > > Gene Have you installed this 2 hotfixes of 8.1? In my experience, no mailbox locked, maybe due to I installed these 2 immediately after installation, but there is some minor problem, like when users click "Go Back" in webmail, often got "page can not display". a.. IMail Server 8.1 Hotfix 2 - April 8, 2004 This hotfix fixes a possible handle leak in mailbox.dll which could result in locked mailboxes. a.. IMail Server 8.1 Hotfix 1 - April 5, 2004 [included in 8.1 Hotfix 2] This hotfix fixes Queue Manager ERR 005 when delivering to multiple nested subfolders. > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry > Sent: Thursday, April 22, 2004 3:08 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Imail Version 8.1 > > > >Are there any issues with using version 8.1 with Declude? I am > thinking > >of upgrading our servers to 8.1. We are running declude 1.79. Any > thoughts? > > There are no known issues running IMail v8.1 with 1.79 (there is a minor > > issue with Declude v1.75 and earlier, where IMail v8.1 would cause some > E-mails to be scanned multiple times -- for Declude Virus, it would just > > cause a minor performance hit). > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in > mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > > > --- > Incoming mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- > This email has been scanned by Antivirus software in Crejob.com hosting server > > --- This email has been scanned by Antivirus software in Crejob.com hosting server --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail Version 8.1
> We have been using 8.1 for a few weeks now. We have had numerous > problems with mailboxes being locked or unavailable. You may want to > wait for 8.11 due out in about 3 weeks. > > Gene Have you installed this 2 hotfixes of 8.1? In my experience, no mailbox locked, maybe due to I installed these 2 immediately after installation, but there is some minor problem, like when users click "Go Back" in webmail, often got "page can not display". a.. IMail Server 8.1 Hotfix 2 – April 8, 2004 This hotfix fixes a possible handle leak in mailbox.dll which could result in locked mailboxes. a.. IMail Server 8.1 Hotfix 1 – April 5, 2004 [included in 8.1 Hotfix 2] This hotfix fixes Queue Manager ERR 005 when delivering to multiple nested subfolders. > > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry > Sent: Thursday, April 22, 2004 3:08 PM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Imail Version 8.1 > > > >Are there any issues with using version 8.1 with Declude? I am > thinking > >of upgrading our servers to 8.1. We are running declude 1.79. Any > thoughts? > > There are no known issues running IMail v8.1 with 1.79 (there is a minor > > issue with Declude v1.75 and earlier, where IMail v8.1 would cause some > E-mails to be scanned multiple times -- for Declude Virus, it would just > > cause a minor performance hit). > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in > mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > > > --- > Incoming mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 > > > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- > This email has been scanned by Antivirus software in Crejob.com hosting server > > --- This email has been scanned by Antivirus software in Crejob.com hosting server --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail Version 8.1
We have been using 8.1 for a few weeks now. We have had numerous problems with mailboxes being locked or unavailable. You may want to wait for 8.11 due out in about 3 weeks. Gene -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, April 22, 2004 3:08 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail Version 8.1 >Are there any issues with using version 8.1 with Declude? I am thinking >of upgrading our servers to 8.1. We are running declude 1.79. Any thoughts? There are no known issues running IMail v8.1 with 1.79 (there is a minor issue with Declude v1.75 and earlier, where IMail v8.1 would cause some E-mails to be scanned multiple times -- for Declude Virus, it would just cause a minor performance hit). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.656 / Virus Database: 421 - Release Date: 4/9/2004 --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail Version 8.1
Are there any issues with using version 8.1 with Declude? I am thinking of upgrading our servers to 8.1. We are running declude 1.79. Any thoughts? There are no known issues running IMail v8.1 with 1.79 (there is a minor issue with Declude v1.75 and earlier, where IMail v8.1 would cause some E-mails to be scanned multiple times -- for Declude Virus, it would just cause a minor performance hit). -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail Version 8.1
Are there any issues with using version 8.1 with Declude? I am thinking of upgrading our servers to 8.1. We are running declude 1.79. Any thoughts? Jim Matuska Jr.Computer Tech IICCNANez Perce TribeInformation Systems[EMAIL PROTECTED]
RE: [Declude.Virus] Imail 8.1
I may have to concur on this. I have a user that receives messages forwarded from another account. This morning, I saw the headers of one and it appeared to have be passed through Declude twice, but I have had a hairy morning and have not been able to follow up. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > On Behalf Of R. Scott Perry > Sent: Thursday, April 01, 2004 1:34 PM > To: [EMAIL PROTECTED] > Subject: RE: [Declude.Virus] Imail 8.1 > > > >This happens to me too. > > > >I am not using a copyall account. > > It seems that IMail v8.1 will send forwarded mail through Declude a second > time. > > We haven't confirmed this yet, and unfortunately Ipswitch hasn't provided > us with a copy of IMail v8.1 yet, so we are unable to test this yet, or > determine what will be necessary for a workaround. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail 8.1
This happens to me too. I am not using a copyall account. It seems that IMail v8.1 will send forwarded mail through Declude a second time. We haven't confirmed this yet, and unfortunately Ipswitch hasn't provided us with a copy of IMail v8.1 yet, so we are unable to test this yet, or determine what will be necessary for a workaround. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail 8.1
This happens to me too. I am not using a copyall account. Regards, Steinar > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of William Baumbach > Sent: 1. april 2004 03:17 > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Imail 8.1 > > since I upgraded to 8.1 I now get double enteries added to the FOOTER > "botton" of each incomming email > > outgoing emails seem to be OK > > GLOBAL.CFG > WEIGHT-F weightrange xx -1000 1000 > > $default$.junkmail > WEIGHT-F FOOTER %CR%[ scanned for spam to: %ALLRECIPS% %INOROUT% > http://www.%LOCALHOST% on %DATE% at %TIME%-0500et. ]%CR% > > and this line also is added twice > > Virus.cfg > FOOTER %CR%[ scanned for viruses to: %ALLRECIPS% %INOROUT% > http://www.%LOCALHOST% on %DATE% at %TIME%-0500et. ]%CR% > > > > Sincerely, > > William J. Baumbach II [EMAIL PROTECTED] > 9975 Pennsylvania Ave. Manassas, Va. 20110-2028 > Ph: 703-367-7900 ext:1708 Fax: 703-691-0946 > - > > - Original Message - > From: "R. Scott Perry" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Wednesday, March 31, 2004 2:55 PM > Subject: Re: [Declude.Virus] Imail 8.1 > > > > >Are there any issues between Declude antivirus or junkmail > and Imail 8.1 > >we need to be aware of or address if/when we choice to upgrade? > > I assume not, but since Ipswitch did not invite us to the > IMail v8.1 beta, > I can't answer for certain. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail > mailservers > since 2000. > Declude Virus: Ultra reliable virus detection and the leader > in mailserver > vulnerability detection. > Find out what you've been missing: Ask for a free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > [ scanned for spam to: [EMAIL PROTECTED] incoming > http://www.DcMetroNet.com on 03/31/2004 at 14:58:10-0500et. ] > > [ scanned for viruses to: [EMAIL PROTECTED] incoming > http://www.DcMetroNet.com on 03/31/2004 at 14:58:13-0500et. ] > > > > > [ scanned for spam to: [EMAIL PROTECTED] outgoing > http://www.DcMetroNet.com on 03/31/2004 at 20:17:45-0500et. ] > > This email message is for the sole use of the intended > recipient(s) and may contain confidential and privileged > information. Any unauthorized review, use, disclosure or > distribution of this email is prohibited. If you are not the > intended recipient, please contact the sender and destroy all > paper and electronic copies of this message. > > [ scanned for viruses to: [EMAIL PROTECTED] outgoing > http://www.DcMetroNet.com on 03/31/2004 at 20:17:48-0500et. ] > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
since I upgraded to 8.1 I now get double enteries added to the FOOTER "botton" of each incomming email It looks like IMail may be running Declude once for each recipient (it looks like you are using a copyall account). Do you have the IMail and Declude log file entries for an E-mail with the double footers? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
since I upgraded to 8.1 I now get double enteries added to the FOOTER "botton" of each incomming email outgoing emails seem to be OK GLOBAL.CFG WEIGHT-F weightrange xx -1000 1000 $default$.junkmail WEIGHT-F FOOTER %CR%[ scanned for spam to: %ALLRECIPS% %INOROUT% http://www.%LOCALHOST% on %DATE% at %TIME%-0500et. ]%CR% and this line also is added twice Virus.cfg FOOTER %CR%[ scanned for viruses to: %ALLRECIPS% %INOROUT% http://www.%LOCALHOST% on %DATE% at %TIME%-0500et. ]%CR% Sincerely, William J. Baumbach II [EMAIL PROTECTED] 9975 Pennsylvania Ave. Manassas, Va. 20110-2028 Ph: 703-367-7900 ext:1708 Fax: 703-691-0946 - - Original Message - From: "R. Scott Perry" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, March 31, 2004 2:55 PM Subject: Re: [Declude.Virus] Imail 8.1 >Are there any issues between Declude antivirus or junkmail and Imail 8.1 >we need to be aware of or address if/when we choice to upgrade? I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta, I can't answer for certain. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. [ scanned for spam to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 03/31/2004 at 14:58:10-0500et. ] [ scanned for viruses to: [EMAIL PROTECTED] incoming http://www.DcMetroNet.com on 03/31/2004 at 14:58:13-0500et. ] [ scanned for spam to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 03/31/2004 at 20:17:45-0500et. ] This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution of this email is prohibited. If you are not the intended recipient, please contact the sender and destroy all paper and electronic copies of this message. [ scanned for viruses to: [EMAIL PROTECTED] outgoing http://www.DcMetroNet.com on 03/31/2004 at 20:17:48-0500et. ] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
> I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta, > I can't answer for certain. ooo those dirty rats! probly because their anti-spam setup is looks like Fisher-Price stuff compared to Declude :-) Rick --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail 8.1
Scott: Are there any issues between Declude antivirus or junkmail and Imail 8.1 we need to be aware of or address if/when we choice to upgrade? Thanks, John --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail 8.1
Are there any issues between Declude antivirus or junkmail and Imail 8.1 we need to be aware of or address if/when we choice to upgrade? I assume not, but since Ipswitch did not invite us to the IMail v8.1 beta, I can't answer for certain. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail Queue Manager/SMTP at 100% after declude & f-prot updates
The server is a Compaq Proliant with Dual Piii 800's, RAID 5 (I know - RAID 1,0 is better - it's on the schedule to be re-config'd), 1GB RAM, defragged by diskkeeper every nite We run IMAIL program on C: and spool & mailboxes on D: I identified the outside hit increase as coming from an outside address sending mail in; have blocked te address and all is running smooth again Sincerely, Randy Armbrecht Global Web SolutionsR, Inc. 804-346-5300 ext. 1 877-800-GLOBAL (4562) ext. 1 http://globalweb.net Richmond's Internet Source since 1996! WEB HOSTING including EMAIL beginning at $29/month! Non-Profits - receive a 25% discount! -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Friday, March 19, 2004 10:18 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Imail Queue Manager/SMTP at 100% after declude & f-prot updates >We have been running Declude JM Pro and Declude Virus Standard for >almost 2 years now; it wasn't until shortly afer the updates to both >Declude and F-Prot yesterday that this occurred...The CPU with all >services running is sustained normally between the 20%-50% range with >peaks to 75% > >We generally average about: >LocalDeliver29000 >RemoteDeliver9500 If you have a single 500MHz CPU, you'll likely see the CPU usage you describe. A dual 2GHz CPU server, though, should not. >However, in the daily report we generate overnight that I got this >a.m., the RemoteDeliver from yesterday was up to 22,000. I am looking >into where these extra messages were generated from right now. > >[I am still a little concerned as to why the server was pegged at 100% >for a double increase in usage; it seems to me the server should be >able to handle much more than that.] If the server has an older CPU, or if the server is doing other tasks (SQL, web, etc.), that would explain the problem. When the server is at 100% CPU, when you use Task Manager, click on the Processes tab, and then click on the CPU button, what process(es) are closest to the top (using the most CPU)? One process at near 100% CPU usage? Several processes that together use up close to 100% CPU? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This message was Virus Scanned by GlobalWeb.net] --- [This message was Virus Scanned by GlobalWeb.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail Queue Manager/SMTP at 100% after declude & f-prot updates
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of R. Scott Perry Sent: Thursday, March 18, 2004 4:53 PM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail Queue Manager/SMTP at 100% after declude & f-prot updates >Anyone else having problems with CPU at 100% after updating to Declude >1.78i27 and the f-prot 3.14e? > >I have reverted back to previous versions of both products and still no >let up on CPU; spool directory just keeps climbing... If you go to the Task Manager, click on the Processes tab, and click the "CPU" button, it will sort the processes by CPU usage. Which process(es) are at the top with the highest CPU usage? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- The top 4 services cycles between Quemanager Declude (one to four instances) POP3d SMTPd If I stop declude, CPU goes back to normal (20-50%). Obviously, I do not want to do that and leave everything uprotected. (I can go without Spam filtering for a while; but not virus filtering. I have uninstalled F-Prot and re-installed it. Sincerely, Randy Armbrecht Global Web SolutionsR, Inc. 804-346-5300 ext. 1 877-800-GLOBAL (4562) ext. 1 http://globalweb.net --- [This message was Virus Scanned by GlobalWeb.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail Queue Manager/SMTP at 100% after declude & f-prot updates
Anyone else having problems with CPU at 100% after updating to Declude 1.78i27 and the f-prot 3.14e? I have reverted back to previous versions of both products and still no let up on CPU; spool directory just keeps climbing... If you go to the Task Manager, click on the Processes tab, and click the "CPU" button, it will sort the processes by CPU usage. Which process(es) are at the top with the highest CPU usage? -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Ultra reliable virus detection and the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail Queue Manager/SMTP at 100% after declude & f-prot updates
Anyone else having problems with CPU at 100% after updating to Declude 1.78i27 and the f-prot 3.14e? I have reverted back to previous versions of both products and still no let up on CPU; spool directory just keeps climbing... Sincerely, Randy Armbrecht Global Web SolutionsR, Inc. 804-346-5300 ext. 1 877-800-GLOBAL (4562) ext. 1 http://globalweb.net --- [This message was Virus Scanned by GlobalWeb.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] [IMail Forum] New virus Bagle.J can't be caught by standard virus scanners
-Scott I'm in favor you competing the programming around the BANEXT EZIP line to include all files within the .zip file. I know I would like to from this point forward block encrypted zip files until there is a business reason for my company not to. If my virus scanners cannot scan the encrypted files for viruses this remains a risk. Scott Fisher Director of IT Farm Progress Companies >>> [EMAIL PROTECTED] 03/03/04 08:08AM >>> FYI, there is a new virus that came out yesterday, Bagle.J. It spreads in an encrypted .ZIP File. While an AV program can detect a normal virus in an encrypted .ZIP file (by the name, file length, or CRC (the "fingerprint" of the file)), Bagle.J uses random file names, random file sizes, and random CRCs. So it is unlikely that AV programs will be able to detect it. As a result, we are recommending that users of Declude Virus ban all .ZIP files that contain encrypted files. To do this, you need to be running the latest interim release, and add a line "BANEXT EZIP" to your virus.cfg file (it can go anywhere in the file). To get the latest interim release, you must be covered by a Service Agreement; you can download it from http://www.declude.com/interim . -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers since 2000. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/ --- [This E-mail scanned for viruses by Farm Progress Companies using Declude Virus] --- [This E-mail scanned for viruses by Farm Progress Companies using Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail and Spyware Protection
Remember though, most Spyware gets onto a users computer via Internet browsing usage and security configuration on the computer and in the browser, not through e-mail. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Bill Landry > Sent: Monday, January 26, 2004 7:56 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Imail and Spyware Protection > > Pest Patrol is a spyware application that is support by Declude Virus, at > least it is shown in the manual at > http://www.declude.com/virus/manual.htm. > > Bill > - Original Message - > From: "Bridges, Samantha" <[EMAIL PROTECTED]> > To: <[EMAIL PROTECTED]> > Sent: Monday, January 26, 2004 7:49 AM > Subject: RE: [Declude.Virus] Imail and Spyware Protection > > > Thanks scott. > > I use F-Prot and I don't know if they block this. I will check it out. > > Samantha > > -Original Message- > From: R. Scott Perry [mailto:[EMAIL PROTECTED] > Sent: Monday, January 26, 2004 10:20 AM > To: [EMAIL PROTECTED] > Subject: Re: [Declude.Virus] Imail and Spyware Protection > > > > >How do you know if spyware is on a PC? Does Declude or Imail identify > >and remove sneakly applications such as these? > > That is up to the AV program. Most AV programs do not attempt to detect > > spyware. However, if the AV program you use with Declude Virus is > capable > of detecting spyware, then it will get caught with Declude Virus. > > -Scott > --- > Declude JunkMail: The advanced anti-spam solution for IMail mailservers. > Declude Virus: Catches known viruses and is the leader in mailserver > vulnerability detection. > Find out what you've been missing: Ask about our free 30-day evaluation. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > --- > [This E-mail scanned for viruses by Declude Virus] > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail and Spyware Protection
Doesn't all spyware that comes via email run as an executable? I assume you can tell Imail to ditch all *.exe files and this would slow spyware down from the mail side. Since most spyware comes through Internet browsing on the desktop, I would recommend Lavasoft's Ad Aware. It's good and free. -Rob At 07:56 AM 1/26/2004 -0800, you wrote: Pest Patrol is a spyware application that is support by Declude Virus, at least it is shown in the manual at http://www.declude.com/virus/manual.htm. Bill - Original Message - From: "Bridges, Samantha" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, January 26, 2004 7:49 AM Subject: RE: [Declude.Virus] Imail and Spyware Protection Thanks scott. I use F-Prot and I don't know if they block this. I will check it out. Samantha -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED]] Sent: Monday, January 26, 2004 10:20 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail and Spyware Protection >How do you know if spyware is on a PC? Does Declude or Imail identify >and remove sneakly applications such as these? That is up to the AV program. Most AV programs do not attempt to detect spyware. However, if the AV program you use with Declude Virus is capable of detecting spyware, then it will get caught with Declude Virus. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". The archives can be found at http://www.mail-archive.com. Robert T. Jackson Product Management Rackspace Managed Hosting (210) 892-4000 ext. 1518
Re: [Declude.Virus] Imail and Spyware Protection
Pest Patrol is a spyware application that is support by Declude Virus, at least it is shown in the manual at http://www.declude.com/virus/manual.htm. Bill - Original Message - From: "Bridges, Samantha" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, January 26, 2004 7:49 AM Subject: RE: [Declude.Virus] Imail and Spyware Protection Thanks scott. I use F-Prot and I don't know if they block this. I will check it out. Samantha -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Monday, January 26, 2004 10:20 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail and Spyware Protection >How do you know if spyware is on a PC? Does Declude or Imail identify >and remove sneakly applications such as these? That is up to the AV program. Most AV programs do not attempt to detect spyware. However, if the AV program you use with Declude Virus is capable of detecting spyware, then it will get caught with Declude Virus. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail and Spyware Protection
I use F-Prot and I don't know if they block this. I will check it out. They do not. Very, very few AV programs detect spyware. If you want to detect spyware sent in E-mail, it may be best to use a program like PestPatrol with Declude Virus in addition to F-Prot. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail and Spyware Protection
Thanks...my thoughts exactly. Samantha -Original Message- From: John Tolmachoff (Lists) [mailto:[EMAIL PROTECTED] Sent: Monday, January 26, 2004 10:20 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Imail and Spyware Protection Checking for Spyware would be the responsibility of a desktop application, not at the e-mail server level. Most Spyware is installed as the result of user internet browser use. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Bridges, Samantha > Sent: Monday, January 26, 2004 7:13 AM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: [Declude.Virus] Imail and Spyware Protection > > Recently, I read an article about spyware. Does Declude or Imail > address this issue with their product(s)? A quote from an article > states: "Network Associates will become the latest security software > maker to address the growing problem of stealth surveillance software > known as spyware." > > How do you know if spyware is on a PC? Does Declude or Imail identify > and remove sneakly applications such as these? > > Here is the full article: > > MCAFEE ADDS SPYWARE PROTECTION > Software will identify and remove sneaky applications. > http://www.pcworld.com/news/article/0,aid,114421,tk,dn012304X,00.asp > > Thanks and I look forward to any responses. > > > Samantha Bridges > Communications Technician > Macomb Intermediate School District > 44001 Garfield Road > Clinton Township MI 48038-1100 > (586) 228-3300 > > [EMAIL PROTECTED] > http://www.misd.net > > > CONFIDENTIALITY NOTICE: This email message, including any attachments, > is for the sole use of the intended recipient(s) and may contain > confidential and privileged information. Any unauthorized review, use, > disclosure or distribution is prohibited. If you are not the intended > recipient, please contact the sender by reply email and destroy all > copies of the original message. > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To unsubscribe, > just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail and Spyware Protection
Thanks scott. I use F-Prot and I don't know if they block this. I will check it out. Samantha -Original Message- From: R. Scott Perry [mailto:[EMAIL PROTECTED] Sent: Monday, January 26, 2004 10:20 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail and Spyware Protection >How do you know if spyware is on a PC? Does Declude or Imail identify >and remove sneakly applications such as these? That is up to the AV program. Most AV programs do not attempt to detect spyware. However, if the AV program you use with Declude Virus is capable of detecting spyware, then it will get caught with Declude Virus. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail scanned for viruses by Declude Virus] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail and Spyware Protection
How do you know if spyware is on a PC? Does Declude or Imail identify and remove sneakly applications such as these? That is up to the AV program. Most AV programs do not attempt to detect spyware. However, if the AV program you use with Declude Virus is capable of detecting spyware, then it will get caught with Declude Virus. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail and Spyware Protection
Checking for Spyware would be the responsibility of a desktop application, not at the e-mail server level. Most Spyware is installed as the result of user internet browser use. John Tolmachoff Engineer/Consultant/Owner eServices For You > -Original Message- > From: [EMAIL PROTECTED] [mailto:Declude.Virus- > [EMAIL PROTECTED] On Behalf Of Bridges, Samantha > Sent: Monday, January 26, 2004 7:13 AM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: [Declude.Virus] Imail and Spyware Protection > > Recently, I read an article about spyware. Does Declude or Imail > address this issue with their product(s)? A quote from an article > states: "Network Associates will become the latest security software > maker to address the growing problem of stealth surveillance software > known as spyware." > > How do you know if spyware is on a PC? Does Declude or Imail identify > and remove sneakly applications such as these? > > Here is the full article: > > MCAFEE ADDS SPYWARE PROTECTION > Software will identify and remove sneaky applications. > http://www.pcworld.com/news/article/0,aid,114421,tk,dn012304X,00.asp > > Thanks and I look forward to any responses. > > > Samantha Bridges > Communications Technician > Macomb Intermediate School District > 44001 Garfield Road > Clinton Township MI 48038-1100 > (586) 228-3300 > > [EMAIL PROTECTED] > http://www.misd.net > > > CONFIDENTIALITY NOTICE: This email message, including any attachments, > is for the sole use of the intended recipient(s) and may contain > confidential and privileged information. Any unauthorized review, use, > disclosure or distribution is prohibited. If you are not the intended > recipient, please contact the sender by reply email and destroy all > copies of the original message. > > > --- > [This E-mail was scanned for viruses by Declude Virus > (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail and Spyware Protection
Recently, I read an article about spyware. Does Declude or Imail address this issue with their product(s)? A quote from an article states: "Network Associates will become the latest security software maker to address the growing problem of stealth surveillance software known as spyware." How do you know if spyware is on a PC? Does Declude or Imail identify and remove sneakly applications such as these? Here is the full article: MCAFEE ADDS SPYWARE PROTECTION Software will identify and remove sneaky applications. http://www.pcworld.com/news/article/0,aid,114421,tk,dn012304X,00.asp Thanks and I look forward to any responses. Samantha Bridges Communications Technician Macomb Intermediate School District 44001 Garfield Road Clinton Township MI 48038-1100 (586) 228-3300 [EMAIL PROTECTED] http://www.misd.net CONFIDENTIALITY NOTICE: This email message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] IMail server Memory Dump.
IM running 1.65 Kevin Shimwell Link Brokers Group, LLC ( Support ) 401 Ist Ave. North North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Support http://www.linkbrokers.com/support_ticket.cfm Support M-F 1-888-546-5631 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of R. Scott Perry Sent: Tuesday, October 28, 2003 1:05 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: Re: [Declude.Virus] IMail server Memory Dump. >Anyone knows of any known problems with Imail and declude causing it to just >shutting down and restart. ( The server that is. ) No, we're not aware of any such problems. You might want to send the information on the memory dump to Ipswitch, so they can see what happened. >Declude version IM not sure. How do I find out. From the manual, you can type "\IMail\Declude -diag" from a command prompt to see which version you are running. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] IMail server Memory Dump.
Anyone knows of any known problems with Imail and declude causing it to just shutting down and restart. ( The server that is. ) No, we're not aware of any such problems. You might want to send the information on the memory dump to Ipswitch, so they can see what happened. Declude version IM not sure. How do I find out. From the manual, you can type "\IMail\Declude -diag" from a command prompt to see which version you are running. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you've been missing: Ask about our free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] IMail server Memory Dump.
Anyone knows of any known problems with Imail and declude causing it to just shutting down and restart. ( The server that is. ) I'm getting a problem every 6 -7 hours. I'm using the latest version of I mail on Windows server 2000 with all the latest MS patches. Declude version IM not sure. How do I find out. Kevin Shimwell Link Brokers Group, LLC ( Support ) 401 Ist Ave. North North Myrtle Beach, SC 29582 Phone: 843-663-1004 Fax: 843-663-1007 Email: [EMAIL PROTECTED] 24/7 Support http://www.linkbrokers.com/support_ticket.cfm Support M-F 1-888-546-5631 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail Issues
Hello all. In an attempt to help everyone with issues than have been reported lately, I have put together a survey that I would like everyone to take. I will then post the results here as well as send them to Ipswitch for review. I know we are all busy, but if I can take the hour it took to create this, you can take 5 minutes to fill it out. No tracking is being done, only the answers. (No IPs, No countries, No browser type, no e-mail, nothing.) The link is this: http://www.createsurvey.com/cgi-bin/pollfrm?s=11436&magic=HoUsvn3wsnt8eJb There are no images, hence the red boxes. (Hey, what do you expect for free?) I will leave this up until next Wednesday night, October 8. Thanks for you participation. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail upgrades
we are looking of upgrading from Imail 6.06 to 8.x, what I am wondering is the following - Is there any declude issues about 8 that we should be aware of ? - Will Imail 8.x run ok on a system with the following spec (Dual PII 450, 1gig of ram, running 60 gig raid0) ? - How long does upgrade take, how long will the server be physically down any answers will be helpful -Bruce Burge --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] IMail 7.15 and F-Prot 3.14
I don't see anything unusual in the declude or imail logs and my virus.cfg has SCANFILE e:\F-Prot\Fpcmd.exe -TYPE -SILENT -NOMEM -ARCHIVE -NOBOOT -DUMB -REPORT=report.txt I'll have to wait until the next lockup/error message. Chris > server. I'm running Declude Virus v1.70 also. Chris, you know we need the error message. Maybe even a log snippet or 2. F-Prot 3.14 shouldn't be able to cause an SMTP error. Are you using F-Prot.exe or fpcmd.exe (in the SCANFILE line in the \IMail\Declude\virus.cfg file)? If you are using F-Prot.exe, I would --- [This E-mail scanned for viruses by Declude/F-Prot AV] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] IMail 7.15 and F-Prot 3.14
> Since upgrading to F-Prot 3.14 windows (without real-time) I've now seen > web messaging lock up twice and I get a SMTP error on the IMail > server. The error message (didn't write it down) is a pop-up window on the > server. I'm running Declude Virus v1.70 also. Chris, you know we need the error message. Maybe even a log snippet or 2. John Tolmachoff MCSE CSSA Engineer/Consultant eServices For You www.eservicesforyou.com --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] IMail 7.15 and F-Prot 3.14
Since upgrading to F-Prot 3.14 windows (without real-time) I've now seen web messaging lock up twice and I get a SMTP error on the IMail server. The error message (didn't write it down) is a pop-up window on the server. I'm running Declude Virus v1.70 also. F-Prot 3.14 shouldn't be able to cause an SMTP error. Are you using F-Prot.exe or fpcmd.exe (in the SCANFILE line in the \IMail\Declude\virus.cfg file)? If you are using F-Prot.exe, I would recommend switching to fpcmd.exe (and removing the "/NOFLOPPY" option in the SCANFILE line). Some servers have a very hard time dealing with lots of 16-bit processes (F-Prot.exe is 16-bit), and it could potentially account for web messaging locking up. -Scott --- Declude JunkMail: The advanced anti-spam solution for IMail mailservers. Declude Virus: Catches known viruses and is the leader in mailserver vulnerability detection. Find out what you have been missing: Ask for a free 30-day evaluation. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] IMail 7.15 and F-Prot 3.14
Since upgrading to F-Prot 3.14 windows (without real-time) I've now seen web messaging lock up twice and I get a SMTP error on the IMail server. The error message (didn't write it down) is a pop-up window on the server. I'm running Declude Virus v1.70 also. Chris --- [This E-mail scanned for viruses by Declude/F-Prot AV] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail v8.0 and Declude
Ok don't know about the 700 emails, but I think I have found the problem with the slowness of the server. Now this is strange. I found in one of my hosted virtual domains that the root had a forwarding email address that wasn't any good. I took it out ( have no idea of why it was in there, but I know the address ) and everything seems to be running much faster now. So I turned back on the dns cache and the bad domain thing. -- Original Message -- From: Smart Business Lists <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Sat, 28 Jun 2003 14:48:57 -0500 >Saturday, June 28, 2003 you wrote: >AS> You mean the dns cache and/or the bad domains thingamajig ? > >dns cache. > >But I turned the bad domains off, too. > > > > >Terry Fritts > > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus".The archives can be found >at http://www.mail-archive.com. >--- >[This E-mail scanned for viruses by Declude Virus By Avolve.net] > > -- Avolve Support Get High Speed Internet - Go Wireless ! http://www.avolvewireless.net -- --- [This E-mail scanned for viruses by Declude Virus By Avolve.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail v8.0 and Declude
Dag gone it, it didn't work for me. -- Original Message -- From: Smart Business Lists <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Sat, 28 Jun 2003 14:48:57 -0500 >Saturday, June 28, 2003 you wrote: >AS> You mean the dns cache and/or the bad domains thingamajig ? > >dns cache. > >But I turned the bad domains off, too. > > > > >Terry Fritts > > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus".The archives can be found >at http://www.mail-archive.com. >--- >[This E-mail scanned for viruses by Declude Virus By Avolve.net] > > -- Avolve Support Get High Speed Internet - Go Wireless ! http://www.avolvewireless.net -- --- [This E-mail scanned for viruses by Declude Virus By Avolve.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail v8.0 and Declude
Saturday, June 28, 2003 you wrote: AS> You mean the dns cache and/or the bad domains thingamajig ? dns cache. But I turned the bad domains off, too. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail v8.0 and Declude
You mean the dns cache and/or the bad domains thingamajig ? -- Original Message -- From: Smart Business Lists <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Sat, 28 Jun 2003 11:49:44 -0500 > >Saturday, June 28, 2003 you wrote: >AS> Are there any caveats besides to not use the spam services of >AS> version 8 with Declude ? Seems the queuemgr is taking up way more >AS> processing time and slowing everything down to a crawl and we >AS> noticed a few declude processess running also > >I couldn't use the Qmanager cache. It gave delivery failures. >Apparently it may have been a coincident or just me as others seem not >to have had the problem. But I turned it off and everything began >working fine for me. > > >Terry Fritts > > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus".The archives can be found >at http://www.mail-archive.com. >--- >[This E-mail scanned for viruses by Declude Virus By Avolve.net] > > -- Avolve Support Get High Speed Internet - Go Wireless ! http://www.avolvewireless.net -- --- [This E-mail scanned for viruses by Declude Virus By Avolve.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail v8.0 and Declude
Saturday, June 28, 2003 you wrote: AS> Are there any caveats besides to not use the spam services of AS> version 8 with Declude ? Seems the queuemgr is taking up way more AS> processing time and slowing everything down to a crawl and we AS> noticed a few declude processess running also I couldn't use the Qmanager cache. It gave delivery failures. Apparently it may have been a coincident or just me as others seem not to have had the problem. But I turned it off and everything began working fine for me. Terry Fritts --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail v8.0 and Declude
Are there any caveats besides to not use the spam services of version 8 with Declude ? Seems the queuemgr is taking up way more processing time and slowing everything down to a crawl and we noticed a few declude processess running also. -- Avolve Support Get High Speed Internet - Go Wireless ! http://www.avolvewireless.net -- --- [This E-mail scanned for viruses by Declude Virus By Avolve.net] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[OT]Re: [Declude.Virus] IMail Instant Messaging?
Join the IPSwitchIM_Forum and repost your question. The short answer is yes we bought it, and no it don't work. I believe they are they are trying to fix the problems but don't quote me on that. Haven't had any positive confirmation from them yet. ~Rick - Original Message - From: "Hirthe, Alexander" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, February 15, 2003 7:40 AM - SATCOM Subject: [Declude.Virus] IMail Instant Messaging? > Hello, > > has anybody tried the IMail Instant Messaging? > How does this work? > Is it just an add-on for IMail, so Declude Junkmail and Declude Virus will > work, or is it a complete new version with it's own SMTP engine, own users, > ...? > > Alex > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > --- > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus".The archives can be found > at http://www.mail-archive.com. > ___ > Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. > > ___ Virus Scanned and Filtered by http://www.FamHost.com E-Mail System. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] IMail Instant Messaging?
Hello, has anybody tried the IMail Instant Messaging? How does this work? Is it just an add-on for IMail, so Declude Junkmail and Declude Virus will work, or is it a complete new version with it's own SMTP engine, own users, ...? Alex --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail List problems?
> >Looks like they are having problems with their Imai AntiVirus. Uhmm.. that > >happens when you don't use Declude :-) OK Scott, what did you do to their server? ;) You caught me -- I neglected to urge them to run Declude Virus on their live servers. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] \IMail\Spool\.vir folders with version 1.63
Thanks guys, I'll keep an eye out for 1.64. -Bill Naber -- Original Message -- From: "R. Scott Perry" <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Mon, 02 Dec 2002 16:28:29 -0500 > >>12/02/2002 02:05:49 Q064c576702f6c5a3 (Error 5 at 42b90a v1.63) >>12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 2 saved as C:\declude.gp2) >>12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 1 saved as C:\declude.gp1) > >There was an issue with 1.63 that could cause this, that is fixed in the >latest interim release. We should be releasing v1.64 (beta) in the next >few days that will also take care of this. >-Scott > >--- >[This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > >--- >This E-mail came from the Declude.Virus mailing list. To >unsubscribe, just send an E-mail to [EMAIL PROTECTED], and >type "unsubscribe Declude.Virus".The archives can be found >at http://www.mail-archive.com. > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] \IMail\Spool\.vir folders with version 1.63
12/02/2002 02:05:49 Q064c576702f6c5a3 (Error 5 at 42b90a v1.63) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 2 saved as C:\declude.gp2) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 1 saved as C:\declude.gp1) There was an issue with 1.63 that could cause this, that is fixed in the latest interim release. We should be releasing v1.64 (beta) in the next few days that will also take care of this. -Scott --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] \IMail\Spool\.vir folders with version 1.63
If you were using an interim release of 1.63 you need to use the latest version. John Tolmachoff MCSE, CSSA IT Manager, Network Engineer RelianceSoft, Inc. Fullerton, CA 92835 www.reliancesoft.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Declude Virus Sent: Monday, December 02, 2002 1:02 PM To: [EMAIL PROTECTED] Subject: [Declude.Virus] \IMail\Spool\.vir folders with version 1.63 I noticed a number of D*.vir folders being created under \Imail\Spool since I started running version 1.63. Approximately 2600 folders were created over the last week. I'm using F-Prot as my scanner and haven't made any changes to it except definition updates. I've switched back to 1.60 and the folders are no longer being created - so there is no panic. Below is a log file snippet (level at MID): 12/02/2002 02:05:49 Q064c576702f6c5a3 (Error 5 at 42b90a v1.63) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 2 saved as C:\declude.gp2) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 1 saved as C:\declude.gp1) 12/02/2002 02:05:51 Q064f374d035acedb (Error 5 at 42b90a v1.63) 12/02/2002 02:05:51 Q064f374d035acedb (log part 2 saved as C:\declude.gp2) 12/02/2002 02:05:51 Q064f374d035acedb (log part 1 saved as C:\declude.gp1) Let me know if I can be of further help with tracking down this issue. -Bill Naber --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com. found at http://www.mail-archive.com. --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] \IMail\Spool\.vir folders with version 1.63
I noticed a number of D*.vir folders being created under \Imail\Spool since I started running version 1.63. Approximately 2600 folders were created over the last week. I'm using F-Prot as my scanner and haven't made any changes to it except definition updates. I've switched back to 1.60 and the folders are no longer being created - so there is no panic. Below is a log file snippet (level at MID): 12/02/2002 02:05:49 Q064c576702f6c5a3 (Error 5 at 42b90a v1.63) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 2 saved as C:\declude.gp2) 12/02/2002 02:05:49 Q064c576702f6c5a3 (log part 1 saved as C:\declude.gp1) 12/02/2002 02:05:51 Q064f374d035acedb (Error 5 at 42b90a v1.63) 12/02/2002 02:05:51 Q064f374d035acedb (log part 2 saved as C:\declude.gp2) 12/02/2002 02:05:51 Q064f374d035acedb (log part 1 saved as C:\declude.gp1) Let me know if I can be of further help with tracking down this issue. -Bill Naber --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
Re: [Declude.Virus] Imail relay - will declude scan for virus.
-- Original Message -- From: "Timothy C. Bohen" <[EMAIL PROTECTED]> >We have a customer that wants to run their own mail server. If I setup imail >to act as a relay can I provide them with virus scanning using our declude? Yes ... I do the now for both myself and several other offsite machines ... I have the Imail with Declude Virus/Junkmail acting as a front-end MX for all of my domains and off-site customers ... all email comes to it, Declude does its thing before passing the email along. Works great! David --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
[Declude.Virus] Imail relay - will declude scan for virus.
We have a customer that wants to run their own mail server. If I setup imail to act as a relay can I provide them with virus scanning using our declude? Thanks Timothy C. Bohen CMSInter.Net LLC / Crystal MicroSystems LLC === web : www.cmsinter.net email: [EMAIL PROTECTED] phone: 989.235.5100 x222 fax : 989.235.5151 --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus".The archives can be found at http://www.mail-archive.com.
RE: [Declude.Virus] Imail/Declude Log Analyzer v1.32
That's pretty much all that changed. It depends how far back you started using usage.cmd. If you started at 1.0-1.2 you'll probably want to start fresh. Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sheldon Koehler Sent: Thursday, February 28, 2002 10:56 AM To: [EMAIL PROTECTED] Subject: Re: [Declude.Virus] Imail/Declude Log Analyzer v1.32 > This version should deal with the 1st day of the month and leap years. Can we just cut and paste the first of the month and leap year sections or did you change a lot more? Sheldon --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Imail/Declude batch file log parser/reporter version 1.3
A quick and dirty patch courtesy of Steven Jurgensmeyer. The only other thing to fix that I am aware of is logic for creating yesterdays date when yesterday was the lsat day of the month (28th 29th 30th or 31st). That one should be fun. I won't be getting to that anytime soon... This log file parser has been quite a test in patience for me as it started off pretty simple and got pretty complicated. I still like the command line, but Linux is where I like to live from a systems admin standpoint. If it weren't just for the challenge of it, I would've scp'd (Secure SHell copy) the logs to a Linux server running SSH with pscp.exe and just parsed the logs with regular expressions in a Linux shell, but what fun would that have been? Anyway, I felt like contributing in a way that would help others. Eventually I'll put this up on one of the Imail tools sites, but it needs better documentation first... Best regards, Jeff Pitoniak PCE Systems, Inc. -- "If your only tool is a hammer, pretty soon everything starts to look like a nail."-Dr. William Learner, Chiropractor Usage1-3.zip Description: Zip compressed data
RE: MISSING_REVERSE_DNS:Re: [Declude.Virus] Imail/declude batch file log parser problems
Sorry, I couldn't bring myself to do that, but this certainly works. I was looking more for a suggestion regarding coverting octal to decimal without relying on things already included with NT. I am sure however that anyone using this command should fin this useful. Thanks for sharing, Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Steven Jurgensmeyer Sent: Wednesday, January 09, 2002 4:46 PM To: [EMAIL PROTECTED] Subject: MISSING_REVERSE_DNS:Re: [Declude.Virus] Imail/declude batch file log parser problems here was my quick down and dirty work around. ::Skip report if day is 1st for now... IF %dd% EQU 01 goto end IF %dd% EQU 02 (set yd=01) IF %dd% EQU 03 (set yd=02) IF %dd% EQU 04 (set yd=03) IF %dd% EQU 05 (set yd=04) IF %dd% EQU 06 (set yd=05) IF %dd% EQU 07 (set yd=06) IF %dd% EQU 08 (set yd=07) IF %dd% EQU 09 (set yd=08) ::IF %pd% LEQ 9 (set yd=%pd%) else (set yd=%pd%) - Original Message - From: "Jeff Pitoniak" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 09, 2002 2:18 PM Subject: [Declude.Virus] Imail/declude batch file log parser problems > > I have found the problem I have been having. The NT command interpeter > interpets numeric values that begin with the number 0 as octal. The numbers > 8 and 9 are not valid octal(0-7) numbers. > > The zero is need because it's in the name of the log file. I am currently > working on a solution. Any suggestions would be appreciated. > > Best regards, > Jeff > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
MISSING_REVERSE_DNS:Re: [Declude.Virus] Imail/declude batch file log parser problems
here was my quick down and dirty work around. ::Skip report if day is 1st for now... IF %dd% EQU 01 goto end IF %dd% EQU 02 (set yd=01) IF %dd% EQU 03 (set yd=02) IF %dd% EQU 04 (set yd=03) IF %dd% EQU 05 (set yd=04) IF %dd% EQU 06 (set yd=05) IF %dd% EQU 07 (set yd=06) IF %dd% EQU 08 (set yd=07) IF %dd% EQU 09 (set yd=08) ::IF %pd% LEQ 9 (set yd=%pd%) else (set yd=%pd%) - Original Message - From: "Jeff Pitoniak" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 09, 2002 2:18 PM Subject: [Declude.Virus] Imail/declude batch file log parser problems > > I have found the problem I have been having. The NT command interpeter > interpets numeric values that begin with the number 0 as octal. The numbers > 8 and 9 are not valid octal(0-7) numbers. > > The zero is need because it's in the name of the log file. I am currently > working on a solution. Any suggestions would be appreciated. > > Best regards, > Jeff > > > --- > [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] > > This E-mail came from the Declude.Virus mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and > type "unsubscribe Declude.Virus". You can E-mail > [EMAIL PROTECTED] for assistance. You can visit our web > site at http://www.declude.com . > > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
[Declude.Virus] Imail/declude batch file log parser problems
I have found the problem I have been having. The NT command interpeter interpets numeric values that begin with the number 0 as octal. The numbers 8 and 9 are not valid octal(0-7) numbers. The zero is need because it's in the name of the log file. I am currently working on a solution. Any suggestions would be appreciated. Best regards, Jeff --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: MISSING_REVERSE_DNS:RE: [Declude.Virus] Imail/declude log parser...
John,
I have attached the most recent version which is formatted a little
differently with more error checking and feedback included. This file might
work better for you.
Either replace the date formatting section with the code below...
::Creates date variables
for /f "tokens=1-4 delims=/ " %%a IN ('DATE/T') do (
set day=%%a
set mm=%%b
set dd=%%c
set year=%%d
set /A pd=%%c-1)
::Skip report if day is 1st for now...
IF %dd% EQU 1 goto end
IF %pd% LEQ 9 (set yd=0%pd%) else (set yd=%pd%)
...or just replace the old USAGE.CMD with the new one in the attached zip
file and modify it. It's easier to get configured as you just run it and it
tells you what's missing. Once the script can find everything it needs it
starts working.
Best regards,
Jeff Pitoniak
PCE Systems, Inc.
-Original Message-
From: John Shacklett [mailto:[EMAIL PROTECTED]]
Sent: Tuesday, January 08, 2002 12:53 PM
To: [EMAIL PROTECTED]
Subject: RE: MISSING_REVERSE_DNS:RE: [Declude.Virus] Imail/declude log
parser...
Jeff, I just had this same error pop up after weeks of using your usage tool
without incident. I attached a file with the cmd output. Just FYI.
C:\>SETLOCAL
C:\>SET sys=c:\winnt\system32\
C:\>SET spl=c:\imail\spool\
C:\>SET log=D:\Logs\
C:\>SET send=c:\imail\imail1.exe
C:\>SET [EMAIL PROTECTED]
C:\>FOR /F %z IN ('TIME/T') DO set time=%z
C:\>set time=12:43p
C:\>FOR /F "tokens=1-4 delims=/ " %a IN ('DATE/T') DO (SET day=%a & SET
mm=%b & SET dd=%c & SET year=%d & SET /A pd=%c-1 )
C:\>(SET day=Tue & SET mm=01 & SET dd=08 & SET year=2002 & SET /A
pd=08-1 )
Invalid number. Numeric constants are either decimal (17),
hexidecimal (0x11), binary (0b10001) or octal (021).
C:\>IF EQU 0 GOTO END
0 was unexpected at this time.
C:\>
Usage1-2.zip
Description: Zip compressed data
Re: [Declude.Virus] [IMail Forum] [Kinda OT... It's A Gloat] Declude And F-Prot - What Else...
I changed lists to declude as it's more relevant. the auto update is nice but IMO the scheduled bat file is nicer. I slightly modified the ftp script to include a dir list of the *.def files before and after getting the updated files. The info is e-mailed to me in the script. that way, I know in the morning if I have new def files from the prior night also I know that it worked as I get results in e-mail as well... bob On Friday, December 14, 2001 1:52 PM, T. Bradley Dean <[EMAIL PROTECTED]> wrote: >It's Friday so I figured gloating would be allowed... > >Declude caught two virus attachments this morning! Both, as luck would have >it, were sent to aliases that forward to a list of 6 Outlook (clueless) >managers and cube dwellers. And the specific attachments were not ones that >would have been caught by my old rules.ima file - which is what I used for >virus protection up until earlier this week. > >Thanks go out to Declude, F-Prot, and (of course) to this list. > >One note: I decided to switch from F-Prot DOS to F-Prot Windows. It's twice >the price but still dirt cheap, and as another list member said - the >automatic updates make all the difference! > >~Brad > > >Please visit http://www.ipswitch.com/support/mailing-lists.html >to be removed from this list. > >An Archive of this list is available at: >http://www.mail-archive.com/imail_forum%40list.ipswitch.com/ > --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
MISSING_REVERSE_DNS:RE: [Declude.Virus] Imail/declude log parser...
Don, I'm not sure. There isn't enough information for me to tell where the problem is. "09" is not supposed to be 9,dec, hex, or octal. It is a string (alhanumeric) because it is referring part of a filename(i.e. log1209.txt). I have never seen logfiles named "log129.txt", they are always named "log1209.txt". Actually getting this script to generate the zero in front of a "less than 10 day of the month" after subtracting 1 from the day was one of the trickiest parts of this batch script because there isn't a straight forward way to convert a decimal back into a string that I am aware of. When you subtract, the NT command processor converts the string into an integer which will never retain the zero in front. Comment out the "@echo off" in the first line usage.cmd by putting two colons in front of it (::@echo off ), save the command script. Open a command prompt, switch to the directory where the usage.cmd is located and type: usage 1 > usage.log 2>&1 This will redirect all standard and error output into the usage.log file. Attach this file to your reply so I can see what's going on and I'll see what I can do. Here is a snippet of output in Windows 2000 professional SP2 (the same command processor as W2K Server) showing all of the date variables generated by the command script. C:\>usage 8:59a Mon, 12-10-2001 (yesterday: 09) The reason for yesterday is that the script processes the previous day's logs after the day has ended so they are complete. Regards, Jeff -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Don Brown Sent: Sunday, December 09, 2001 11:56 AM To: [EMAIL PROTECTED] Subject: RE: [Declude.Virus] Imail/declude log parser... At 05:15 PM 12/6/01 -0500, you wrote: >Put this usage.cmd in c:\tools (or modify paths in the scipt to match where >you put it) The batch file is failing here because the day is 09 instead of a decimal 9. It complains it is not dec, hex or octal. How do I fix this. Running Windows 2000 server. Thanks, Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED]http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com .
RE: [Declude.Virus] Imail/declude log parser...
At 05:15 PM 12/6/01 -0500, you wrote: >Put this usage.cmd in c:\tools (or modify paths in the scipt to match where >you put it) The batch file is failing here because the day is 09 instead of a decimal 9. It complains it is not dec, hex or octal. How do I fix this. Running Windows 2000 server. Thanks, Don Brown - Dallas, Texas USA Internet Concepts, Inc. [EMAIL PROTECTED]http://www.inetconcepts.net PGP Key ID: 04C99A55 (972) 788-2364 Fax: (972) 788-5049 Providing Internet Solutions Worldwide - An eDataWeb Affiliate --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)] This E-mail came from the Declude.Virus mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.Virus". You can E-mail [EMAIL PROTECTED] for assistance. You can visit our web site at http://www.declude.com . --- [This E-mail was scanned for viruses by Declude Virus (http://www.declude.com)]
[Declude.Virus] IMAIL Upgrading ..
It appears that when you upgrade Imail, it overwrites the SenderName.Key in the registry so that it is pointing back to Imail\SMTP32.exe ... all you need to do is change it back to being Imail\declude.exe ... at least that appears to be what our most recent problem was :) Billy K, Webmaster ebase, LLC
